Privacy Policy

1. Scope

Pssly is operated from Australia. This Privacy Policy explains how we collect, use, store, and disclose information when you use the Pssly mobile app and related hosted pages.

By using Pssly, you agree to the practices described in this policy. If you do not agree, do not use the app.

2. Information We Collect

We collect information you provide directly and information generated when you use the app.

• Account information such as your email address, username, optional display name, and profile details.
• User content such as posts, comments, reactions, uploaded photos, reports, and support messages.
• Location data when you choose to create location-tagged Drops, use map and Territories features, or otherwise grant location access.
• Subscription information such as your premium status and purchase state returned by Apple, Google, and RevenueCat.
• Product analytics events and crash or error telemetry generated by your use of the app.

3. Automatic Collection and Device Permissions

• When the app is used, we may collect device and app information needed to operate the service, including app version, operating system, general device information, timestamps, and diagnostic information.
• If you grant permission, the app may access your location while in use, your camera, and your photo library for the features you request.
• We may store limited settings and cached data on your device, such as sign-in session information, analytics preferences, cached profile data, and saved map region, to support app functionality.
• We do not use advertising IDs to serve third-party advertising in the app.

4. Authentication and Sign-In

• You can sign in using email one-time codes.
• You can also sign in with Google Sign-In. In that flow, Google and Supabase process the authentication transaction.
• On supported Apple devices, you can also sign in with Apple. In that flow, Apple and Supabase process the authentication transaction. Apple may also provide information such as your email address and name, subject to your Apple account settings and permissions.

5. Photos and Location Data

If you choose to upload a photo, Pssly accesses only the image you select or capture. We may resize or compress uploaded photos before storing and displaying them through Supabase storage for supported features.

When you create a location-tagged Drop, the app may store precise coordinates. If you enable the private location option for a Drop, the app obfuscates the stored location by up to about 200 metres before saving it.

When you use map features, the app displays map content using Google Maps services.

Pssly does not request EXIF metadata from the image picker as part of the normal photo upload flow.

6. How We Use Information

• Provide account access, authentication, and profile management.
• Show your content, social interactions, Drops activity, and profile details according to your privacy settings.
• Operate map features, nearby Drops, Territories views, and location-aware posting.
• Enable premium features and restore purchases for eligible subscriptions.
• Investigate abuse, enforce the Terms of Service, respond to reports, and protect the service.
• Improve product performance and reliability using analytics and error monitoring.

7. Analytics and Error Monitoring

Pssly uses PostHog for product analytics and Sentry for crash and error monitoring.

PostHog analytics are processed using an anonymous app-install identifier. Pssly does not intentionally send your email address, display name, or internal account ID to PostHog.

Sentry crash and error telemetry is processed without attaching your account identifier. You can turn PostHog product analytics on or off at any time in Settings > Privacy > Product Analytics. If you turn product analytics off, PostHog analytics should stop, but Sentry crash and error telemetry may still be processed as needed for app stability, debugging, fraud prevention, and security.

8. Sharing and Service Providers

• Supabase for authentication, database, and file storage.
• Google for Google Sign-In when you choose that sign-in method.
• Apple for Sign in with Apple when you choose that sign-in method.
• Google Maps services for map display and related map features when you use those features.
• RevenueCat for subscription state and entitlement management.
• Apple App Store and Google Play for billing, subscription management, refunds, and purchase restoration under their platform rules.
• PostHog for product analytics.
• Sentry for crash reporting and error monitoring.
• We may also disclose information where required by law, to protect users, or to enforce our rights.

9. Privacy Controls and User Choices

• You can switch your profile between public and private in Settings > Privacy.
• You can turn product analytics on or off in Settings > Privacy.
• You can control device permissions such as location, camera, and photo library access in your device settings.
• You can delete your account through the in-app Settings screen.

10. Retention and Deletion

We keep information for as long as reasonably necessary to operate Pssly, maintain your account, comply with legal obligations, resolve disputes, and prevent fraud or abuse.

When you request account deletion in the app, we will process deletion of the account and associated data covered by that flow. Some information may still be retained where required for legal compliance, security investigations, fraud prevention, or limited backup and disaster recovery processes.

If you need deletion assistance and cannot access the app, contact support using the details below.

11. Security and International Processing

We use technical and organisational measures that are reasonable for the service, including encrypted transport, access controls provided by our service providers, and operational monitoring. No system is completely secure.

Your information may be processed in Australia, the United States, and other countries where our service providers operate.

12. Children and Contact

Pssly is not intended for users under 13, or under any higher minimum age that applies where the user lives. If you believe a child has created an account in breach of this rule, contact us so we can review and act.

Privacy and data requests can be sent to [email protected].