Privacy policy

Gpsy (“we”, “us”) runs the Gpsy app and this website. This policy explains what we collect, why, and the choices you have. We follow India's Digital Personal Data Protection Act, 2023. Gpsy is for people aged 18 and over.

What we collect

• Account data. Your email address and, if you use Google sign-in, your Google profile name and email. Your name, @handle, optional profile photo and optional social usernames.
• Precise location. Only when you check in or look for places near you, and only if you consent. We do not track your location in the background.
• Check-in content. Photos you take in the app, notes and ratings. Photos are cropped and stored without GPS metadata.
• Activity. Stamps, XP, badges, lists, posts, comments, likes, event interest and check-ins.
• Contacts (optional). If you use Find friends by contacts, they are read on your device and are never uploaded.
• Device and usage data. Basic technical data and anonymous performance and page-view analytics on this website.
• Waitlist. The email address you give on our website.

Why we use it

• To run the game: verify check-ins, award XP and badges, rank leaderboards.
• To keep Gpsy safe: detect fake locations, abuse and spam, and handle reports.
• To show your public profile, but only if you switch it on.
• To email you about your waitlist spot, sign-in codes and important service messages.
• To improve the app and fix problems.

Consent, per purpose

We ask separately for precise location, photos, a public profile and marketing. You can withdraw any of them in Settings at any time. Withdrawing may limit features: without location you cannot check in.

Who sees your data

• Your profile is private by default. If you make it public, others see your name, @handle, stamps, badges, level and public lists. Check-in photos show only if you post them as a review.
• We do not sell your personal data.
• We use service providers to run Gpsy, such as hosting, database and authentication (Supabase), file storage, email delivery, analytics (Vercel) and, for place details on demand, Google. They process data only on our instructions.
• We may disclose data if the law requires it or to protect people's safety.

How long we keep it

We keep your data while your account is active. When you delete your account, we delete your personal data, except limited records we must keep by law or for security. Waitlist emails are kept until we invite you or you ask us to remove them.

Your rights

You can access, correct, export and delete your data, withdraw consent, and complain to us or to the Data Protection Board of India. Most of this is in Settings in the app. For anything else, email support@gpsy.app. To delete your account see account deletion.

Security

We use encryption in transit, row-level access controls and rate limits, and we check inputs on every public form. No system is perfectly secure, but we take it seriously and fix issues quickly.

Children

Gpsy is not for anyone under 18. If we learn we hold data from someone under 18, we will delete it.

Changes

If we make a meaningful change, we will tell you in the app or by email before it takes effect.

Contact

Questions about privacy: support@gpsy.app.