Privacy Policy
Effective 4 November 2026
The short version.
- Your account holds your first name, birthday and email.
- Your check-ins are backed up to your account so a new phone gets them back. Only you can see all of them; friends you accept see which churches you’ve visited and when.
- Your location is used on your phone to show you on the map and confirm a check-in. It is never collected or sent to us.
- Your photos stay on your phone.
- No ads, no analytics, no tracking. We never sell your information.
Who we are
Pilgrim is made by CDT Labs, a software company based in the Philippines. CDT Labs is responsible for your personal information in Pilgrim. You can reach us at hello@cdt.enterprises.
This policy explains what Pilgrim collects, why, who handles it for us, and your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
What we collect, and why
Your account
To use Pilgrim you create a free CDT Labs account. It is one login for all CDT Labs apps.
| What | Why |
|---|---|
| Your first name | To greet you in the app. |
| Your birthday | To wish you well on the day. We may also use your birth year, only ever as an age group, to understand who uses Pilgrim. |
| Your email address | To log you in, confirm your account and reset your password. |
| Your password | To log you in. It is stored only in scrambled (hashed) form; nobody, including us, can read it. |
| When you agreed | The date and time you ticked the two agreement boxes when signing up, as a record of your consent. |
Your birthday reveals your age, which the Data Privacy Act treats as sensitive personal information. We collect it only with the consent you give when you sign up.
Your check-ins
Each check-in is kept on your phone and backed up to your account, so you don’t lose your collection if you lose or change your phone. For each check-in the backup holds:
- which church, and the date of your visit;
- whether you checked in at the church or added it from memory;
- whether you heard Mass;
- the note you wrote, if any;
- when you last changed it.
It never holds your location. Only you can read your check-ins. If you add friends, they can see which churches you’ve visited and the dates, and nothing more — the database itself gives out nothing else, and refuses anyone who isn’t your friend.
Friends
Adding friends is up to you. You give someone your friend code, or enter theirs, and nothing is shared until the person asked accepts. For this, your account also holds:
- your friend code;
- your first name, which is what your friends see;
- who you’re friends with, who you’ve asked, and when.
Friends see your first name, which churches you’ve visited and when, and the badges those earn. They never see your notes, whether you heard Mass, your photos or where you are. Pilgrim never reads your contacts: you choose who gets your code.
Subscriptions
If you subscribe, payment is handled entirely by Google Play or by our payment provider, Lemon Squeezy. We never see your card, GCash or bank details. We receive only what we need to unlock Pilgrim for you: that your subscription is active, and your licence key if you were given one.
What we never collect
- Your location. See below.
- Your photo library or your contacts. Pilgrim only receives a photo you choose to add.
- Anything for advertising. No ads, no advertising IDs.
- Analytics or tracking. Pilgrim has no analytics and no third-party trackers.
Location
Pilgrim asks your phone for your location when you tap “Find churches near me” or check in at a church. It is used on your phone to show you on the map and to confirm you are at the church. It is never sent to us or anyone else, and a check-in keeps only the fact that you were there, not where you stood. You can refuse, and still use Pilgrim by searching for churches by name or town.
Photos
Photos you add to a visit are stored on your phone only. They are not uploaded or backed up. When you add one, Pilgrim saves a smaller copy, which also removes the hidden information cameras attach to pictures, including where they were taken.
Who handles your information for us
We use a few trusted services to run Pilgrim. Each one handles your information only to do its job for us:
| Service | What it does | What it sees |
|---|---|---|
| Supabase | Runs CDT Labs accounts and stores your check-in backup and friends. Its servers are in Tokyo, Japan. | Your account details, your check-ins and your friends. |
| Resend | Sends account emails (confirming your email, resetting your password). | Your email address and first name. |
| Vercel | Hosts the Pilgrim app and this website. | Standard web requests, including your IP address. |
| Google Play, Lemon Squeezy | Take subscription payments. | Your payment details — held by them, never by us. |
The app also loads maps and church information directly from public services: map tiles from OpenFreeMap (and Esri, if you turn on satellite view), and church history and photographs from Wikipedia and Wikimedia Commons. Like any website you visit, they see your IP address and which map area or page was requested. We send them nothing about you.
Because some of these services are outside the Philippines, your information may be stored or handled in other countries, such as Japan. We choose services that protect it to a standard comparable to Philippine law.
Storage on your phone
Pilgrim keeps your collection, your photos and your settings (such as text size) on your phone, and uses a cookie to keep you logged in. It uses no cookies for tracking or measurement.
How long we keep it
- Your account and check-in backup: for as long as you have an account.
- A check-in you remove: it is deleted, except for a small marker — only which church, and when you removed it — kept for 30 days so the removal also reaches any other phone you use. Then the marker is deleted too.
- “Delete everything” in Settings deletes your check-ins and photos from your phone and deletes your backup straight away.
- Friends: removing a friend, or turning down a request, deletes that link at once, and they see nothing from then on. Your friend code is kept until you delete your account.
- Deleting your account: email us from the address you signed up with, and we will delete your account and everything in it within 30 days.
Your rights
Under the Data Privacy Act you have the right to:
- be informed about how your information is used — this page;
- access it — ask us for a copy;
- correct it — change your name in Settings, or ask us;
- take it with you — “Export my collection” in Settings gives you a file of your check-ins;
- object, or withdraw your consent, and have your information erased or blocked;
- complain to the National Privacy Commission (privacy.gov.ph) if you believe your information has been mishandled.
To use any of these rights, email hello@cdt.enterprises. We will reply within 15 days.
Children
Pilgrim is for all ages, including families. If you are under 18, please ask a parent or guardian before creating an account. A parent or guardian who believes their child gave us information without their agreement can email us to have it deleted.
Keeping it safe
Everything Pilgrim sends travels over encrypted connections. Your check-in backup is protected so that only your own account can read or change it (friends you accept can read only which churches and when), and your password is never stored in readable form.
Changes to this policy
If we change how Pilgrim handles your information, we will update this page and its date. If the change is significant, we will tell you in the app first.
Contact
CDT Labs, Philippines · hello@cdt.enterprises