This Privacy Policy explains what information DROPIN (operated by Disrupt Designs LLC) collects, how we use it, and the choices you have. DROPIN is a map-based app for finding and sharing skate, surf, BMX, blading, scooter, and climbing spots.

1. Information We Collect

Account information — email address, username, display name, password (stored hashed, we never see it in plain text), and the sports you follow. If you sign in with Google, we receive your name, email, and profile photo from Google.

Content you submit — spot listings, photos and videos, notes, routes, meet listings, likes, and saves.

Location data — if you grant permission, we use your device’s location to center the map near you and to match nearby advertiser content. On the native app, this is requested explicitly and is always optional.

Device & push token — on the iOS/Android app, if you enable notifications, we store a device push token so we can deliver alerts (like “someone liked your spot” or billing updates). You can revoke this anytime in your device notification settings.

Payment information — if you subscribe to Rider+ or an advertiser plan, payment is processed by Stripe. We do not receive or store your full card number — Stripe shares only what we need to manage your subscription (plan, status, billing dates).

Usage & log data — standard technical data like IP address, device type, and app version, collected automatically to keep the service running and secure.

2. How We Use Your Information

• To operate DROPIN — show spots on the map, save your likes/saves, run your subscription
• To notify you about activity relevant to you (likes, billing status) via in-app notifications and, if enabled, push notifications
• To show geo-targeted ads from advertisers to riders near a relevant spot
• To keep the app secure and prevent abuse
• To communicate with you about your account, such as email confirmation or password reset

We don’t sell your personal information.

3. Who We Share Information With

We share information with the service providers that power DROPIN, only as needed for them to provide their service to us:

• Supabase — hosts our database and handles authentication
• Stripe — processes payments for Rider+ and advertiser subscriptions
• Cloudflare (R2) — stores the photos and videos you upload
• Firebase Cloud Messaging (Google) — delivers push notifications on the native iOS/Android apps
• Google Maps Platform — powers the map, place search, and geocoding; the location you search for or the area you view is sent to Google, not your account identity
• OpenStreetMap — supplements map data as an additional open-data source

Other users of DROPIN can see the content you choose to post publicly (spot submissions, your username, and profile photo). We may also disclose information if required by law, or to protect the rights, safety, or property of DROPIN, our users, or the public.

4. Cookies & Similar Technologies

On the web app, we use a session cookie (set by Supabase Auth) to keep you signed in. We don’t use third-party advertising trackers or cross-site tracking cookies.

5. Data Retention

We keep your account information for as long as your account is active. If you delete your account, we delete or anonymize your personal information within a reasonable time, except where we need to retain it for legal, tax, or fraud-prevention purposes.

6. Your Choices

• Edit your profile information, or remove content you’ve posted, at any time from within the app
• Turn off location or notification permissions from your device settings
• Unsubscribe from Rider+ or an advertiser plan from your billing portal
• Delete your account and associated data yourself, anytime, from your Profile tab — or request deletion by emailing us at the address below

7. Children’s Privacy

DROPIN is not directed at children under 13, and we don’t knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we’ll remove it.

8. Security

We use industry-standard measures (encryption in transit, access controls, hashed passwords) to protect your information. No system is perfectly secure, so we can’t guarantee absolute security.

9. International Users

DROPIN is available to riders worldwide. Your information may be processed and stored in the United States or other countries where our service providers operate.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we’ll update the “Last updated” date above.

11. Contact

Questions about this policy, or want to exercise your data rights? Email us at disruptdesignsllc@gmail.com.

See also our Terms of Service.