We process data needed for authentication, profiles, posts, conversations, audience controls and safety. Firebase provides authentication, notifications and diagnostics. Cloudflare provides the API, storage and delivery.
Location permission is optional. When allowed, location supports nearby search and check-in verification. Check-ins require location verification. We do not publish precise device coordinates or retain raw check-in verification coordinates. We store the chosen spot, times and audience.
Anonymous participation uses a separate persona for each check-in. Anonymous displays exclude public links and identifiers for your normal profile. The server retains ownership relationships for your controls, blocking and abuse handling.
Usage analytics can be selected in Settings. Analytics and diagnostic events exclude content, precise location, credentials and normal or anonymous profile identifiers. Notifications exclude content and place names.
Retention and deletion
- A check-in normally ends after 2 hours. Location reverification allows extensions up to 8 hours from its start. Ending a check-in does not delete its post history.
- Unused uploads and unreferenced images become eligible for scheduled deletion after 24 hours.
- Images for deleted posts or conversation messages become inaccessible immediately and are normally scheduled for deletion after 30 days.
- Duplicate-operation records are scheduled for deletion after 7 days, processed delivery events after 30 days, and in-app notifications after 90 days.
- Account deletion in Settings stops access and starts removal of authentication and associated data. Main profile fields and content are erased by scheduled processing after at least 65 minutes. Outages and retries can delay completion.
- Resolved abuse reports are scheduled for deletion 180 days after resolution, and operator action records 180 days after the action. Unresolved reports remain until resolved.
- Minimal records needed to prevent deleted data from reappearing and to preserve reference integrity remain. The current test implementation does not give these records a uniform automatic deletion deadline. Copies saved by others cannot be recalled.