Effective date: 13 October 2026

This Privacy Policy explains how Digital Living Co., Ltd. ("ThaIndians", "we", "us") collects, uses and protects your personal data when you use the ThaIndians app and the website thaindians.com (the "Service"). We are the data controller under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). Where they apply, we also follow India's Digital Personal Data Protection Act 2023 and the EU GDPR.

1. Data we collect

Account data (if you create an account): your name, email address and profile photo. If you sign in with Google or Apple, we receive your name, email and (from Google) profile photo from them; Apple may give us a private relay email instead of your real one. If you use a password, we store it only in encrypted (hashed) form.
Preferences and saved items: language, theme, food and diet preferences, saved places, stories and events, and trip plans you save. Some of this is stored only on your device.
Content you submit: listings and events you suggest, photos and flyers you upload, reports you send, and messages to our team.
Event registrations: your name, email, phone number (optional), number of tickets, ticket code and whether the ticket was checked in.
Newsletter: your email address and how often you want our email, if you subscribe.
Location: your precise location from your device's GPS, only if you allow it, to show places near you, distances and directions. You can instead choose a location by hand, or turn location off at any time in your device settings. We do not keep a history of your locations.
Questions and trip requests: what you type into search, "Ask ThaIndians" and the trip planner.
Push notification token: a code from your device that lets us send you notifications, if you allow them.
Device and usage data: IP address, device and browser type, app version and server logs. On the website, and only if you agree, we may also use analytics to see which pages are used.

We do not ask for sensitive data such as religion, health or biometrics, and we do not collect payment card details.

2. Why we use your data

To provide the Service: run your account, show nearby places, save your items, create trip plans, issue event tickets and send ticket and reminder emails. Legal basis: contract.
To answer your questions with AI: your question or trip request, together with the area you chose, is sent to our AI provider to write the answer. Please do not include personal information you do not want to share. Legal basis: contract.
Notifications and email: push notifications and newsletters, only with your consent, which you can withdraw at any time. Legal basis: consent.
Safety and moderation: reviewing submissions and reports, and preventing fraud and abuse. Legal basis: legitimate interest; legal obligation.
Improving the Service: fixing bugs and understanding how the Service is used, using aggregated data. Legal basis: legitimate interest, and consent for analytics on the website.
Legal requests: responding to lawful requests from authorities. Legal basis: legal obligation.

We do not sell your personal data. The ThaIndians app does not show third-party advertising and does not track you across other companies' apps or websites. Our website may show Google ads; they are personalised only if you agree to it, otherwise only non-personalised ads are shown.

3. Who can see your data

Other users see listings and events after they are published. Your name is not shown publicly unless you include it in content you submit. ThaIndians has no private messaging between users.
Event organisers see the registration details of people who register for their event, so they can manage entry.
Service providers who process data for us under contract:
- Hostinger: servers and database (data centre in Kuala Lumpur, Malaysia);
- Google: Sign in with Google, Firebase Cloud Messaging (push notifications), Google Maps and Places (maps, places and directions), and on the website Google Analytics and Google AdSense (only as described above);
- Apple: Sign in with Apple and Apple Push Notification service;
- Anthropic: AI answers, summaries, translations and trip plans;
- Resend: sending emails such as tickets, sign-in links and newsletters.
Authorities, when Thai or other applicable law requires it, or to protect someone's safety.
A buyer or successor, if ThaIndians is merged or sold, under this same policy.

4. International transfers

Our servers are in Malaysia, and some service providers process data in other countries, for example the United States, Singapore or the EU. When that happens we use providers with appropriate safeguards, as required by the PDPA.

5. How long we keep data

Account data and saved items: while your account is active.
Event registrations: up to 12 months after the event.
Newsletter subscriptions: until you unsubscribe.
Content you submitted: while it is published, or until you ask us to remove it.
Reports and records of bans: up to 2 years, to prevent repeat abuse.
Server logs: up to 12 months.
Backups: kept for 14 days, so deleted data disappears from backups within 14 days.

6. Deleting your account

You can delete your account yourself: in the app, tap your profile picture at the top (or More → Profile) and choose Delete my account; on the website, open Profile → Delete my account. You can also email contact@thaindians.com. Your account, sign-in sessions and saved trip plans are deleted immediately, and removed from backups within 14 days. Data stored only on your device (such as saved places and preferences) can be removed under Profile → Delete preferences or by uninstalling the app. We may keep limited records where the law requires it, or to stop banned users from returning.

7. Your rights

Under the PDPA and similar laws, you can ask to:

access or get a copy of your data;
correct inaccurate data;
delete your data;
object to or restrict how we use it;
move your data to another service;
withdraw consent at any time, for example by turning off location or notifications in your device settings, or unsubscribing from emails.

Email contact@thaindians.com. We reply within 30 days. You may also complain to Thailand's Personal Data Protection Committee (PDPC), or to the data protection authority where you live.

8. Cookies and similar technology

We use a cookie to keep you signed in and your device's storage to remember your preferences. On the website, analytics and advertising cookies are used only as described in section 2 and according to your choice.

9. Security

We use encryption in transit (HTTPS), encrypted password storage and restricted access to our systems. No system is completely secure, so please use a strong password. If a breach affects your data, we will tell you and the authorities as the law requires.

10. Children

The Service is not for children under 13. We do not knowingly collect data from children under 13. Users aged 13 to 17 need a parent's or guardian's consent. If you believe a child has given us data, email contact@thaindians.com and we will delete it.

11. Changes to this policy

We will publish updates here with a new effective date, and tell you in the app or by email about important changes.

12. Contact us

Digital Living Co., Ltd., 35 Soi Bangwaek 2, Khuha Sawan, Phasi Charoen, Bangkok 10160, Thailand.
Privacy email: contact@thaindians.com