Privacy Policy
Last updated: 13 November 2026
1. Who is responsible
Panos Karavousanos is the individual publisher and controller for RILLO and RILLO Business. Contact pkaravou@gmail.com for privacy enquiries and rights requests. This policy covers both apps and their shared account. Last updated: 13 November 2026.
2. Account and profile data
We process your account email and identifier, authentication and recovery information, username, display name and optional profile image to provide and protect your account. The apps also process friendships, crew memberships, invitations, in-app notifications and visibility preferences. Your password is handled by the authentication service; do not send passwords or recovery codes to support. Profile avatars are public storage content and are different from private stories.
3. Location, navigation and progress
Location is used for maps, navigation, Areas, checkpoints and visit verification. Active navigation may use location in the background when device permission allows. Data can include precise location, timestamps, trip distance, motion time, coverage cells, visit evidence and progress. The device also holds history and pending sync data. Server checks use the evidence needed to verify participation and prevent duplicate or fraudulent rewards. Turning off a permission can limit the related feature; stopping use does not automatically delete previously stored records.
4. Photos, stories and audiences
The camera or selected photos are used when you choose to capture or upload content. We process photos, captions, publication and viewing information, reports and blocking actions to operate stories and safety controls. Private story access is checked by the server. Its audience depends on story type, participation and the active period; authorised business members may access business-related stories. Public avatars and business images are not private stories. A story becoming unavailable to viewers does not mean every stored or backup copy has already been physically deleted.
5. Business and transaction records
We process business profiles, locations, memberships, role permissions, plans, campaigns, participation, issued entitlements, confirmations, redemptions and related audit records. Public business information is visible through the service. Authorised members access operational information according to their roles. Bank-transfer reconciliation is handled outside the apps by the publisher; the apps do not collect online-banking credentials. Businesses are responsible for their own handling of customer information received while fulfilling offers. Ask the relevant business about its separate practices.
6. Why we use data
We use account, navigation, participation and business data to perform the service you request. We rely on legitimate interests in protecting accounts, preventing fraud, enforcing offer rules, operating the service and handling support or disputes, balanced against your rights. Where consent is required for optional processing, you can withdraw it without affecting earlier lawful processing. Device permissions control access to device features and do not by themselves establish the legal basis for every subsequent use. Records may also be processed where needed to comply with legal obligations. We do not make decisions about employment, credit or similar legal eligibility through Q or XP.
7. Providers and recipients
Supabase provides authentication, database, storage and server functions. Google services support maps, place search and navigation. Authentication and support emails use Google Gmail and the receiving email provider, which process message content and delivery information. Apple processes TestFlight feedback and diagnostics under its own terms when you use TestFlight. Providers receive the information needed for their services; authorised business members and other users receive information according to the feature and audience you choose. Information may also be disclosed when required by law or to address a justified security or legal matter. Provider services can involve processing outside your country or the EEA; we do not represent that all data stays in Greece or the EU. Contact us for information about the arrangements and safeguards applicable to your data.
8. How long information is kept
Retention depends on the purpose and type of record. Account and profile information is kept while the account is used and as needed to resolve an account or deletion request. Trip and progress history is kept to provide history, sync and verification; locally stored information is separate from server copies. Story viewing ends under the applicable story period and audience rules; expired or removed media then follows storage cleanup rather than a guarantee of instant erasure. Offer and redemption records may remain as needed to honour an issued entitlement, prevent reuse, resolve disputes or meet legal record-keeping obligations. Support, safety and security records are kept only for the relevant matter, abuse prevention or applicable legal requirements. Backup copies follow the provider's recovery and rotation cycle and may outlast removal from live systems. These criteria, rather than a story's viewing timer or an app uninstall, determine retention. Contact us for information about a particular record or request.
9. Account deletion
You can initiate deletion of your shared account in either app at Settings > Account and legal > Delete account. The request concerns the shared RILLO account, associated personal data and uploaded content, subject to justified legal retention and other people's rights. Verification protects your account against unauthorised requests. The app distinguishes a server-confirmed request from completed deletion; a pending receipt is not proof that all database, authentication, media or backup copies have been removed. We communicate the status of the request and any applicable retention reason. If a request cannot be submitted or its progress needs clarification, contact pkaravou@gmail.com. Signing out, removing an app or returning to Free is not account deletion.
10. Your choices and rights
You can change the available profile visibility preferences in Privacy settings and manage location, camera and photo access in device settings. Those controls do not erase existing records or make public content private retroactively. Subject to applicable law, you may request access, correction, deletion, restriction or portability, object to processing based on legitimate interests, and withdraw consent where processing relies on it. Contact pkaravou@gmail.com; we may need proportionate information to verify identity. We respond within the applicable legal time limits and explain any lawful extension or refusal. You may complain to a competent supervisory authority, including the Hellenic Data Protection Authority at www.dpa.gr, without first contacting us.
11. Security and safe contact
Access is limited by authentication, server permissions and business roles. Private-media access and offer redemption are subject to server checks. No system can guarantee absolute security. Keep device access and account credentials secure. Never send passwords, recovery codes, banking credentials or unnecessary identity documents to support. Report suspected account misuse to pkaravou@gmail.com.
12. Policy updates
The date above identifies this policy version. We will communicate material changes through the apps or account contact where appropriate. The current policy is available from the sign-in screen and Account and legal in both apps. Contact pkaravou@gmail.com for a copy or questions.