How Poppin handles your data.

• Location is read only while the app is open. There is no background tracking and no continuous GPS trail.
• The only place-history we keep is the venues you choose to check into. It auto-deletes after 30 days.
• Venues and other users only ever see aggregated trends above privacy thresholds — never your identity, exact location, or history.
• Age and gender are optional and used only for a coarse aggregate “crowd mix” — never shown against your identity.
• You can delete your account at any time. Deletion cascades through every table that stores your data.

We collect only what is needed to make discovery, check-ins, and the crowd features useful:

• Account: your email (and password), plus an optional display name.
• Optional profile: home city, birth year (age), and gender. Age and gender are used only for the aggregated, thresholded “crowd mix” feature — never shown against your name to anyone.
• Foreground location: latitude, longitude, and accuracy — only while the app is open and you use a feature that depends on it (map, distance, check-in).
• Check-ins: the venue you tapped and the time. Kept for up to 30 days to power your streaks and “Regular” status, then automatically deleted.
• Friends (optional): if you add friends and turn on presence, they can see the venue you’re currently checked into — only while you’re actively checked in, and only if you enable it.
• Engagement: which venues you viewed, tapped directions for, or checked into — used in aggregate to show what’s popular, and pruned after about 90 days.

• Background location, ever. Poppin never requests the always-allow permission.
• Continuous GPS trails. We do not record where you travel — only the specific venues you choose to check into, and only for 30 days.
• Any data we would sell. We never sell your data.

• Venues see aggregated page views, direction taps, check-in counts, and deal/event taps for their own venue.
• Crowd level labels (Quiet / Getting active / Busy / Packed) — only above the 3-active-check-in threshold; below that a venue shows “Unknown.”
• Crowd mix (a rough age/gender lean) may be shown to premium users or subscribed venues — only above a 10-person threshold, and only ever as a coarse range, never counts or individuals.
• Never: usernames, emails, individual identities, exact user locations, or per-user histories.

• Toggle individual notifications inside the app under Privacy & notifications.
• Opt out of contributing to aggregated insights.
• Delete your account and all associated data with one tap.
• Email kiddmatt@live.com for any data request.

Poppin shares data with these services only as needed to run the app:

• Supabase — database, authentication, file storage.
• Mapbox — renders the map (receives coarse location to draw it).
• Google — venue data and photos (Google Places).
• Apple & RevenueCat — process Poppin Plus in-app subscriptions.
• Stripe — venue subscription billing only. Never used for consumer payments.
• Expo — push notifications you opt into.

We will update this page when our practices change and notify you in the app for material changes. Continuing to use Poppin after notification means you accept the update.