Brilantec Places privacy policy
Version 2026-09-15.1 · 15 September 2026

1. Controller

The data controller is Jose Luis Guzman, who develops Brilantec as a personal project. Contact for privacy enquiries and rights requests: privacy@brilantec.com.

This policy describes Brilantec Places and its connections to Planubia and Brilantec Photos. It does not replace those applications' own privacy information or that of external services you open through links.

2. Data and sources

Brilantec account: identifier, login email, name, account status and permissions. Your password authenticates you with the identity provider; it is not part of your journal.

Journal: place names and categories, addresses or coordinates you provide, visits, dates, ratings, food, opinions, notes and amounts you choose to record.

Connections: Planubia plans, expenses and participants you may access under their permissions; references to your own Brilantec Photos pictures and their files when you open them.

Friendships and recommendations: accepted Planubia friendships, the recipients you select, and recommendations other friends share with you.

Operation: session data, requests, errors, access controls and usage controls needed to provide and protect the service.

You can use the manual features without Google. Your device location is not requested. Avoid entering sensitive data or unnecessary information about others.

3. Purposes and legal bases

Identification, the journal, connections you request and delivery of recommendations to your chosen recipients provide the requested service under Article 6(1)(b) GDPR. Optional fields are used only if you choose to complete them; you do not need to fill them all in to use Places.

Security controls, abuse prevention and incident resolution rely on the legitimate interest of maintaining the service and protecting its users under Article 6(1)(f). You may object on grounds relating to your particular situation.

Handling rights requests and legally binding requirements is based on Article 6(1)(c). Optional processing that requires consent will only be enabled after requesting it; you can withdraw consent without affecting earlier lawful processing.

Places does not use your journal for personalised advertising, selling data or training artificial intelligence models. It does not make automated decisions with legal or similarly significant effects on you.

4. Who can see information

Your journal is private by default. Sharing a recommendation makes it visible only to selected friends while they retain the required permissions and friendship. Private notes and linked Planubia expense details are not included. This version does not share linked photographs either. A manually entered personal amount is shared only if you choose to show it.

You can withdraw a recommendation. This prevents further authorised access but cannot retrieve screenshots or copies already made by a recipient. Connections between apps do not make information public or expand permissions granted by the source.

The controller and technical providers may need limited access to handle requests, maintain security or comply with legal obligations; privacy between users does not mean encryption that prevents all technical access.

5. Providers and transfers

Supabase Pte. Ltd. provides authentication and the database. The project is configured in Ireland. OpenAI provides Sites hosting, through which Places requests pass; Cloudflare is involved in infrastructure and the connected photo service. These services may process technical data such as IP addresses and connection logs.

The database region does not mean that all support, security or infrastructure processing takes place exclusively in the European Economic Area. Applicable transfers use the safeguards provided in the supplier's data protection terms, such as standard contractual clauses where appropriate. You can request information on recipients and applicable safeguards at privacy@brilantec.com.

References: Supabase data protection https://supabase.com/legal/customer-resources/data-processing-addendum, Cloudflare data protection https://www.cloudflare.com/cloudflare-customer-dpa/ and OpenAI's European privacy policy https://openai.com/policies/eu-privacy-policy/.

6. Google Maps

Google is optional. Before searching or opening the embedded map, you can give consent by pressing “Activar Google y recordar mi elección” (Enable Google and remember my choice), under Article 6(1)(a) GDPR. We remember your permission for 180 days for this account in this browser using local storage. You can withdraw it using “Desactivar Google” (Disable Google) in Connections; the page reloads to stop the integration. Withdrawal does not affect previous processing. You can use the journal manually without allowing Google.

After you type at least three characters and pause briefly, Places searches send Google your search text and a temporary search identifier. Opening the embedded map connects your browser directly to Google. Google may receive technical data such as your IP address and information about searches. Places does not send Google your amounts, photos, private notes or Brilantec account identifier.

Of the Google result, Places permanently stores only the place identifier. Retrieved text and coordinates are used temporarily for the requested feature. You provide the name used in your journal.

Google Maps features and content are subject to Google's additional terms https://maps.google.com/help/terms_maps/ and privacy policy https://policies.google.com/privacy. Opening an external link starts a visit to Google under its own terms and data processing practices.

7. Retention and deletion

Places and visits are retained while you keep them in your journal. Deleting a place removes its visits and recommendations from the active Places database; deleting a visit also removes its recommendations. Disconnecting an application or signing out does not delete its data.

Original photographs and expenses remain in Brilantec Photos or Planubia until you manage them there. Your Brilantec account may still be needed for other apps after you stop using Places. You can request erasure of Places data or your account, specifying the scope to avoid unintentionally affecting other services.

Monthly query controls retain the period, request type and number of operations, without the search text. Rate limiting retains the user identifier and last request for as long as needed to apply that limit. Technical logs are kept for the period needed to investigate incidents, protect the service and meet applicable obligations.

Recovery copies, where they exist, follow their replacement cycle and are not used to deliberately restore content you deleted. If technical recovery reintroduces it, erasure must be reapplied. Data retained for a specific obligation or claim is restricted to that purpose for the applicable period; it is not retained to continue offering the journal.

8. Rights and contact

You can request access, rectification, erasure, restriction and, where applicable, objection and portability at privacy@brilantec.com. Identify your account and request; proportionate additional information is requested only when necessary to verify your identity.

Requests are handled within the general statutory period of one month. If an extension applies because of the complexity or number of requests, you will be informed within that first month. You may also complain to the Spanish Data Protection Agency: https://www.aepd.es/.

9. Changes

The current version is identified by its date. Relevant changes will be explained before a new use of data is applied where required. This policy does not make any visit or recommendation public.

10. Acknowledgment and beta status

Places is in beta: features may change and errors may occur. This does not reduce your privacy rights. We record your account, the exact policy version and a server timestamp when you acknowledge reading it, without adding an IP address or user agent to that receipt. A new policy version requires a fresh acknowledgment. This is not consent to Google or other additional uses; optional permissions remain separate. You can read this information before signing in and from the app.