Privacy Policy

1. Information We Collect

• Account information: your email address, used only for authentication. It is stored in Firebase Authentication, not in our database.
• Profile information: name, username, profile photo, bio.
• Content you share: posts, photos, comments, and event names, plus tagging metadata.
• Social graph: connection requests, acceptances, and mutual connections.
• Reports you file about other users or content.
• Device notification identifier: a push token issued by Apple or Google, stored with your account so notifications can be delivered to your device. It is never used for advertising or to track you across apps.
• Usage and performance data — only if you turn it on. This is off by default and can be changed any time in Settings › Privacy.
• Crash reports: always collected so we can fix errors. This one cannot be turned off.

Photos are stripped of EXIF metadata, including GPS location, on your device before they are uploaded.

2. How We Use Information

• To operate the app: authentication, posting, tagging, and displaying connections.
• To keep the platform safe — see Content Moderation below.
• To prevent abuse and spam, and to fix crashes and errors.
• To improve the experience with usage analytics, if you allowed it.
• To provide support when you contact us.

We never sell your personal data or use it for advertising. We do not track you across other apps or websites.

3. Content Moderation

• Text you share (comments and event names) is checked on our servers against our own word list. Blocked content is not published.
• Photos are scanned by Google Cloud Vision SafeSearch for adult or violent content before they are shared. Blocked photos are not published.
• User reports go into a moderation queue that is reviewed within 24 hours.

Automated checks may create a moderation record containing the flagged text or a reference to the photo. These records are kept as safety evidence. When you delete your account they are anonymised rather than deleted, so they can no longer be linked to you.

4. Sharing & Visibility

Connections is designed around real-life relationships. Visibility of content depends on your connections and the tagging rules within the app. We do not sell your personal data.

5. Data Storage & Security

• Firebase security rules for access control.
• HTTPS encrypted communication.
• Email verification requirements.
• App Check bot and abuse protection, plus rate limiting.
• EXIF cleanup before upload.

No system is 100% secure, but we continuously work to protect your data.

6. Third-Party Services

• Firebase (Google): authentication, database, storage, push notifications.
• Google Cloud Vision: automated photo moderation.
• Firebase Crashlytics: crash reporting (always on).
• Google Analytics and Firebase Performance: usage and performance stats, only if you turn them on.
• Resend: sending verification emails.

See Firebase privacy and Google privacy.

7. Your Rights (GDPR / KVKK / CCPA)

• Export your data — Settings › Export Data. Includes your profile, posts, pending posts, comments, likes, connections, connection requests, notifications, blocked users, reports you filed, feedback, and invite codes.
• Delete your account — Settings › Delete Account. This happens immediately, not after a waiting period.
• Turn usage analytics on or off — Settings › Privacy.
• Update your profile, manage notification preferences, and block other users.

When you delete your account we also remove your comments and likes from other people’s posts, your entries in other people’s block lists, your pending posts, feedback, and invite codes. Posts you were tagged in stay online with you removed from them. Moderation records are anonymised, not deleted.

8. Children’s Privacy

Our service is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe your child provided personal data, contact us and we will remove it.

9. Contact

For privacy questions, contact: support@connectionsapp.app
Account deletion happens immediately from the app. Written requests sent by email are answered within 30 days.