Privacy Policy

This Privacy Policy describes how Refeed (“we,” “us,” or “our”) collects, uses, and shares your personal information when you use the Refeed iOS app and the refeed.co website (together, the “Services”). Refeed lets you keep a record of places you visit — with photos, notes, and ratings — and optionally publish visits to a public profile.

Questions? Contact us at privacy@refeed.co.

1. Information We Collect

Account information

You create a Refeed account with Sign in with Apple. When you do, Apple shares your name and email address with us (if you use Apple's “Hide My Email” feature, we receive a private relay address instead of your real email). You also choose a username and may add a display name, bio, and profile photo.

Photos and location data

When you add photos to a visit, we process metadata embedded in those photos (EXIF data), including the date, time, and GPS coordinates where they were taken. We use these coordinates to suggest and record the place associated with a visit, including reverse geocoding coordinates into place names and addresses using Google's mapping services. Photos you upload are stored and served by Cloudflare Images. Visit content you create — titles, notes, ratings, dates, and place information — is stored with your account.

The app only accesses photos you explicitly select. Visits are private to your account unless you publish them; published visits (including their photos, place information, and notes) are publicly visible on your profile and via share links.

Crash reports and diagnostics

We use Sentry to collect crash and error reports so we can find and fix problems. These reports can include device information (such as device model, operating system version, and app version), technical logs about what the app was doing when the error occurred, and your IP address. If the app offers to send an error report with a screenshot attached, the screenshot is only included with your action and may contain whatever was on screen at the time.

Usage and technical information

When you use the website, we collect standard technical information such as IP address, browser type, and pages visited, including through privacy-friendly analytics provided by Vercel. We use this information to operate, secure, and improve the Services.

2. How We Use Your Information

• To create and manage your account and profile
• To provide the core features of the Services: organizing your photos into visits, identifying places, and publishing visits you choose to share
• To maintain the security and reliability of the Services
• To diagnose and fix crashes, errors, and abuse
• To respond to your support requests
• To comply with legal obligations

We do not sell your personal information, and we do not use it for third-party advertising.

3. Service Providers We Share Data With

We share personal information only with the service providers we use to run the Services:

• Apple— Sign in with Apple for account authentication.
• Supabase— authentication and database hosting for your account and visit data.
• Cloudflare— storage and delivery of photos you upload (Cloudflare Images) and spam protection on web forms (Turnstile).
• Google— Google Maps and Google Places are used to display maps, look up places, and reverse geocode photo locations. Google's use of data is governed by its own privacy policy. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Sentry— crash and error reporting.
• Vercel— website hosting and analytics.

We may also disclose information if required by law, to protect the rights and safety of our users, or in connection with a business transfer such as a merger or acquisition.

4. Public Content and Sharing

Visits you publish, along with your profile (username, display name, bio, and profile photo), are publicly accessible. Published visits can include photos, place names, addresses, map locations, dates, ratings, and notes. Think carefully before publishing a visit that reveals locations you consider sensitive, such as your home. You can unpublish or delete a visit at any time in the app, which removes it from your public profile and disables its share links.

5. Data Retention

We keep your information for as long as you have an account with us. When you delete a visit or photo, it is removed from your public profile immediately and deleted from our systems. When you delete your account, your data is deleted as described below. Residual copies may persist in encrypted backups for a limited period before being purged.

6. Deleting Your Account and Data

You can permanently delete your Refeed account at any time from within the app under Settings → Delete Account. Deleting your account:

• Permanently deletes your profile, visits, notes, ratings, and place data
• Deletes your uploaded photos from our storage provider
• Disables your public profile and any previously shared visit links
• Revokes your Sign in with Apple authorization and signs you out everywhere

Account deletion is immediate and cannot be undone. If you have trouble with in-app deletion, email privacy@refeed.co and we will delete your account for you.

7. Your Rights

Depending on where you live (for example, the EEA, UK, Switzerland, Canada, or certain US states), you may have rights to access, correct, export, restrict the processing of, or delete your personal information, and to withdraw consent where processing is based on consent. You can exercise most of these rights directly in the app (editing your profile, deleting visits, or deleting your account). For anything else, contact us at privacy@refeed.co. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

8. Security

We use industry-standard technical and organizational measures to protect your information, including encryption in transit and authenticated access to your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

The Services are not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at privacy@refeed.co and we will delete it.

10. International Transfers

Our service providers store and process data in the United States and other countries. Where required, we rely on appropriate safeguards for international transfers, such as standard contractual clauses implemented by our providers.

11. Changes to This Policy

We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date. For material changes, we will provide additional notice in the app or by email.

12. Contact Us

For privacy questions or requests, email privacy@refeed.co.