Privacy Policy
Last updated: October 5, 2026
Your Privacy Matters
Quick overview of our commitments
- One-time location check: Location is captured only once during event check-in, not continuously tracked
- Local storage: Your data is stored locally on your device
- No selling: We never sell or share your personal information with third parties
- Full control: Export or delete your data at any time
1. Introduction
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application. We are committed to protecting your privacy and ensuring you have a positive experience on our platform.
By using our application, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access the application.
2. Information We Collect
2.1 Personal Information
We may collect the following personal information:
- Name and contact information (email address, phone number)
- Profile information (job title, department)
- Account credentials and authentication data
- Activity and progress data (points, achievements, habits)
2.2 Location Information
Important: How We Use Location Data
- One-time verification only: When you check in to an event that requires location verification, we capture your GPS coordinates once at the moment of check-in.
- No continuous tracking: We do not track your location continuously or in the background. Location services are only activated when you explicitly tap the "Get Location" button during check-in.
- Purpose: Location data is used solely to verify that you are physically present at the event location for attendance purposes.
- Retention: Location coordinates are stored with your check-in record and are not shared with third parties.
- Your control: You can deny location permission, though this will prevent you from checking in to location-verified events.
2.3 Usage Data
We automatically collect certain information about your device and usage patterns:
- Device type, operating system, and browser information
- Application usage statistics and interactions
- Login times and session duration
- Error logs and diagnostic data
3. How We Use Your Information
We use the collected information for the following purposes:
- To provide, operate, and maintain our application
- To verify attendance at events and activities
- To track and manage your progress, points, and achievements
- To send you notifications and updates (with your consent)
- To improve and personalize your user experience
- To detect, prevent, and address technical issues or security threats
- To comply with legal obligations and enforce our terms
4. Data Storage and Security
4.1 Local Storage
Most of your data is stored locally on your device using browser storage mechanisms. This means your personal information remains on your device and is not transmitted to external servers unless explicitly required for specific features.
4.2 Cloud Storage (Optional)
If you enable cloud features, some data may be stored securely using Supabase, an industry-standard cloud database provider:
- All data is encrypted in transit using SSL/TLS protocols
- Data at rest is encrypted using industry-standard encryption
- Access controls ensure only you can access your data
- Regular security audits and updates are performed
4.3 Security Measures
We implement appropriate security measures including:
- Secure authentication and authorization protocols
- Regular security assessments and penetration testing
- Encryption of sensitive data both in transit and at rest
- Limited employee access to personal information
- Incident response procedures for data breaches
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties.
We may share your information only in the following limited circumstances:
- With your consent: When you explicitly authorize us to share specific information
- Service providers: With trusted third-party service providers who assist in operating our application (e.g., Supabase for cloud storage) under strict confidentiality agreements
- Legal requirements: When required by law, court order, or government regulation
- Protection of rights: To protect our rights, privacy, safety, or property, or that of our users
- Business transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)
6. Your Rights and Choices
You have the following rights regarding your personal information:
Access and Portability
You can access and export your data at any time through the Settings page. We provide your data in a machine-readable format (JSON) for easy portability.
Correction and Update
You can update your profile information and preferences directly in the application settings.
Deletion
You can delete all your data at any time using the "Clear All Data" function in Settings. This action is permanent and cannot be undone.
Location Permissions
You can grant or revoke location permissions through your device settings. Revoking permission will prevent check-in for location-verified events.
Notifications
You can enable or disable notifications at any time through the application settings.
7. GDPR Compliance (EU Users)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Right to access: Request copies of your personal data
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your data ("right to be forgotten")
- Right to restrict processing: Request limitation of how we use your data
- Right to data portability: Request transfer of your data to another service
- Right to object: Object to processing of your data for specific purposes
- Right to withdraw consent: Withdraw previously given consent at any time
Legal basis for processing: We process your data based on your consent, contractual necessity, legal obligations, and legitimate interests.
8. Children's Privacy
Our application is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.
9. Third-Party Services
Our application may use the following third-party services:
- Supabase: Cloud database and authentication services (optional)
- Google Maps: For displaying event locations (if enabled)
- PostHog: Product analytics and session recordings that show how the app is used. Typed input, on-screen text, images and video are hidden before anything is sent, and you are identified by an account ID only, never your name or email
These third-party services have their own privacy policies. We encourage you to review them. We are not responsible for the privacy practices of third-party services.
10. Data Retention
We retain your personal information for as long as:
- Your account is active
- Needed to provide you with services
- Required to comply with legal obligations
- Necessary to resolve disputes or enforce agreements
When you delete your data through Settings, it is permanently removed and cannot be recovered.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy, your data rights, or our privacy practices, please contact us:
Email: privacy@example.com
For GDPR-related requests, please include "GDPR Request" in your email subject line.
13. Acknowledgment
By using our application, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.