This policy covers the srilor.com website only. The Srilor app for iPhone and Android has its own privacy policy, which you can read inside the app.
Who is responsible for this website?
Srilor (‘we’, ‘us’) runs srilor.com and is responsible for the personal information collected through it. You can reach us about privacy at hello@srilor.com.
This policy applies to this website. It does not cover other websites we link to, which have their own policies.
What information does srilor.com collect?
You can read the website without an account and without telling us who you are. Like most websites, our servers record basic technical information when you visit, such as your IP address, browser type, the pages you request and the time of the request. We use it to keep the site running and secure, and our hosting provider may process it for us.
We only collect personal details that you give us yourself, for example when you email us or use a contact form. We keep server logs only as long as we need them for security and fixing problems.
Does srilor.com use cookies or analytics?
The website may use a small number of cookies that it needs to work, for example to keep it secure or remember a setting you choose. These do not track you across other websites.
If analytics are enabled, we use them to count visits and see which pages are useful, in a form that does not identify you personally. Where the law requires it, we ask for your consent before setting analytics cookies, and you can change your choice at any time.
You can also block or delete cookies in your browser settings. The site still works without analytics cookies.
What happens to what I send through a contact form or by email?
When you email us or use a contact form, we receive your email address, your name if you give it and your message. We use them only to answer you and to deal with what you report, such as a correction to a place page.
We keep messages for as long as we need them to handle your request and any follow-up, then delete them. If you send a correction, we may keep the details of the change, without your name, as part of that place’s record.
Does the Srilor app have its own privacy policy?
Yes. The app handles different information, such as your account, Passport stamps and trips, and has its own privacy policy, which you can read inside the app.
Island Pass purchases are handled by Apple or Google under their own terms. We never see your card details.
What are my privacy rights, and how do I use them?
Privacy policy
Last updated: 10 October 2026
This policy explains what personal information Srilor collects, why, who else handles it, and the choices you have. It covers both the Srilor app for iPhone and Android and the website srilor.com.
The short version: we keep the least we can, we never sell your information or show you ads, and you can delete your account and everything in it from inside the app at any time.
Who is responsible for your information?
Srilor is made and run by Zeawis Ltd (“Srilor”, “we”, “us”), which is responsible for the personal information described here. [Add the company’s registered address here.]
You can reach us about anything in this policy at hello@srilor.com.
Using Srilor without an account
You can browse places, read the Guide and listen to the free first chapter of every story as a guest, without an account and without telling us who you are. Anything you set up as a guest (such as your traveller ticket) stays on your phone.
What the app collects, and why
Your account. When you create an account we keep your email address and your name. If you sign in with Apple or Google, they share your name and email address with us (with Apple you can choose to hide your real email). Your password is stored only in scrambled (hashed) form; we never see it. We use your account to keep your trips, stamps and purchases safe and to let you sign in on a new phone.
Your profile. If you choose, a profile picture, the country you are from and a short bio. Your name, picture, country and bio are shown to other travellers next to anything you share.
Your traveller ticket. Your answers to the ticket questions: when you land, how long you are staying, your pace, who is coming and what you love. We use them to suggest towns, places and plans that suit you. They are kept on your phone and, when you are signed in, on your account.
Your trips. The trips you plan: dates, the towns you sleep in, the places for each day, how you get around and any notes. If you add your own hotel booking to a night (its name, booking reference or link), we keep that too, so it is to hand at check-in. Srilor does not book hotels and does not share your bookings with anyone.
Location. If you allow it, the app uses your phone’s location while you have it open, to show the places near you, how far away they are, and to let you collect a passport stamp when you are at a place. Your location is worked out on your phone and is not sent to us as you move around. The only time we store a location is when you collect a stamp: we save the place and where you were at that moment, as proof of your visit. We never track your location in the background. You can turn location off at any time in your phone settings; everything else keeps working.
Things you share with other travellers. Notes, comments, likes, the travellers you follow, and pictures you add to a note or to a story (stories are shown for 24 hours). These are visible to other Srilor travellers. You can report or block any traveller, and reports come to our team so we can remove content that breaks the rules.
Photos. The app opens your photo library or camera only when you choose to add a picture, and only the picture you pick is uploaded.
Saved places and favourites. The places you save, the stories you like, and the places you keep offline.
Island Pass purchases. The Island Pass is bought through the App Store or Google Play, which handle the payment under their own terms. We never see your card details. We receive a record of the purchase from Apple or Google (the product, a transaction number and the date), check that it is genuine, and keep it on your account so your pass works on all your phones.
How the app is used. To see which stories and places are useful and to fix what is not, the app records a small number of events with your account: a story started, reached the end of its free part or finished; a place page opened; a search (what you searched for and how many results came back); the Island Pass screen shown and a purchase started; a stamp collected; a place kept offline; and an announcement opened. These stay with us and are not shared with any analytics or advertising company. We delete them after 12 months.
Notifications. If you allow notifications, we keep a notification token for your phone (with the type of phone and the app version) so we can send you Srilor announcements, such as safety notices or new stories. You can turn notifications off at any time in your phone settings.
When you contact us. “Contact us” in the app opens your own email app. We receive what you send: your email address, your name if you give it and your message, and use it only to answer you.
On your phone only. The places and stories you keep offline, the app’s settings, and a short queue of the usage events above waiting to be sent stay on your phone and are removed if you delete the app.
What the website collects
You can read srilor.com without an account. Like most websites, our servers record basic technical information when you visit, such as your IP address, browser type, the pages you request and the time. We use it to keep the site running and secure, and keep these logs only as long as we need them for security and fixing problems.
The website may use a small number of cookies that it needs to work, for example to keep it secure or remember a setting. These do not track you across other websites. If analytics are enabled, we use them to count visits and see which pages are useful, in a form that does not identify you. Where the law requires it, we ask for your consent before setting analytics cookies, and you can change your choice at any time. You can also block or delete cookies in your browser; the site still works without them.
When you email us or use a contact form, we receive your email address, your name if you give it and your message, and use them only to answer you and deal with what you report, such as a correction to a place page. We keep messages as long as we need them for your request and any follow-up, then delete them. If you send a correction, we may keep the details of the change, without your name, as part of that place’s record.
What we never do
- We never sell or rent your personal information.
- We do not show ads, and we do not use advertising or tracking companies.
- We do not track you across other companies’ apps or websites.
- We do not use your information to make automated decisions that have legal or similarly significant effects on you.
Who else handles your information
We use a few trusted companies to run Srilor. They handle your information only on our instructions, to provide their service to us:
- Supabase: our database and sign-in service, where your account, profile, ticket, trips, stamps, notes and purchase records are stored (in Singapore).
- Backblaze: file storage for the pictures you upload (in the United States).
- Our hosting provider: the server that runs the Srilor service, checks purchases and sends announcements.
- Apple and Google: if you sign in with them, for the App Store and Google Play purchases, and to deliver notifications to your phone.
- Expo: passes our announcements to Apple and Google for delivery to your phone.
When you tap “Directions” or open a booking link, you leave Srilor for another app or website (such as Apple Maps, Google Maps or a hotel’s site), whose own privacy policy applies.
We may also share information if the law requires it, to protect the safety of our travellers or others, or with a company that takes over Srilor, which would remain bound by this policy.
Where your information is stored
Your information may be stored and processed outside the country where you live, including in Singapore and the United States. Where data protection law requires it, we use appropriate safeguards for these transfers, such as the standard contractual clauses approved for the purpose.
How long we keep it
- Your account and everything in it (profile, ticket, trips, stamps, saved places, notes, comments, pictures and purchase records): for as long as you have an account.
- Usage events: 12 months, then deleted.
- Stories you share: shown for 24 hours.
- When you delete your account: see below. We keep a short record that an account was deleted (the email address and the date) for up to 12 months, to deal with any questions or disputes.
- Backups: copies of our database in backups are kept for a limited time for recovery, then overwritten.
Deleting your account
You can delete your account at any time in the app: You → Delete account. This immediately deletes your account and sign-in, your profile, ticket, trips, stamps, saved places, notes, comments, likes, follows, the pictures you uploaded, your notification tokens, your Island Pass record and your usage events.
If you cannot use the app, email hello@srilor.com from the address you signed up with and we will delete your account and its information within 30 days.
Deleting your account does not cancel or refund an Island Pass bought from Apple or Google; those purchases are handled by them under their own terms.
The legal basis for using your information
Where data protection laws such as the GDPR apply, we rely on:
- Our agreement with you: to provide your account, trips, stamps, sharing and the Island Pass.
- Our legitimate interests: to keep Srilor safe and secure, prevent misuse, and understand which stories and places are useful so we can improve them, always weighed against your rights.
- Your consent: for location, notifications and photo access (asked for by your phone) and, on the website, analytics cookies. You can withdraw consent at any time in your phone or browser settings.
- Legal obligations: where we must keep or share information by law.
Your rights
Depending on where you live, you may have the right to ask what personal information we hold about you and to receive a copy, to have it corrected or deleted, to object to or limit how we use it, and to move it to another service. Where we rely on your consent, you can withdraw it at any time.
You can see and change most of your information yourself in the app, and delete your account from You → Delete account. For anything else, email hello@srilor.com. We answer within 30 days. You can also complain to the data protection authority where you live.
Children
Srilor is not meant for children under 16, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email hello@srilor.com and we will delete it.
Security
Your information travels to us over encrypted connections, access to our systems is limited to the people who need it and protected with two-step sign-in, and every purchase is checked before it unlocks anything. No service can promise perfect security, but we work to protect your information and will tell you and the authorities if a breach affects you, as the law requires.
Changes to this policy
We may update this policy as Srilor changes. The date at the top shows when it last changed. If a change is significant, we will tell you in the app before it applies.
Contact
Zeawis Ltd, Srilor Email: hello@srilor.com