Skip to content
Fri 23 Oct 2569 04:34
Log in
TH EN

Privacy Policy

Effective and last updated: 22 October 2026 · อ่านฉบับภาษาไทย

Tivrela (“we”, “us”) takes your personal data seriously. This policy explains what data we collect, what we use it for, who we share it with, how long we keep it, and what rights you have under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (PDPA). It applies to tivrela.com and forms part of our Terms of Use. This policy is also published in Thai. If the two versions differ, the Thai version prevails.

1. Data controller

Tivrela, the operator of tivrela.com, is the data controller for the personal data described in this policy. See section 12 for how to contact us.

2. Data we collect

A. Data you give us directly

  • Account data: your mobile number, display name and password. Passwords are stored with one-way hashing, so we never see your actual password.
  • Profile data: your profile picture, cover image and any other details you choose to add.
  • Content you post: photos, videos, captions, trips, reviews, comments, and the public or private setting of each item.
  • Messages: messages you send to other members or to our team through the messaging system.
  • When you contact us: information you provide when reporting a problem, making a complaint or reporting a copyright infringement.

B. Data generated when you use the Service

  • Location data (only with your permission): when you check in, we ask your device for its coordinates and their accuracy, to confirm you are near the place, and we record the place, date and time of the check-in. In the trip planner, a location you choose as a starting point is used to calculate routes in your browser. You can turn off location access at any time in your browser or phone settings.
  • Service history: check-ins, travel stats, stamps, saved trips and notifications.
  • Technical data: IP address, browser and device type, access times and system logs, used for security, spam prevention and limiting repeated failed login attempts.
  • Hidden data in photo files: photos from cameras can contain hidden metadata (EXIF), such as where they were taken. The system tries to remove this when resizing images, but we recommend turning off location tagging in your camera if you do not want to reveal it.

3. Cookies and browser storage

  • Essential cookies: used to keep you logged in and protect your account. If you block them, you will not be able to log in.
  • Browser storage (Local Storage): used to remember your settings and temporary data on your device, such as language, the trip you are planning and filters you have chosen. This data stays on your device.
  • Our security and delivery provider (Cloudflare) may set essential cookies to protect against attacks and bots.
  • We currently use no advertising cookies or cross-site tracking tools. If we do in future, we will update this policy and ask for your consent first where the law requires.
  • When you follow a link to another website, such as Agoda, that website may set its own cookies under its own policy.

4. How we use your data, and our legal bases

  • To provide the Service under our contract (the Terms of Use): creating and managing your account, verifying your number by OTP, logging in, resetting passwords, recording check-ins and stats, displaying the content you post, and sending messages and notifications.
  • Consent: using your device location, and other purposes we will ask about separately. You can withdraw consent at any time, but some features, such as check-in, may then stop working.
  • Legitimate interests: keeping the system secure, preventing cheating, spam and abuse, handling copyright reports, improving the Website, and producing anonymous usage statistics.
  • Legal obligations: keeping or disclosing data when the law or an authorised government body requires it, such as computer traffic data under Thailand’s Computer Crime Act.

We do not sell your personal data, and we do not use it for advertising targeted at you personally.

5. What other people can see

  • Public: your display name, profile picture, cover image, and any check-ins, photos, videos, trips and comments you set as public, including the place and date linked to them.
  • Never public: your mobile number, password, the exact device coordinates captured at check-in, your IP address, and anything you set as private.
  • Private messages: visible to the recipient. Our team may access them when necessary to investigate a complaint or abuse.

6. Who we share data with

We use service providers that help us run the Website and share only the data each one needs for its task, under confidentiality and security obligations:

  • Server and hosting providers that host the Website and database.
  • A cloud file storage provider for photos and videos (media.tivrela.com).
  • Cloudflare, to deliver the Website faster and protect it from attacks and bots.
  • An SMS provider, to send OTP codes to your number.
  • OpenStreetMap and Nominatim, for maps and place search. Your browser requests map data from these services and sends them your search terms.
  • Open-Meteo, for weather and air-quality data. We send the coordinates of places to visit, or the approximate coordinates of a point you have chosen or allowed us to use. No account data is attached.
  • Agoda, for accommodation data. We do not send Agoda any of your personal data. When you follow a link to Agoda, your visit and any booking are governed by Agoda’s policies.
  • Government authorities or courts, when the law requires, or to protect the rights, safety and property of users, ourselves and others.

7. Transfers outside Thailand

Some of our providers, such as Cloudflare and cloud storage providers, may process or store data on servers outside Thailand. We choose providers with adequate data protection standards as required by law.

8. How long we keep data

  • Account data, check-ins and content are kept for as long as you are a member, until you delete that content or your account.
  • When you delete your account, we delete your data or make it impossible to identify you within a reasonable time. Backup copies are deleted on the normal backup cycle.
  • OTP codes are short-lived and deleted when they expire.
  • Technical data and access logs are kept only as long as needed for security, or for the period the law requires.
  • Data we must keep to comply with the law, or to establish or defend legal claims, is kept for as long as that requires.

9. Your rights under the PDPA

  • Access your personal data and get a copy of it.
  • Have your data corrected and kept up to date (you can edit your display name, pictures and password yourself on your profile page).
  • Have your data deleted, destroyed or anonymised (you can delete content or your whole account yourself on your profile page).
  • Receive your data in a machine-readable format and have it transferred.
  • Object to the collection, use or disclosure of your data.
  • Ask us to restrict the use of your data.
  • Withdraw any consent you have given, at any time.
  • Complain to Thailand’s Personal Data Protection Committee (PDPC) if you believe we have not complied with the law.

You can make a request as described in section 12. We may ask you to verify your identity first. We will act on your request within 30 days of receiving it, unless a legal ground allows us to refuse or requires more time, in which case we will tell you why.

10. Data security

We use appropriate measures such as encrypted connections (HTTPS), one-way password hashing, limits on login and OTP attempts, and restricted access to data. However, no system is 100% secure. If a data breach occurs that poses a risk to your rights, we will notify the relevant authority and you as the law requires.

11. Children’s data

Users under 20 must have a parent’s consent before signing up, and users under 10 must be signed up by a parent. If we learn that we have collected a minor’s data without the required consent, we will delete it. Parents can contact us to request deletion as described in section 12.

12. Contact us

If you have questions about this policy, or want to exercise your rights under section 9, contact the Tivrela team through the messaging system on the Website.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with its update date. For significant changes, we will post a notice on the Website and ask for new consent where the law requires.