Privacy Policy

The Selfie Spot ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

By using the App, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the App.

1. Information We Collect

1.1 Personal Information

When you create an account, we collect:

• Name and email address
• Username and profile information
• Profile photo (if you choose to upload one)
• Date of birth (for age verification)
• Authentication credentials (encrypted password or third-party OAuth tokens)

1.2 Location Data

The App requires access to your device's location services to function. We collect:

• Precise location data (GPS coordinates) when you use the App
• Location data when you check in at spots (stored with timestamp)
• Location history to display your activity on maps
• City and country information derived from GPS coordinates

You can control location permissions in your device settings. Disabling location services will prevent you from using core features of the App.

1.3 Photos and User Content

When you take selfies or upload photos:

• Photos you capture within the App
• Camera access permissions
• Photo metadata (timestamp, location where photo was taken)
• Filtered or edited versions of your photos

1.4 Usage Data

We automatically collect:

• Device information (model, operating system version, unique device identifiers)
• App usage statistics (features used, time spent, sessions)
• Check-in history (spots visited, timestamps, XP earned)
• Leaderboard rankings and achievements
• Interaction with other users (follows, likes, comments)
• Error logs and crash reports

1.5 Third-Party Authentication

If you sign in with Apple, Google, or other third-party services, we collect basic profile information (name, email) as permitted by those services.

2. How We Use Your Information

We use the information we collect to:

• Provide App functionality: Verify check-ins, calculate XP, display maps, enable photo sharing
• Personalize your experience: Show nearby spots, recommend locations, display your progress
• Enable social features: Display leaderboards, community feed, user profiles
• Improve the App: Analyze usage patterns, fix bugs, develop new features
• Communicate with you: Send notifications, updates, and support messages
• Ensure security: Prevent fraud, detect GPS spoofing, enforce Terms of Service
• Process payments: Handle in-app purchases and subscriptions (via Apple)
• Comply with legal obligations: Respond to legal requests, enforce our policies

3. How We Share Your Information

3.1 Public Information

The following information is publicly visible to other users:

• Your username, profile photo, and bio
• Your level, XP, and badges
• Your leaderboard ranking (if you opt in)
• Photos you share on the community feed
• Spots you've checked in to (visible on public feed)

3.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Cloud Storage: Cloudinary (for photo/video hosting)
• Database Hosting: Heroku/AWS (for storing user data)
• Analytics: Usage analytics and crash reporting services
• Email Services: GoDaddy (for transactional emails)
• Map Services: OpenStreetMap and Leaflet (for displaying maps)

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred to the new owner.

3.4 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

4. Location Data and GPS

Why We Need Location: The App's core functionality depends on accurate location data to verify check-ins, display nearby spots, and prevent fraud.

What We Collect: We collect precise GPS coordinates (latitude/longitude) when you use the App, along with accuracy data and timestamps.

How We Use It: Location data is used to verify you are within 100 meters of a spot before allowing check-in, to display spots on maps, and to calculate distances.

Background Location: We do NOT collect location data when the App is in the background or closed. Location is only collected when you actively use the App.

Control: You can disable location services in your device settings, but this will prevent you from using check-in features.

5. Photo and Camera Data

Camera Access: The App requires camera access to take selfies at spots. We do not access your camera without your explicit permission.

Photo Storage: Photos you take within the App are uploaded to our secure cloud storage (Cloudinary) and associated with your account and the spot location.

Photo Sharing: Photos you choose to share on the community feed are publicly visible to other users. You control what you share.

Photo Deletion: You can delete your photos at any time from your profile. Deleted photos are removed from our servers within 30 days.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Account data: Retained until you delete your account
• Location history: Retained for the lifetime of your account
• Photos: Retained until you delete them or close your account
• Usage data: Retained for up to 2 years for analytics
• Legal records: Retained as required by law

When you delete your account, we permanently delete your personal data within 90 days, except where we must retain it for legal compliance.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a portable format
• Opt-Out: Opt out of leaderboards, community features, or marketing emails
• Restriction: Request limitation of data processing
• Objection: Object to certain data processing activities

To exercise these rights, contact us at info@theselfiespot.ca. We will respond within 30 days.

8. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are between 13 and 18, you must have parental or guardian permission to use the App.

If we discover we have collected data from a child under 13, we will delete it immediately. Parents can contact us to request deletion.

9. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (TLS/SSL)
• Encryption of passwords using bcrypt hashing
• Secure cloud infrastructure (AWS, Heroku)
• Regular security audits and updates
• Access controls and authentication requirements

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

10. Cookies and Tracking Technologies

The App uses the following tracking technologies:

• Session tokens: To keep you logged in
• Analytics: To understand how users interact with the App
• Performance monitoring: To track crashes and errors

We do not use cookies for advertising or tracking across other apps or websites.

11. Third-Party Services

The App integrates with third-party services that have their own privacy policies:

• Apple App Store: In-app purchases are processed by Apple
• Cloudinary: Photo and video hosting
• OpenStreetMap: Map data and tiles
• OAuth Providers: Apple Sign In, Google Sign In (if applicable)

We are not responsible for the privacy practices of these third parties. Please review their privacy policies.

12. International Data Transfers

The App is operated from Canada. If you access the App from outside Canada, your information may be transferred to, stored, and processed in Canada or other countries where our service providers operate.

By using the App, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or shared (we do NOT sell your data)
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising CCPA rights

14. GDPR Compliance (European Users)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes: consent, contract performance, legitimate interests, and legal obligations.

15. Marketing Communications

We may send you promotional emails about new features, updates, or events. You can opt out of marketing emails by:

• Clicking "unsubscribe" in any marketing email
• Adjusting notification settings in the App
• Contacting us directly

Note: You cannot opt out of transactional emails (account verification, password reset, security alerts).

16. Do Not Track Signals

The App does not respond to "Do Not Track" browser signals, as it is a mobile application and not a web-based service. You can control tracking through your device's privacy settings.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy within the App
• Sending you an email notification
• Displaying a prominent notice in the App

Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

18. Contact Information

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us: