Privacy Policy

1Introduction & scope

This policy describes how the OurPins team ("we", "us") handles personal and other information in the shared-map app "OurPins" (the App) and its related website. By using the App, you agree to this policy.

2Information we collect

We collect the following information to the extent necessary to provide the service.

(1) Account information

• Email address and password. These are securely managed by our authentication provider, Supabase Auth; passwords are stored hashed and we never hold them in plain text. When you sign up or reset your password, we send a verification code to your email.
• If you sign in with Google, we use the basic profile information Google provides (such as your email address and name) to create and authenticate your account.
• Display name, a unique username (@handle), a short bio (optional), an avatar (initials/emoji, or an optional uploaded profile photo), and a theme color.

(2) Information you create or post in the App

• Group names, group descriptions, and invite codes.
• Place pins (title, area, notes, category/collection, photos, and map location).
• Reactions ("want to go", "really want to", "been there", and emoji reactions) and comments.
• Candidate dates and their votes, and decided plans.
• Memories (notes, mood, photos).
• Friend relationships: friend requests and approvals made via @handle, and information about who you are connected with.

(3) Location information

• Only with your permission, we use your device's current location (while in use) to show nearby places you want to go on the map. Your current location is used for map display and is not continuously recorded or stored on our servers.
• Location data (latitude/longitude, etc.) that you attach to a place pin is stored so it can be shared within your group.

(4) Device & technical information

• A push-notification token (an identifier issued by Expo's notification service) and platform type (iOS / Android, etc.).
• In-app settings such as notification preferences and the read state of pins.

(5) Feedback

• When you use the in-app feedback feature, we collect the category you select (bug, hard to use, feature request, other), your message, and any optional contact details you provide for a reply.
• On submission we may automatically attach the app version, platform type, and the relevant screen. Providing contact details is optional unless you want a reply.

(6) Usage & diagnostic information (analytics and crash reports)

To improve the quality of the App, we analyze usage and detect bugs and crashes.

• Usage analytics: We use Firebase Analytics to collect anonymous usage events (which features are used, screen usage, etc.). We do not send your name, email address, comment text, photos, or precise location. Information attached to events is limited to abstracted values such as category or rough group size.
• Crash & error information: We use Sentry to collect diagnostic information about crashes and errors (the error details, device/OS type, and the sequence of in-app actions at the time).
• You can turn this analytics and measurement off at any time from in-app settings (Profile → Privacy → "Help improve OurPins with usage analytics").
• We do not use this information for advertising or for tracking you across other apps or websites. We do not collect advertising identifiers (such as IDFA).

(7) Device permissions

The App uses the following permissions for their stated purposes, with your consent. You can change permissions at any time in your device settings.

3How we use information

We use the information we collect for the following purposes.

• To provide the App, authenticate users, and manage accounts
• To share and sync places, plans, and memories in real time within your group
• To deliver push and in-app notifications
• To investigate and fix bugs and to respond to inquiries and feedback
• To improve the App and consider new features through usage analysis and crash/bug detection
• To respond to violations, prevent misuse, and otherwise operate the service safely

4Sharing within groups

OurPins is designed for sharing "one map" among invited members. Pins, comments, reactions, photos, memories, plans, your display name and avatar, and similar content you create are shown to the members of the groups you belong to. Who made which reaction is also visible to members.

Sharing is limited to within your groups; we do not make your content public. Please do not post information you do not want to share. By the nature of the service, some content already shared to a group may remain in other members' environments.

5Third-party services

The App uses the following third-party services to operate. Please review each provider's privacy policy for how they handle information.

Except as required by law, we do not provide your personal information to third parties other than the service providers listed above.

6Storage & deletion

App data is stored on servers managed by our third-party provider Supabase. Data may be stored on servers outside your country.

• We retain information for as long as necessary to achieve the purposes above, or for the period required by law.
• You can delete content you created (pins, comments, photos, etc.) using features within the App.
• You can delete your account at any time from within the App. When you do, your account information and posted content are deleted as core data. See the account deletion guide for steps.

However, we may retain some data for a certain period to comply with the law, prevent misuse, and respond to security issues. Some content already shared to a group may also remain in other members' environments. Usage-analytics and crash-diagnostic information is retained according to the periods defined by each third-party service (Firebase Analytics, Sentry).

7Security

We take appropriate technical and organizational measures to prevent leakage, loss, or damage of the information we hold, and to otherwise manage it safely. Communications are encrypted, and database access is restricted to group members through Row Level Security (RLS). However, we cannot guarantee perfect security for communications or storage over the internet.

8Children

The App is not primarily intended for use by children. If we learn that we have collected a child's personal information without parental consent, please contact us; we will verify and promptly delete it.

9Changes to this policy

We may update this policy as needed. For significant changes, we will notify you on this page or within the App. If you continue to use the App after a change, you are deemed to have agreed to the updated policy.

10Contact