privacy policy

last updated: october 14, 2026

pam ("we", "us") is a mobile app that lets you keep a personal stash of things you want to eat, drink, shop, do, see, or sleep — and share recos with people you choose. this policy explains what data we collect, why, and what rights you have.

who runs pam

pam is operated by zerty, a french company registered in paris (siret 93332433), 34 rue de montholon, 75009 paris, france. for any privacy-related question, write to hello@pam-it.io.

data we collect

• account info — the email address apple or google shares when you sign in (apple can hide yours behind a relay address), your handle, an optional photo and your language.
• content you create — items, lists, photos, notes, comments, recos, and the urls you share into pam.
• social graph — who you follow and who follows you on pam.
• technical metadata — minimal usage logs (app version, device type) for debugging, crash reports, and a device token to send you notifications.
• product usage — a few product events (for example "onboarding finished", "app opened"), with a random device identifier, your account id once you have one, the app version, platform and language. they never contain your name, email, handle, places or anything you type. we use them only to understand where people get stuck and whether they come back. they stay in our own database: no third-party analytics or advertising trackers.

how we use your data

• to run the app: store your stash, sync it across devices.
• to enforce visibility rules (private, friends, public).
• to deliver the recos and invites you choose to send.
• to respond to support requests.
• to improve pam, from aggregated usage statistics.

we do not sell your data. we do not show ads. we do not profile you for advertising. no third-party tracker is embedded in the app.

where your data lives

pam's backend runs on supabase (hosted on aws in the eu). images and avatars are stored in supabase storage. all traffic between your device and our backend is encrypted in transit (https / tls).

your rights

under gdpr and applicable laws, you have the right to:

• access a copy of the data we hold about you.
• correct any inaccurate information.
• delete your account and the data associated with it.
• object to or restrict certain processing.
• port your data to another service.

in-app you can edit your profile and delete your account from settings → edit profile. for any other request, email hello@pam-it.io — we'll reply within 30 days.

data retention

we keep your data for as long as your account is active. when you delete your account, your data is soft-deleted immediately (hidden from the app and the social graph) and permanently purged from our database within 30 days.

children

pam is not designed for children under 13. we do not knowingly collect data from anyone under 13.

changes to this policy

if we make material changes to this policy, we'll surface a notice in-app before the change takes effect. the "last updated" date at the top of this page always reflects the current version.

contact

questions, complaints, or rights requests: hello@pam-it.io.