Last updated: 22 September 2026
Travilet helps people find and share clean public toilets. This page explains, in plain language, exactly what information the app handles, why, and what you can do about it. It applies to the Travilet web app at app.travilet.com and to the Travilet app on Google Play.
Travilet is operated by DropMandi, an independent developer based in Sharjah, United Arab Emirates. DropMandi is responsible for the personal data described here. For any question about your data, email support@travilet.com.
What we collect
- Your name and email address — given by you, or supplied by Google or Facebook if you choose to sign in that way. Used to attribute your contributions and to contact you if needed.
- Your location — only while the app is open, to show what is near you, sort results by distance, and confirm that you are actually at a toilet when you add one or check in at one. Your own position is compared and then discarded; it is never stored. We do not track you in the background and we keep no history of where you have been.
- Contributions you make — toilets you add, photos, ratings, cleanliness scores, check-ins ("Was it there?"), reviews, confirmations, reports, and edits to existing entries. These are public by design.
- The coordinates of toilets you add — location data about a place, not about you.
- Notifications — messages about your own contributions (for example, a photo you uploaded was approved, or a toilet you listed was reported), and messages from us about them.
- A moderation record — when you edit an entry, respond to a report, or delete your account, we record what happened, when, your IP address and your browser type. This lets us reverse vandalism, investigate abuse and resolve disputes.
- Basic technical information — your IP address and account are used briefly to limit how often actions can be repeated, to stop spam.
What we do NOT do
- We do not sell your data. To anyone. Ever.
- We do not use advertising trackers or third-party analytics that follow you across the web.
- We do not track your location in the background or when the app is closed.
- We do not store your own GPS position or a history of your movements.
Public contributions
Travilet is a community map. Anything you contribute — a toilet, a photo, a review, an edit — is visible to everyone, along with the name on your account. Please do not include personal information in notes or photos. Do not photograph people.
Other signed-in users can correct details you have added, as on Wikipedia or OpenStreetMap. Every edit is recorded with the previous values so mistakes and vandalism can be reversed. If someone edits or reports a toilet you listed, we tell you in the app so you can respond.
Photos
Photos are taken with your camera and re-encoded on your device before upload, which removes hidden metadata such as the phone's GPS location. No photo is shown publicly until we have reviewed and approved it, and each photo can only ever appear on the toilet it was taken for. Rejected photos are deleted. Any user can report a live photo; two independent reports hide it immediately. We remove photos that are inappropriate, show identifiable people, or are unrelated to the facility.
Notifications
Updates about your contributions appear in the app under More → Notifications. If you allow it, your device can also show them while Travilet is open in the background. You can turn device notifications off at any time in your browser or phone settings.
Keeping the map safe
To protect the map from spam and false information, we limit how many toilets, photos and edits one account can submit per hour, and we may review, restrict or block accounts that repeatedly add false information or abuse others. A blocked account can still use the map but cannot change it.
Services we rely on
Travilet uses these third parties. Your browser contacts them directly:
- OpenStreetMap — map images and public toilet data
- Nominatim — turning place names into coordinates when you search a city
- OSRM — walking routes for in-app navigation
- Google / Facebook — only if you choose to sign in with them
- Google Maps / Apple Maps — only if you tap "Open in Google Maps"
- cdnjs — a code library used only on printable QR sticker pages
These services receive your approximate location or the coordinates you are looking at, as needed to answer. They each have their own privacy policies.
Where your data is kept
Data is stored on our web hosting provider's servers and transmitted over HTTPS. The database sits outside the public web folder and cannot be downloaded directly. We keep automatic backups so the map survives a server failure.
How long we keep it
- Account details and notifications — until you delete your account.
- Your contributions — kept as part of the map. When you delete your account we remove your name and email; your contributions remain but become anonymous, so the map stays useful. Your pending photos, reviews and check-ins are deleted.
- Moderation record — for as long as needed to investigate abuse or resolve a dispute, reviewed at least once a year and deleted when no longer needed.
- Spam-limiting counters — up to one hour, in memory, then discarded.
- Backups — daily server backups are kept for 14 days; offline copies for no longer than 90 days. Deleted data disappears from backups when they expire.
Your rights
Wherever you live, you can:
- download a copy of your data — in the app: More → Download my data
- delete your account — in the app: More → Delete my account (takes effect immediately)
- ask what data we hold about you, or correct anything that is wrong
- ask us to stop using your data for a particular purpose
You can also email support@travilet.com for any of these. We respond within 30 days. You do not need to give a reason.
If you are in the UAE, these rights are supported by Federal Decree-Law No. 45 of 2021 on Personal Data Protection. If you are in the UK or EU, the UK GDPR / GDPR apply; our lawful basis is your consent (for location and account details) and legitimate interest (for preventing spam and abuse and keeping the moderation record). You may withdraw consent at any time by deleting your account or revoking location permission.
Children
Travilet is intended for adults aged 18 and over and is not directed at children. If you believe a child has created an account, contact us and we will remove it.
Changes to this policy
If we change anything meaningful, we will update the date at the top of this page. Continued use of the app after a change means you accept the updated policy.
Contact
DropMandi — Sharjah, United Arab Emirates
Questions, complaints or data requests: support@travilet.com