SkyDrop privacy policy

Account information includes your email address, confirmation status, display name, username, profile drawing, friendships, friend requests, blocks, invite and reward status, and notification preferences. We use your email for sign-in, account recovery, verification and support. Firebase Authentication handles your sign-in credentials.

Drops include your artwork and attached photos, the place you select, height, expiry, recipients and approximate sender-to-drop distance rounded to kilometres. We record first-open and capture activity so you and your recipients can see delivery progress. Selecting a drop location is different from sharing your current GPS position.

Photos you choose to keep are stored in your gallery. Photos you choose to send back are delivered to the sender of that drop. Those are separate actions; merely opening the camera does not upload its live view.

Bug reports include what you write, your account ID and email, app build and device information, and any screenshots or recordings you choose to attach. Reports about inappropriate content include the reason, relevant account identifiers, and a copy of the reported artwork and its drop location for safety review.

Advertising enquiries include contact and business details, the message or picture you choose, aircraft and banner settings, colours, smoke, locations and radii, showing count, destination link and quoted price. Website enquiries are sent to our team by email. The app stores enquiries in Firebase.

We ask for location while you use the app. We do not collect background GPS location or maintain a continuous GPS trail. To unlock a drop, the app sends your position to our server for a distance check. That unlock endpoint does not store the submitted latitude and longitude. It records a successful first-open time; a refused distance check may put your account ID, drop ID and rounded distance in operational logs.

When sending, the phone may calculate your approximate distance from the chosen drop place and send only that rounded distance. Drop coordinates themselves are stored so your recipients can find the drop.

The camera, compass, motion sensors and supported-device AR world tracking position artwork in the scene. Camera frames and AR tracking maps are not uploaded by this feature. A captured image is uploaded only when you choose a sharing or gallery action. Library access reads the photos or recordings you select for artwork or support; saving to your camera roll happens when you request it.

Private means only you can access a gallery photo through SkyDrop. Friends means your accepted SkyDrop friends can access it. Public means any signed-in SkyDrop user who reaches your gallery can access it, subject to blocking. Public does not mean that a public discovery feed exists, or that an unsigned visitor can browse your photos.

Your gallery setting is the default for new photos, initially Private. Changing that default does not change the individual visibility already saved on existing photos. Open a saved photo to change that photo's visibility. Older photos without an individual setting follow the account default; before that default changes, we preserve the old setting on those photos.

Drops are separate from public gallery photos: only their sender and chosen recipients have the relevant access, with server-side recipient, expiry and distance checks protecting the artwork. People who know your username or invite code can send a friend request; there is no public directory or discovery feed. Blocking prevents access and contact through the protected app flows.

An authorised viewer can save or copy what they see. Taking back a drop, changing photo visibility or deleting your account cannot recall copies someone has already made, or a previously issued photo access link before its short expiry.

If you allow push notifications, we register a notification token and your preference. Notifications may cover new drops, returned photos, friend activity and team announcements. In Settings → Notifications, choose All notifications, Friends only (no announcement pushes), or Off. Announcements can remain visible inside the app even with their push notifications disabled.

Expo and the platform notification service process the token and notification title/body. Push notifications do not contain the drop's artwork or a photo attachment.

We do not use advertising identifiers, sell personal information, or install third-party advertising tracking or general-purpose analytics SDKs. We do use first-party measurements to operate the app and count advertising delivery. It would be inaccurate to call this no analytics of any kind.

When an eligible advertising campaign is served, its counters can include showing, capture and click totals, daily account-linked showing counts and coarse location totals rounded to two decimal places. The current app supplies the drop's target coordinate for banner selection, not a continuous stream of the viewer's GPS location. Daily place totals are separate from the per-account count map, rather than a per-account coordinate history. Advertisers receive campaign reporting rather than a list of viewer accounts.

Firebase and our hosting/email providers may process technical request data such as IP addresses, timestamps and error or delivery information for service operation, security and abuse prevention. Operational logs follow the configured provider retention periods; we do not claim they are erased immediately with an account.

Google Firebase provides authentication, our database, file storage and server functions. Our functions run in Canada. Individual Firebase resource locations and provider processing can differ; we do not promise that every authentication, log, notification or other service record stays exclusively in Canada. Connections use transport encryption.

Expo delivers app push notifications through Apple or the relevant device platform's notification service. Apple also handles App Store payments and subscriptions; purchase or entitlement information needed to provide Pro may be processed by SkyDrop and Firebase.

Vercel hosts the website and processes its requests. Resend delivers website flight enquiries to our team's Gmail mailbox, including the configuration and any banner image you submit. Google processes messages in that mailbox. Your contact email is used to reply to the enquiry, not to automatically subscribe you to marketing.

The website loads fonts from Google Fonts and maps from OpenStreetMap. Its Nominatim search service receives the place searches and selected pin coordinates needed for search or place labels. These requests also expose ordinary connection metadata to those providers. The website does not contain an analytics script. Visiting an advertiser's optional external link makes that destination's own privacy policy apply.

Drops are inaccessible after their chosen expiry, up to 30 days. An hourly cleanup deletes expired drop records and files. Saved gallery photos stay until you delete them or your account. Returned photos expire after 30 days and are removed by cleanup, unless you delete them earlier. A separate gallery copy a recipient chose to keep is governed by its own ownership and visibility.

Photos you upload but never send are removed after they have been abandoned for 24 hours, on the next hourly cleanup, or by applicable draft cleanup. Failed or unfinished support uploads are treated similarly. Local drafts and caches can remain on the device until cleared or removed with app data.

Completed bug reports and their support media, app advertising enquiries and daily advertising statistics are removed after 180 days on scheduled cleanup. Cumulative campaign totals can remain without individual viewer entries. When an account is deleted, we remove its account link from purchase records but retain transaction identifiers to prevent receipt reuse. Website enquiries also exist in our support mailbox and email-delivery provider records; they are handled there separately and can be the subject of an email deletion request.

Reported-content evidence is retained for up to 180 days for abuse and safety review even if the original drop expires or an involved account is deleted. Provider security logs, backups on their own expiry cycles, and records that must be preserved for a legal obligation or an active legal request may outlast ordinary deletion. We restrict retained material to the purpose that requires it.

Use Settings → Delete my account to remove your account/profile, friendships, pending friend requests, block relationships, streaks and rate-limit counters, username/invite lookups, notification token/preferences, gallery photos, returned-photo records involving your account, sent drops, unfinished uploads, support reports/media and app advertising enquiries. Your account-linked entries in advertising statistics are removed; aggregate campaign totals need not be removed.

For a group drop you received, deletion removes you from its recipients and removes your open/capture markers. It does not destroy the other recipients' drop; the drop is removed when its last recipient leaves. Moderation evidence has the limited retention explained above; we remove your reporter identifier from reports you submitted when deleting your account.

You can delete individual gallery or returned photos and take back sent drops without closing your account. Account deletion does not cancel an Apple subscription; manage that separately through Apple. For website enquiries and mailbox records, or a data access/deletion request, email elvilookup@gmail.com. We may need to verify the request belongs to you.

SkyDrop is intended for people aged 13 and older. We do not knowingly create accounts for children under 13. Contact us if you believe a child has supplied personal information so we can investigate and remove it as appropriate.

We update the date when this policy changes. Material changes will be communicated as appropriate. Privacy questions and requests: elvilookup@gmail.com.