Privacy Policy

Mobile app

The Other Bali mobile app does not require an account. It creates a random pseudonymous guest reference for the installation. The reference is not your name, email address, phone number or advertising identifier. The app sends it in encrypted HTTPS requests so Supabase can keep your cloud state associated with that installation.

The app keeps a catalogue cache and navigation state on your device. When cloud sync is available, it sends the place or event references you save or add to Today, Trip titles and dates, chosen areas and travel style, Trip stops and order, notes, visited state, and the versions and request identifiers needed for reliable offline sync. Supabase stores this sync state for Other Bali. A Decision request transiently sends choices such as area, company, moment, budget and where you want the day to end so the server can return suggestions; the current mobile route does not store that Decision request or a guest-linked feed session.

Location is requested only after you choose Use my current area. Your device converts the raw GPS coordinates to one of the supported Bali areas. Raw GPS coordinates are not stored by Other Bali or sent to our API through that feature; the derived area and the venue choices you make can be sent as part of decision or sync state. You can deny location and choose an area manually.

Mutable cloud state remains associated with the active pseudonymous guest reference until you remove it with the in-app deletion action, use the external browser privacy choice for browser state, or ask support to review a deletion request.

Offline map downloads and onboard routing are unavailable in this release. The iOS app does not include the Mapbox Maps or Navigation SDK, and its local native bridge reports every offline capability as unavailable. The Android app still includes the Mapbox provider, but the release manifest exposes no downloadable regions, access remains gated, and provider telemetry defaults off. If a tested download or routing control is introduced later, this notice and the store disclosures will be updated before that feature is released.

To load and refresh the catalogue, place details, and routes, the app sends encrypted HTTPS requests to www.otherbali.com. Our hosting provider, Vercel, processes the requested path, IP address and approximate city or country derived from it, user agent, request identifiers, response status, and operational diagnostics. Runtime logs are currently accessible to us for up to one day so we can operate, secure, and troubleshoot the service, after which they expire under the current hosting retention setting.

These operational requests are necessary to deliver the online catalogue. Vercel processes this information to provide hosting, security, and troubleshooting under its applicable service and privacy terms. Other Bali does not use this operational data for advertising or cross-service tracking.

Opening Maps, an official website, or the system share sheet is a user-initiated handoff. Those destinations handle information under their own policies. You can remove individual items inside the app. Delete cloud data removes the app's pseudonymous Saved, Today, Trip, notes, visited, decision, feed and sync state from our database after the server confirms deletion. Uninstalling removes remaining local app data, but uninstalling alone cannot ask the server to delete cloud state; use the in-app action first or copy the displayed Anonymous Guest Reference and include it when contacting support through this external privacy page.

After confirmed deletion, the server keeps only a bare revoked pseudonymous guest reference and its erasure timestamp under the old installation reference, so an old or delayed app request cannot recreate the deleted state. It has no Saved, Today, Trip, note, visited, decision, feed, source or area data attached to it. This revocation marker is kept indefinitely so the old reference cannot become active again. The separately detached redemption proof exception, when one exists, is described under Your choices below.

The mobile app does not include advertising, cross-app tracking, advertising analytics SDKs, or a data-broker integration. The iOS app includes no Mapbox SDK or Mapbox telemetry path. On Android, the gated Mapbox provider defaults telemetry off.

Website data

The website uses a random pseudonymous browser reference in a strictly necessary httpOnly cookie to keep requested Saved and redeemed-offer state associated with this browser and to count whether a guest came from an Other Bali link or QR code. We may record basic interaction events, such as source scans, card opens, directions clicks, reservation clicks, and offer redemptions.

We do not ask travellers for an account, payment card, or profile. If you choose to join a guide list, we collect your first name, email address or WhatsApp number, optional travel date and trip interests, and your consent so we can keep the details and contact you about that guide.

If a venue uses partner onboarding, its representative may submit a name, optional contact, confirmation, photo-rights consent, and photos for private operator review. We also retain limited consent evidence such as time, terms version, IP address, and user agent.

How we use it

We use this information to operate the guide, keep attribution accurate, prevent fake proof, show your own redeemed offers on this device, respond to guide requests, review licensed venue photos, and give venues aggregate results. Venues see counts by default, not identifiable traveller data.

Optional analytics

Google Analytics 4 is off until you choose Accept. If you accept, Google processes page views and privacy-limited interaction events such as Maps, menu, reservation, WhatsApp, and delivery handoffs. Those events use page or venue references, not names, email addresses, phone numbers, payment details, or reservation details. Advertising storage, ad personalization, and cross-app tracking remain disabled.

Choosing Essential only keeps Google Analytics unloaded. You can change or withdraw your choice at any time on the privacy choices page. Other Bali still uses the strictly necessary operational and attribution records described above to deliver requested features.

Services you choose to open

Other Bali may hand you to Google Maps, WhatsApp, or TablePilot. Those services are separate from Other Bali and handle the information you give them under their own policies.

Your choices

The mobile app's Delete cloud data action removes its mutable pseudonymous cloud state and clears the app reference only after the server confirms deletion. The external privacy choices page can do the same for the separate browser reference. If you cannot access the app, send the displayed Anonymous Guest Reference that you copied before uninstalling to support@otherbali.com .

If redemption proof already exists, the automated action keeps that proof and its corresponding granted redemption consent evidence, but moves both to a new internal pseudonymous anchor that is not returned to the app, is no longer linked to the installation reference, and removes device fields such as the consent user agent. These detached records are retained only while needed to substantiate the completed redemption, complete accounting, resolve a dispute, or meet an applicable legal requirement; they are deleted when none of those purposes remains. Other consent rows tied to that guest reference are deleted. Venue-photo rights consent is a separate operator record and is not tied to the mobile guest reference. Because the old Anonymous Guest Reference is intentionally detached, it cannot locate this proof after deletion. For a separately reviewed request, contact us with the venue, approximate redemption date and confirmation code if available. You can choose not to redeem an offer if you do not want a new redemption recorded.

On the website, you can also turn optional analytics on or off, or delete the browser's mutable pseudonymous state, on the privacy choices page.

Contact

For privacy or support questions, contact support@otherbali.com.