Privacy Policy
Effective Date: October 11, 2026
This Privacy Policy explains what personal data Vanlii collects when you use the Vanlii mobile app and the vanlii.app website (together, the “Service”), how we use and share it, and the choices you have. Vanlii is operated from Ulaanbaatar, Mongolia.
1. Information You Give Us
- Account details: first and last name, username, email address, and password. Passwords are stored only as a one-way hash.
- Profile photo, if you choose to upload one.
- Content you post: reviews, ratings, review photos, comments, favorites, collections, and reports about content or businesses.
- Business information: if you register or manage a business, its name, description, category, address, map location, phone number, website, social links, opening hours, and photos. This information is shown publicly on the Service.
- Ownership claims: notes and proof photos you submit to verify that you own a business. These are reviewed by our team and are not shown publicly.
- Payments: when you buy a subscription or advertising, we keep a record of the invoice, amount, and status. Payments are processed by QPay and your bank; we do not receive or store your card or bank login details.
- Messages to us: your name, email address, and message when you use the contact form or email us.
2. Information Collected Automatically
- Location: with your permission, the app uses your device's location while it is open to show nearby places and directions. Location is sent with your search requests to return nearby results. We do not collect location in the background and do not keep a location history in your account. You can turn location access off at any time in your device settings.
- Photos: the app only accesses the photos you select to upload. It does not use your camera or microphone.
- Push notification token: if you allow notifications, we store a device token so we can send you notifications. You can turn notifications off in your device settings.
- Crash and error reports: when the app or our servers hit an error, diagnostic data is sent to our error-monitoring provider. This can include your device model, operating system, app version, IP address, and account ID.
- Server logs: our servers record technical request data such as IP address, requested address (which can include search coordinates), and time. Logs are used for security and troubleshooting and are kept only for a limited time.
The website does not use advertising or analytics cookies. It stores one small value in your browser to remember if you dismissed the “Open in app” banner.
3. How We Use Your Information
- To create and secure your account and keep you signed in
- To show businesses, maps, reviews, and nearby results
- To publish the reviews, photos, and business pages you choose to share
- To verify business ownership claims and process payments
- To send notifications you have allowed and reply to your messages
- To detect abuse, fraud, and spam, and to enforce our Terms of Service
- To find and fix bugs and improve the Service
We do not sell your personal data and we do not use it for third-party advertising.
4. What Other People Can See
Your username, name, profile photo, reviews, review photos, and comments are visible to other users. If you post a review anonymously, your identity is hidden from other users on that review and your comments in its thread. Business pages and their contact details are public.
5. Service Providers We Share Data With
We share data only with providers that help us run the Service, and only what they need to do so:
- Cloudflare to store and deliver uploaded photos
- Sentry for crash and error reporting
- Expo, Google, and Apple to deliver push notifications
- QPay to process payments
- Apple iCloud Mail to deliver contact form messages to us
- CARTO and OpenStreetMap map tiles and Google Fonts icons on the website, which receive your IP address when your browser loads them
- Google Play and the Apple App Store to distribute and update the app
We may also disclose information if required by law, to respond to valid legal requests, or to protect the rights and safety of Vanlii and its users.
6. Data Retention
We keep your account data for as long as your account is active. When your account is deleted, we delete or anonymize your personal data, except where we must keep limited records for legal, accounting, dispute, or fraud-prevention reasons. Public business pages you created may remain if the business is still listed, without your personal account details.
7. Your Choices and Rights
- You can view and edit your profile information in the app.
- You can turn off location, photo access, and notifications in your device settings.
- You can ask for a copy of your data, a correction, or deletion of your account by emailing us. See Delete Your Account for details.
8. Security
We use encrypted connections (HTTPS), hashed passwords, and access controls to protect your data. No system is perfectly secure, so we cannot guarantee absolute security.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be reflected by updating the Effective Date, and where appropriate we will notify you in the app.
11. Contact
For privacy questions or requests, contact admin@vanlii.app.
Related policies: Terms of Service and Anti-Piracy Policy.