How Poppin handles your data.

• Location is read only while the app is open. There is no background tracking and no continuous GPS trail.
• The only place-history we keep is the venues you choose to check into. It auto-deletes after 30 days, and you can clear it yourself at any time.
• Venues and other users only ever see aggregated trends above privacy thresholds — never your identity, exact location, or history. The single exception is if you choose to be recognised as a regular at one particular venue.
• Age and gender are optional and used only for a coarse aggregate “crowd mix” — never shown against your identity.
• You can delete your account at any time. Deletion cascades through every table that stores your data.

We collect only what is needed to make discovery, check-ins, and the crowd features useful:

• Account: your email (and password), plus an optional display name.
• Optional profile: home city, birth year (age), and gender. Age and gender are used only for the aggregated, thresholded “crowd mix” feature — never shown against your name to anyone.
• Foreground location: latitude, longitude, and accuracy — only while the app is open and you use a feature that depends on it (map, distance, check-in).
• Check-ins: the venue you tapped and the time, kept for up to 30 days to power your streaks and “Regular” status, then automatically deleted. To confirm you were actually at the venue, the check-in also records the GPS reading at that moment — we discard that reading within 24 hours, keeping only how far from the venue you were. You can also clear your whole check-in history at any time from Privacy settings.
• Friends (optional): if you add friends and turn on presence, they can see the venue you’re currently checked into — only while you’re actively checked in, and only if you enable it.
• Engagement: which venues you viewed, tapped directions for, or checked into — used in aggregate to show what’s popular, and pruned after about 90 days.

• Background location, ever. Poppin never requests the always-allow permission.
• Continuous GPS trails. We do not record where you travel — only the specific venues you choose to check into, and only for 30 days.
• Any data we would sell. We never sell your data.

• Venues see aggregated page views, direction taps, check-in counts, and deal/event taps for their own venue.
• Crowd level labels (Quiet / Getting active / Busy / Packed) — only above the 3-active-check-in threshold; below that a venue shows “Unknown.”
• Crowd mix (a rough age/gender lean) may be shown to premium users or subscribed venues — only above a 10-person threshold, and only ever as a coarse range, never counts or individuals.
• Never: emails, exact user locations, or per-user histories.
• One deliberate exception, and only if you ask for it. You can choose to be recognised as a regular at a specific venue — see below. Unless you turn that on, yourself, for that venue, a venue never learns who you are.

This is the only place in Poppin where a venue can see an individual person, and it only happens because that person asked for it.

• You can turn on recognition for one specific venue at a time, from that venue’s page in the app. It is off everywhere until you do.
• When it’s on, that venue — and only that venue — can see your display name, how many times you’ve checked in there, and when you were last in. The idea is simple: they can treat you like a regular because they know you are one.
• It tells them nothing about anywhere else you go. Recognition at one bar is invisible to every other venue.
• Venues cannot export your details, cannot contact you through Poppin, and never see your email.
• You can turn it off at any time under Privacy settings, and the venue stops seeing you immediately.

• Toggle individual notifications inside the app under Privacy & notifications.
• Opt out of contributing to aggregated insights.
• Clear your entire check-in history at any time, without deleting your account.
• Turn off “recognise me as a regular” at any venue you enabled it for.
• Delete your account and all associated data with one tap.
• Email kiddmatt@live.com for any data request.

Poppin shares data with these services only as needed to run the app:

• Supabase — database, authentication, file storage.
• Mapbox — renders the map (receives coarse location to draw it).
• Google — venue data and photos (Google Places).
• Apple & RevenueCat — process Poppin Plus in-app subscriptions.
• Stripe — venue payments only (sponsored placements and promotions). Never used for consumer payments, and it never receives your location or check-in data.
• Expo — push notifications you opt into.

We will update this page when our practices change and notify you in the app for material changes. Continuing to use Poppin after notification means you accept the update.