Effective: 20 July 2026
Privacy Policy
This policy explains how Garly ("Garly", "we", "us") collects, uses, stores and shares information when you use the Garly website, Android application and related services (the "Service"). It also explains your choices and rights.
Important: Garly handles safety-related information. Some settings remain only on your device, while account features such as authentication, synced memories, conversations, trusted contacts, places, alerts and rewards may be processed on Garly servers. We do not claim that all data remains exclusively on your device.
1. Information we collect
| Category | Examples and source |
|---|---|
| Account and profile | Email address, Google account identifier, display name, language, country, birth year and profile preferences that you provide. |
| Safety and user content | Messages, memories, routines, safe or risky places, addresses and coordinates, trusted-contact details, safety settings and feedback that you choose to add. |
| Location and sensors | Precise or approximate location and motion/rotation readings when you grant permission and use location, map or Protection features. Motion readings are used to detect configured safety events and are not used for advertising. |
| Ambient sound (optional, off by default) | If you switch on ambient sound detection, the microphone opens only while Protection Mode is armed, and a permanent notification stays visible for as long as it is open. Sound is analysed entirely on your device to recognise danger sounds such as an alarm. Each fragment lives about five seconds in memory and is then overwritten. No audio from Protection Mode is recorded, stored, transmitted, or made available to us or to anyone else. The separate "event recording" preference is described in the app as planned and is not active: no recording has ever been produced or saved. The microphone test is separate. It opens only when you choose it and accept its notice, it can keep one short test clip encrypted on your device, and you can play, export or delete that clip yourself. It is never uploaded. |
| Background operation | While Protection Mode, a live journey or walk mode is running, Garly uses an Android foreground service so that location and motion monitoring continue when the screen is off. Android displays a persistent notification throughout. The service stops when you turn the feature off. |
| Communications and alerts | Alert text, location included in an alert, delivery status and identifiers needed to send an alert through a service you connect, such as Telegram or SMS. |
| Security, device and usage | Install identifier, session tokens, login and security events, IP address, browser/app version, diagnostic events and aggregated feature usage. A Privacy Lock PIN is never stored as text: the device keeps a one-way hash and Garly's server keeps a separately salted one-way hash, so that wrong attempts can be counted and limited across devices. If the PIN is entered wrongly too many times, Garly emails the account address to say so, and a forgotten PIN can be reset with a single-use code sent to that same address. |
| Rewards | Garly Points, referrals, eligibility events, wallet address if you voluntarily connect one, and acceptance of rewards terms. |
2. How we use information
- Provide authentication, account recovery, AI conversations, memories, safety profiles, maps, Protection, alerts, rewards and customer support.
- Keep each authenticated account's data separated and synchronise the information you choose across authorised sessions.
- Detect abuse, secure accounts, investigate incidents, debug errors and maintain the Service.
- Measure product performance using limited or aggregated analytics and improve Garly.
- Meet legal obligations and enforce our Terms of Use.
Where applicable, our legal bases include performing our contract with you, your consent (especially for location, sensors and optional integrations), our legitimate interests in operating and securing the Service, and compliance with law. You may withdraw permission through your device or Garly settings, although the related feature may then stop working.
3. Local storage and server storage
Garly uses local browser or app storage for interface state, selected preferences, account-scoped caches and the Privacy Lock hash. Garly servers process and may store account records, synced user content, security settings, conversations, memories, contacts, places, rewards and delivery records. Signing out clears active UI state; reinstall and account-isolation controls are designed to prevent one user's local data from opening under another account.
4. When information is shared
We do not sell personal information. We disclose only what is reasonably necessary to:
- Infrastructure, hosting, database, security and email providers that operate the Service for us.
- AI model providers that process conversation content to generate a response. Garly currently sends your message, recent conversation turns and an authorised summary of your app context, such as whether Protection Mode is on, the names and relationships of your trusted contacts, the names of your saved places and your evolution stage, to a third-party model provider so that a reply can be generated.Garly never adds your phone number, your trusted contacts' phone numbers, saved street addresses, GPS coordinates, account credentials or audio to what it sends. Anything you type yourself is, of course, part of your message. No microphone data is ever sent: ambient sound detection runs entirely on your device.
- Google when you choose Google Sign-In. Map providers when you open a map: address search uses OpenStreetMap's Nominatim service, and the map background is served by CARTO and OpenStreetMap tile servers. Loading map tiles necessarily tells those providers roughly which area you are looking at, in the same way any map on the web does. No map is loaded until you open one.
- Telegram, SMS providers or a trusted contact when you explicitly link a delivery method or approve/configure an alert. If a guardian separately enables preventive parental notices, Garly may send linked trusted contacts a short category-level notice when child-safe chat detects a concrete and imminent dangerous activity. The child's message and full conversation are not included in that notice.
- Professional advisers, authorities or other parties where required by law or necessary to protect rights and safety.
- A successor in a merger, financing, reorganisation or sale, subject to appropriate safeguards.
Third-party services have their own privacy terms. Information intentionally sent to a trusted contact is controlled by that recipient after delivery.
5. Retention and deletion
We retain information only for as long as needed to provide the Service, secure it, resolve disputes and meet legal obligations. Retention depends on the data type and whether your account remains active. You can delete memories and chat history inside Garly, request an export, or request account deletion. Verified deletion requests remove associated account data unless limited retention is required for security, fraud prevention, accounting or legal compliance.
Use the in-app deletion control, visit Delete your data, or email info@garlyapp.pro from the address connected to your account.
6. Children and teenagers
Users must meet the minimum age required in their country to consent to digital services. Where parental or guardian consent is required, the account must be created and supervised by that adult. Garly must not be used to collect a minor's data without the consent required by applicable law. A guardian may separately enable or disable preventive safety notices protected by the parental PIN. These notices are distinct from SOS alerts, are limited to a danger category rather than the chat text, and are sent only to trusted contacts linked by the account. Contact us if you believe a minor's information was provided improperly.
7. Security
We use technical and organisational safeguards including authenticated account scoping, encrypted network transport, password hashing, short-lived sessions, optional authenticator 2FA, and a Privacy Lock whose wrong attempts are counted and rate-limited on both the device and the server, with an email notice to the account owner when it blocks. No system can guarantee absolute security. Protect your device, email account, password, PIN and recovery codes, and notify us of suspected unauthorised access.
8. International transfers
Garly and its providers may process information in countries other than yours. Where required, we use recognised safeguards for international transfers. Privacy laws and government-access rules may differ between countries.
9. Your rights and choices
Depending on your location, you may request access, correction, export, deletion, restriction or objection; withdraw consent; and complain to a data-protection authority. You may also disable permissions, memory, integrations and Protection features. We may need to verify your identity before completing a request. We will not discriminate against you for exercising a privacy right.
10. Changes and contact
We may update this policy as Garly changes. We will update the effective date and provide additional notice when required. Questions and privacy requests can be sent to info@garlyapp.pro.
This policy is provided in English as the controlling version. You may contact us in any language supported by the app to request help understanding it.