Privacy Policy

1. Information We Collect

• Account & SSO Information: When you create an account using email, Apple Sign-In, or Google Sign-In, we collect your name, email address, age/date of birth, and authentication tokens.
• Profile Data: Your uploaded avatar images, bio, selected traits, Vibe Score, and friends list.
• Location Data: Opoly relies on real-world connections. With your permission, we collect your device's precise geolocation (GPS) in the foreground and background to show you nearby events, place your pin on the map, and verify event check-ins.
• User-Generated Content (UGC): Event details, 1-on-1 and group chat messages, images, and other content you post.
• Device & Notification Data: We collect device identifiers, IP addresses, crash logs, and Push Notification tokens (FCM) to send you alerts about messages and events.
• In-App Purchases & Subscriptions: If you purchase a premium membership, transactions are processed securely through Apple App Store or Google Play (via RevenueCat). We do not collect or store your raw credit card information.
• Camera & Photos: When you choose to upload an avatar or an event cover photo, we request access to your device's camera or photo library. These images are stored securely on our servers (via Firebase Storage).
• Biometric Data (Local Only): If you enable Face ID / Touch ID to secure the app, this data is processed entirely on your local device hardware. We NEVER transmit, collect, or store your biometric data on our servers.

2. How We Use Your Information

• To create and manage your account and subscription status.
• To connect you with nearby events and users using your location.
• To deliver real-time push notifications.
• To facilitate secure 1-on-1 and group event messaging.
• To enforce our Terms of Service and maintain a safe environment.

3. Sharing Your Information

We do not sell your personal data. We only share data with:

• Other Users: Your public profile, location (based on your privacy settings), and events you host/join are visible to others on the platform.
• Service Providers: We use trusted third parties including Google Firebase (Hosting, Database, Analytics, Crashlytics) and RevenueCat (Subscription management).
• Legal & Safety Authorities: If required by law or to protect the safety of our users.

4. Data Retention & Your Rights

We retain your personal information for as long as your account is active. You have the right to access, modify, or delete your data. You can delete your account and all associated data directly within the Opoly app settings or by visiting our Support Center. Upon deletion, your personal data is wiped, though we may retain aggregated, anonymized data for analytics.

5. Children's Privacy (COPPA)

Opoly is strictly for users aged 18 and older. We do not knowingly collect personal information from children under 18. If we become aware that an underage user has created an account, we will immediately delete their data and terminate the account.

6. Contact Us

If you have questions about this Privacy Policy, please contact us at: privacy@opoly.app.