PalloPrivacy policy
Last updated 21 October 2026
- We keep what you put in Pallo so we can show it to you on every phone you sign in on.
- We never sell your data, and Pallo has no ads and no ad trackers.
- Your location is used only while Pallo is open, and we don't keep a history of where you've been.
- You can delete your account in the app at any time, and it's gone right away.
Who we are
Pallo is a trip planning app made by ThunderEcho Labs, a small software studio in Toronto, Ontario, Canada. In this policy "we" means ThunderEcho Labs. If you have a question about your data, write to help@getpallo.app.
What we collect
Your account
Your email address and password, or the name and email Apple or Google share when you sign in with them. We never see your password itself, only a scrambled version of it. You can add a name and a profile photo.
Your trips
The trips, days and stops you add: place names and addresses, times, notes, flight numbers, how you plan to travel between stops, and the people you share a trip with.
Your settings
Your language, units, home city and airport, map app, which alerts you want and your quiet hours.
Your location
Only while you use Pallo, and only after you allow it. Pallo uses it to show you on the map, to find places near you and to work out how long it takes to reach your next stop. We don't track you in the background and we don't store where you've been.
Your phone, for alerts
A notification address for your phone, so we can send you alerts, and the alerts we sent you.
Ask Pallo
If you use Ask Pallo (part of Pro), the messages you send it and its answers, so you can come back to the chat later.
Purchases
When Pro goes on sale, Apple or Google take your payment. We only learn what you bought and until when, never your card.
How we use it
- To show your trips on your phones and to the people you share them with.
- To find places, opening hours, photos and travel times for your stops.
- To check your flights, stops and the weather, and alert you when something changes.
- To answer you when you write to us.
- To keep Pallo working and safe, for example to stop abuse.
We don't use your data for advertising, we don't sell it, and we don't build profiles of you for anyone else.
Who helps us run Pallo
A few companies do parts of the work for us. Each gets only what it needs for its part, and none may use it for anything else.
| Company | What it does | What it gets |
|---|---|---|
| Supabase | Stores your account and trips, and runs Pallo's servers | Everything listed above, except your location |
| Place search, opening hours, photos, travel times, weather warnings in Europe, Sign in with Google, and the emails with your sign-in codes | What you search for, your stops' places, your location when you look nearby, your email for codes | |
| Apple | Sign in with Apple and alerts on iPhone | Your sign-in and the alerts we send |
| Expo | Delivers alerts to your phone | Your phone's notification address and the alert's words |
| Anthropic | The AI behind Ask Pallo | Your Ask Pallo messages and the trip you ask about |
| AeroDataBox (through RapidAPI) | Flight times and changes | Flight numbers and dates |
| NAVITIME (through RapidAPI) | Train and bus routes in Japan | The start and end of a trip between two stops |
| Open-Meteo, USGS, GDACS, the US National Weather Service and Environment Canada | Weather, earthquakes, disasters and warnings | The map position of your stops, never who you are |
These companies may store data outside your country, including in the United States. This website also loads its fonts from Google Fonts.
Who else can see your trips
Only the people you invite. When you share a trip, they see that trip's plan and your name and profile photo. Your profile photo is kept at a private web address that isn't listed anywhere, but anyone who has that address can open it.
We'd only give data to the police or a court if Canadian law made us, and we'd tell you unless the law forbids it.
How long we keep it
As long as you have an account. A stop or trip you delete is gone from our servers right away. When you delete your account, your profile, trips, alerts, phones and Ask Pallo chats are erased within moments. Trips you own also disappear for the people you shared them with. Copies in our backups are overwritten within 30 days.
Your choices
- See or correct it. Almost everything is in the app. For anything else, write to us.
- Get a copy. Ask us and we'll send your data within 30 days.
- Delete it. In the app, or as described on Delete your account.
- Stop location or alerts. Turn them off in your phone's settings or in Pallo's Profile tab.
These rights apply wherever you live. If you're unhappy with how we handled your data, you can complain to the Office of the Privacy Commissioner of Canada or the data protection office where you live.
Children
Pallo isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has made an account, tell us and we'll delete it.
Changes
If we change this policy we'll update the date at the top. If a change matters, for example a new kind of data or a new company, we'll tell you in the app first.