Privacy Policy

DownTo ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information about you when you use our app at downtoapp.org.

1. Information We Collect

When you create an account and use DownTo, we collect:

• Your name, email address, and password
• Your city or location (if you choose to share it)
• Profile photo (if you choose to upload one)
• Events you post, attend, or interact with
• Friends and connections you make on the platform
• Comments and messages you send
• Device information and push notification tokens (if you enable notifications)

2. How We Use Your Information

We use your information to:

• Provide and operate the DownTo service
• Show you relevant events and connect you with friends
• Send you notifications about friend activity and events (only if you opt in)
• Improve the app and fix bugs
• Prevent fraud, spam, and abuse

3. Information We Share

We do not sell your personal information. We share your information only in these cases:

• With other users: Your name, profile photo, and public events are visible to other DownTo users based on your privacy settings
• With service providers: We use Supabase for data storage and authentication, and Resend for email delivery
• Legal requirements: If required by law or to protect the safety of users

4. Your Privacy Controls

You can control your privacy on DownTo:

• Set posts to "Everyone", "Friends Only", or "Followers Only"
• Toggle activity sharing on or off in your profile settings
• Block users who you don't want to interact with
• Delete your events at any time
• Request account deletion by contacting us

5. Data Storage and Security

Your data is stored securely using Supabase, which encrypts data in transit and at rest. We use Row Level Security to ensure users can only access data they are permitted to see. Passwords are hashed and never stored in plain text.

6. Children's Privacy

DownTo is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will remove it promptly.

7. Push Notifications

If you enable push notifications, we store a device token to send you notifications. You can disable notifications at any time through your device settings. We only send notifications for friend requests, friend activity, and event updates — never for advertising.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app. Continued use of DownTo after changes means you accept the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or want to request deletion of your data, contact us at: hello@downtoapp.org