Privacy Policy

Introduction

Ghumify is a Nepal-focused travel discovery, gamification and social platform. Features may include destination discovery, GPS-verified check-ins, XP, levels, leaderboards, Ghumify Passport, stamps and achievements, travel posts and stories, trips and groups, messaging, live-location sharing, events and other travel-related functionality.

This Privacy Policy applies to the Ghumify application, Ghumify website and related services.

Operator and contact details

Ghumify is currently operated by:

References to “Ghumify,” “we,” “us” or “our” in this Privacy Policy refer to Ghumify as operated by the individual developer identified above.

Public policy pages are located at:

If operation of Ghumify is later transferred to a registered company or another legal operator, we will update this Policy and provide appropriate notice.

Nepal-focused service

Ghumify’s current service is focused on travel within Nepal.

People who normally live in other countries may use Ghumify while visiting or travelling in Nepal.

Ghumify is not currently presented as a local travel platform for destinations outside Nepal.

Nothing in this Policy removes any privacy or other legal right that cannot lawfully be waived.

Age requirement

You must be 18 years of age or older to create or use a Ghumify account.

We collect your date of birth to determine eligibility.

Your full date of birth is private account information.

If we learn that an account belongs to a person under 18, we may immediately restrict or suspend access and stop unnecessary processing while the account is reviewed.

If the birth date was entered incorrectly, the user may request correction.

Otherwise, the underage account and associated personal information will be processed for deletion, generally within the account-deletion period described below, subject only to narrowly necessary safety, legal or evidentiary retention.

Information you provide

Account information. We may collect:

• email address
• private real name
• username
• display name
• date of birth
• authentication and verification information
• profile photograph
• account identifiers

Email verification may be required.

Google and Apple sign-in. If you use Google or Apple to sign in, we receive the information that the provider makes available to Ghumify with your authorization. We do not receive your Google or Apple password.

Profile information. Depending on the features you use, you may provide information such as:

• biography
• gender
• nationality or country
• home district or municipality
• language
• travel interests
• travel preferences
• activity or difficulty preferences

Optional fields are identified in the app.

Do not place confidential or highly sensitive information in fields intended to be public.

Travel, gamification and activity information

We process information relating to your activity on Ghumify, including where applicable:

• places saved
• check-ins and verified visits
• XP, levels and ranks
• stamps, badges and achievements
• district progress and Ghumify Passport
• leaderboard participation
• trips and trip groups
• events and challenges
• related activity history

Ghumify V1 does not award competitive credit for historical travel claims. Competitive visit rewards are based on eligible current verification methods.

User-generated content

We may process content that you create, upload, send or otherwise make available through Ghumify, including posts, photographs, videos, stories, captions, comments, trip information, place submissions, reviews or travel notes, event-related content, group content and other user-generated material.

Where supported, publicly served photographs are processed to remove embedded EXIF metadata.

Private media is intended to be served through access-controlled storage according to the applicable audience.

Messages and communications

Ghumify may process direct messages, message requests, group messages, images or videos sent in messages, voice messages, shared locations and other communications.

Messages are protected using security measures during transmission and storage.

Ghumify messages are not end-to-end encrypted.

Ghumify does not routinely read private conversations.

Authorized personnel may access reported messages or limited relevant context when reasonably necessary to investigate:

• a user report
• harassment or abuse
• child-safety concerns
• credible threats
• security incidents
• fraud
• legal requirements
• other serious violations

Access should be limited to what is reasonably necessary for the review.

Reports and support information

When you report content, an account or an interaction, Ghumify may process the reported content, account and content identifiers, the reason for the report, information you provide, relevant recent conversation context where necessary, and review and enforcement records.

We do not ordinarily disclose the reporter’s identity to the reported user.

We may also process information supplied through customer support, privacy, account-recovery, safety or legal requests.

Location information

No continuous account-level tracking. Having a Ghumify account does not mean that Ghumify continuously tracks your precise location. Location is accessed for specific features that you deliberately use.

Nearby. When you use Nearby, Ghumify may use your current location to identify nearby destinations. Nearby location is intended to be transient and is not used to create a permanent Nearby-location history.

GPS check-ins. When you intentionally perform an eligible check-in, Ghumify may collect a location sample containing:

• latitude
• longitude
• accuracy
• altitude where available
• timestamp
• speed where available
• heading where available

We may combine that information with security, account, network and platform-integrity signals.

Raw GPS retention. Raw ordinary check-in coordinates are normally retained for no more than 30 days from collection. After the raw coordinates are removed, the account may continue to contain the related visit result, XP, achievement or verification status while the account remains active. A specific fraud, safety or legal investigation may justify limited additional retention. Ordinary fraud-related GPS evidence should generally not remain longer than 90 days from collection unless a documented continuing reason and review date justify further retention.

Check-in privacy. Other users are not shown the specific destinations where you checked in merely because a check-in was completed. Ghumify may create aggregate statistics, such as the number of verified places visited during a month. You may voluntarily share an aggregate achievement or generated story or card. Sharing an aggregate does not make your underlying private check-in locations public.

Live location. Live-location sharing is:

• off by default
• started by the user
• limited to recipients selected by the user
• limited to a maximum session of one hour
• not automatically restarted when a session expires

The user must deliberately start another session to continue sharing. Live-location updates pause or stop when Ghumify is no longer actively operating in the foreground and stop when the app is closed. Ghumify does not use V1 live sharing for continuous closed-app background tracking.

You may stop sharing before the session expires. Blocking a recipient removes future access through Ghumify where technically possible. Recipients may screenshot, remember or independently store information they have already seen.

Live location is not an emergency monitoring or rescue service.

Device, network and security information

We may process:

• IP address
• app version
• operating system
• device type
• session information
• crash information
• diagnostic information
• security events
• permitted platform-integrity signals

These signals may be used to protect accounts, investigate abuse and validate check-ins.

Ghumify does not intentionally derive a permanent device fingerprint designed to uniquely identify a device after account deletion.

We may use IP information to estimate approximate location for security or abuse-prevention purposes.

Anti-cheat and verification information

For fair-play and fraud-prevention purposes, Ghumify may evaluate signals including:

• GPS accuracy
• impossible travel
• unusual movement or timing
• repeated check-ins
• IP or approximate-location anomalies
• unusual account or activity patterns
• emulator signals
• mock-location signals
• root or jailbreak indicators
• approved operating-system and platform-integrity signals

These signals are not individually treated as automatic proof of cheating. Automation does not independently impose a permanent ban.

How we use information

We use personal information to:

• create and authenticate accounts
• verify age eligibility
• provide travel discovery
• provide social functionality
• provide messaging and groups
• deliver Nearby and location features
• validate check-ins
• calculate XP, ranks and achievements
• maintain leaderboards
• generate Ghumify Passport and shareable achievements
• prevent fraud and manipulation
• investigate reports and enforce our rules
• protect users and accounts
• operate events
• respond to support requests
• diagnose technical problems and improve reliability
• protect the integrity of the service
• comply with applicable law
• establish or defend legal rights

Public and private profiles

Your account privacy setting determines how much of your account other people may access.

For a private account, people who do not have access to private content may still be shown limited information including:

• username
• display name
• profile photograph, if provided
• follower count
• leaderboard rank where applicable

Private-account status does not remove eligible users from Ghumify leaderboards. For private accounts, non-authorized viewers are not shown your detailed Passport, stamps, district progress or underlying private check-in history merely because those records exist.

Public accounts may expose additional profile information according to the fields and audiences shown in the app. Your full date of birth remains private.

Leaderboards

Eligible users participate in applicable leaderboards automatically.

Ghumify currently does not provide a general leaderboard opt-out.

Leaderboard display does not itself make a private user’s underlying check-in locations public.

Where a check-in is under additional verification, provisional XP from that check-in does not count competitively until cleared.

Service providers

Ghumify relies on service providers to operate its infrastructure.

Depending on the production feature, these providers may support functions such as authentication and databases, application and server hosting, media storage and delivery, push notifications, Apple or Google authentication, security, analytics, crash diagnostics, logging and uptime monitoring, and website or administration hosting.

Our production infrastructure may include providers such as Supabase, hosting infrastructure used by Ghumify, Cloudflare, Expo, Apple, Google, Sentry, PostHog, Better Stack and Vercel where those services are enabled.

Some providers may process information outside Nepal. Ghumify therefore does not represent that every piece of user information is physically stored only in Nepal.

Service providers are permitted to process information only for their applicable service role and subject to their applicable terms and safeguards.

Disclosure of information

We may disclose information:

To service providers

Where reasonably necessary for them to provide infrastructure or services to Ghumify.

For safety

Where reasonably necessary to protect a person against serious harm or respond to a serious safety issue.

For legal reasons

Where required by valid law, court order, government request or other lawful process.

To protect Ghumify

Where reasonably necessary to investigate serious abuse, defend legal rights or protect the integrity of the service.

We seek to limit disclosure to what is reasonably necessary for the relevant purpose.

Selling personal information

Ghumify does not sell private messages, private media or precise check-in GPS coordinates to advertisers.

Sponsored content and advertising

V1 does not rely on traditional third-party behavioral advertising networks.

Ghumify may later display clearly identified sponsored content, brand partnerships, paid partnerships or promotional campaigns.

A sponsor does not receive access to private account information merely because it sponsors content. Ghumify does not obtain a general right to use private user content for standalone advertising simply because the content was uploaded.

Where identifiable user content is proposed for a standalone marketing campaign, Ghumify will seek appropriate separate permission.

Marketing communications

Marketing emails, newsletters or promotional push notifications are optional where offered. You may change marketing preferences or unsubscribe.

Security, privacy, legal, account and essential service notices may still be sent.

Prizes and promotions

Ghumify’s ordinary XP, levels, stamps, badges, Passport and leaderboard positions are digital service features. They do not automatically entitle a user to cash, gifts or another prize.

Where Ghumify offers a specific competition, leaderboard prize, lucky draw, giveaway or other promotion, additional information may be collected to administer that promotion. The applicable Official Rules will explain eligibility, prize details, verification, data use and any sponsor involvement.

Retention

General retention periods include:

Account and profile

While the account remains active.

Raw ordinary check-in GPS

Up to 30 days.

Nearby position

Transient.

Live-location points

Limited to the active session and short operational cleanup.

Routine security records

Ordinarily up to 30 days.

Fraud GPS evidence

Ordinarily up to 90 days unless a specific documented need justifies longer retention.

Closed moderation evidence

Ordinarily up to 90 days after final closure.

Deleted content recovery data

Up to 30 days where recovery is offered.

Backups

Rolling expiry generally within 30 days.

A valid legal hold, serious safety investigation or other lawful requirement may justify limited longer retention. Such information should not be retained indefinitely merely because it was once connected with a fraud or moderation issue.

Stories

Stories disappear from ordinary audience view after approximately 24 hours. After expiry, a story may move to the account holder’s private Story Archive.

Archived stories remain available until the user deletes them or the account is finally deleted, subject to limited lawful exceptions.

Account deletion

You may initiate deletion through Settings, then Account, then Delete Account.

A public deletion request route is also available from the Account Deletion page on ghumify.com.

You may write to [email protected] if you cannot access your account.

After confirmation:

• your profile and ordinary social activity are disabled
• the account enters the deletion process
• permanent deletion is scheduled for completion within 30 days

During this period, deletion may be canceled only through an explicit Cancel deletion action. Simply signing in does not automatically cancel the deletion request.

What final account deletion removes

At final deletion, we delete or permanently de-link account-associated personal information including, as applicable:

• account information and profile information
• profile media
• posts, stories and Story Archive
• comments and uploaded media
• private trips
• check-ins and raw location data
• visit records linked to the account
• XP and achievement records linked to the account
• saved places
• ordinary support and account records
• other personal information associated with the account

Non-personal aggregate statistics may remain if they can no longer reasonably identify the deleted user.

Messages after account deletion

On final account deletion, ordinary message content, media, voice content and personal information associated with the deleted account are removed from active Ghumify conversations.

A neutral indicator such as “Deleted user” or “Message unavailable” may remain so that the remaining participant can understand the conversation structure.

Information another person independently copied or screenshotted outside Ghumify cannot be recalled. Narrow evidence may be separately retained where a specific legal or serious safety requirement requires it.

Individual content deletion

Where controls are provided:

• deleted posts may remain recoverable for up to 30 days
• comments may be removed from active systems promptly
• stories may be removed from the Story Archive
• “Delete for me” removes a message from your own view
• “Unsend for everyone” removes the applicable content from the conversation, subject to narrowly necessary safety and legal retention

Your choices and rights

You may use the app’s controls to manage:

• account privacy
• audiences
• message requests
• blocking
• marketing
• camera access
• microphone access
• photo access
• location access

Removing a device permission stops future use requiring that permission but does not automatically erase information already lawfully collected.

You may write to [email protected] to request appropriate access, correction, export, deletion, objection, restriction or withdrawal of consent.

Available rights depend on applicable law. We may verify account ownership proportionately before acting on a sensitive request.

Security

We use reasonable technical and organizational measures intended to protect user information, including where implemented encrypted connections, protected storage, authentication controls, restricted administrative access, private-media authorization, security logging, account session controls and infrastructure monitoring.

No internet service can guarantee absolute security.

Report suspected compromise to [email protected]. Never send us your password.

Child safety

Ghumify is an adults-only service but maintains child-safety protections throughout the platform. Child sexual abuse and exploitation, grooming and CSAM are strictly prohibited.

Concerns can be reported through the app or by writing to [email protected] with the subject Child Safety.

Do not send or redistribute suspected CSAM.

Third-party services

Ghumify may link to government agencies, maps, tourism providers, accommodation services or other independent third parties. Those services operate under their own policies.

A link from Ghumify does not make Ghumify responsible for an independent service’s privacy practices.

Business transfer

If Ghumify later operates through a registered company or other successor, information reasonably necessary to continue the service may be transferred to that operator.

Any successor must use the information consistently with applicable law and the privacy commitments in effect at the time, unless an appropriate new notice or permission is provided.

Changes

We may update this Privacy Policy when Ghumify changes. The effective date and version will be updated.

Material changes may receive additional in-app or other notice where appropriate.

Contact