Privacy Policy

1. Introduction

Welcome to Loche ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our GPS messaging application. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, username, and profile picture (avatar) when you create an account via Google Sign-In.
• User-Generated Content: Messages (drops) you create at GPS locations, including text content and location coordinates.
• Interactions: Reactions to other users' drops, and any other interactions within the app.

2.2 Information Automatically Collected

• Location Data: Your precise GPS location when you drop messages, update your location, or search for nearby drops. Location data is used only for the core functionality of the app.
• Device Information: Device model, operating system version, unique device identifiers, and mobile network information.
• Usage Data: App usage patterns, features used, and performance data.
• Log Data: IP address, browser type, pages visited, and time spent on pages.

2.3 Third-Party Services

We use the following third-party services that may collect information:

• Google Sign-In: For authentication. Google collects information as described in their Privacy Policy.
• Firebase: For analytics, crash reporting, and authentication. Firebase collects information as described in their Privacy Policy.
• Google AdMob: For displaying advertisements. AdMob may collect information for ad personalization as described in their Privacy Policy.

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide, maintain, and improve our services
• To enable GPS-based messaging functionality
• To authenticate users and prevent fraud
• To send notifications about nearby drops and interactions
• To display personalized advertisements via AdMob
• To analyze usage patterns and improve app performance
• To comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With Service Providers: We share information with trusted third-party service providers (Google, Firebase, AdMob) to enable our services.
• For Legal Reasons: We may disclose information if required by law, court order, or to protect our rights, property, or safety.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.

5. Location Data

Loche requires precise GPS location data to function. Your location is used to:

• Drop messages at specific coordinates
• Find messages dropped near you
• Send zone-based notifications

Location data is stored securely and is not shared with third parties for marketing purposes. You can revoke location permissions at any time through your device settings, though this will limit app functionality.

6. Data Security

We implement appropriate security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication with JWT tokens
• Regular security audits and updates

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. When you delete your account, we will delete your personal information within 30 days, except where required by law.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your data

To exercise these rights, contact us at the email address below.

9. Children's Privacy

Loche is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page. You are advised to review this policy periodically for any changes.

12. California Residents (CCPA)

If you are a resident of California, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA). These include the right to know what personal information we collect, the right to delete that information, and the right to opt-out of the sale of your personal information. To exercise these rights, contact us at the email address above.

13. European Residents (GDPR)

If you are a resident of the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, data portability, and object to processing. We process your data based on your consent and legitimate interest. To exercise these rights, contact us at the email address above.