Privacy Policy

Effective Date: February 14, 2026

1. Introduction

POP ("we," "us," or "our") operates the POP mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. We are committed to protecting your privacy and handling your data in an open and transparent manner.

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: When you create an account, we collect your first name, last name, username, email address, phone number, and date of birth.
  • Profile Information: You may optionally provide a profile picture, bio/description, and configure privacy settings.
  • User-Generated Content: Posts, comments, messages, poll responses, and other content you create within bubbles and chats.
  • Media Uploads: Profile pictures, bubble banner images, chat images, and post videos that you choose to upload.
  • Communications: If you contact us for support, we collect the information you provide in those communications.

2.2 Information Collected Automatically

  • Location Data: With your permission, we collect your precise geographic location (latitude and longitude) to provide the core functionality of the App, including displaying nearby bubbles and placing you on the map. Location data is collected when you actively use the App.
  • Device Information: We collect your device type, operating system, and device token for push notification delivery.
  • Usage Data: We collect information about how you interact with the App, including bubbles joined, power scores, and engagement metrics.

2.3 Information from Third-Party Authentication

If you sign in using Google, Apple, or Facebook, we receive basic profile information (name, email address) as authorized by your settings with those providers. We do not receive or store your passwords from these services.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide and Maintain the Service: To operate the App, create and manage your account, display nearby bubbles, enable posting and messaging, and deliver push notifications.
  • Location-Based Features: To show you bubbles near your location, allow you to create geospatially-anchored bubbles, and display your activity status to other bubble members (subject to your privacy settings).
  • Communication: To send you service-related notifications, respond to your inquiries, and provide customer support.
  • Safety and Moderation: To enforce our Terms of Service, detect and prevent fraud or abuse, and maintain the security of the platform.
  • Improvement: To understand how the App is used and to improve our features and user experience.

4. How We Share Your Information

4.1 With Other Users

Certain information is visible to other users as part of the App's social features:

  • Your username, profile picture, and bio are visible to other authenticated users (unless you set your profile to private).
  • Content you post in bubbles is visible to members of those bubbles.
  • Your activity status within a bubble may be visible to other members (subject to your anonymity settings).
  • Chat messages are visible only to the participants of that specific chat or direct message conversation.

4.2 With Service Providers

We share information with third-party service providers that help us operate the App:

  • Supabase: Database hosting, user authentication, real-time data synchronization, and file storage. Data is stored on Supabase's infrastructure.
  • Google Cloud Platform: Our backend servers are hosted on Google Cloud Run in the United States (us-east1 region).
  • Mapbox: Map rendering and geolocation services. Mapbox may receive location data to render map tiles. See Mapbox's Privacy Policy.
  • Apple Push Notification Service (APNs): To deliver push notifications to iOS devices. Apple receives your device token for this purpose.

4.3 As Required by Law

We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with legal obligations, protect and defend our rights or property, prevent fraud, or protect the personal safety of users or the public.

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via the App or email before your information becomes subject to a different privacy policy.

5. Data Storage and Security

Your data is stored on servers operated by Supabase and Google Cloud Platform, located in the United States. We implement appropriate technical and organizational measures to protect your personal information, including:

  • Row-Level Security (RLS) policies on all database tables to ensure users can only access data they are authorized to view.
  • JWT-based authentication for all API requests.
  • Encrypted data transmission via HTTPS/TLS.
  • Rate limiting on authentication and upload endpoints to prevent abuse.
  • Backend-signed URLs for private media (chat images, post videos) to prevent unauthorized access.

While we strive to use commercially acceptable means to protect your personal information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Your Privacy Controls

The App provides several privacy controls that allow you to manage your visibility:

  • Private Profile: Set your profile to private so that non-friends cannot view your profile details.
  • Anonymous to Strangers: Hide your identity from non-friend members within bubbles.
  • Anonymous Posting: Post and comment anonymously within bubbles.
  • Anonymous to Friends: Prevent friends from seeing your activity in specific bubbles.
  • User Blocking: Block other users to prevent them from seeing your content or contacting you.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the services. If you wish to delete your account, please contact us through the App or via the support page on our website. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

User-generated content posted in bubbles may persist after account deletion if other users have interacted with it, though it will be disassociated from your profile.

8. Children's Privacy

The App is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete that information. If you believe a child under 13 has provided us with personal data, please contact us immediately.

Users between the ages of 13 and 17 should review this Privacy Policy with a parent or legal guardian to ensure they understand and agree to its terms.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Portability: Request a machine-readable copy of your data.
  • Opt-Out: Opt out of push notifications through your device settings. Withdraw location permissions through your device settings.

To exercise any of these rights, please contact us through the support page.

10. California Residents (CCPA)

If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected, the categories of sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom we share it. You also have the right to request deletion and to opt out of the sale of personal information. We do not sell your personal information.

11. International Users

If you are accessing the App from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using the App, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

12. Third-Party Links

The App may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes. Continued use of the App after changes constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please visit our support page.