Privacy Policy

1. Information We Collect

We collect:

• Account data: Email address, password (hashed), first name, last name, phone number (optional)
• Profile data: Bio, avatar photo (optional)
• Usage data: Favorites, interests, city and language preferences
• Device information: OS type, app version (for bug-fixing)
• Device push notification token: Only if you enable notifications — used solely to deliver alerts to your device and never shared with third parties
• Booking data: Date, time, party size, notes, and contact phone number you provide when submitting a reservation request. Shared with the organization you are booking with, and retained until the booking is completed or cancelled
• Location: Used only to calculate distances to nearby places — never stored on our servers

2. How We Use Your Information

• To provide and improve the Reloc service
• To show you relevant places, events and services in your chosen city
• To send push notifications (only if enabled)
• To process your account and profile updates
• To respond to your support requests
• To process your booking requests and notify you of status updates (confirmed, rejected, or completed)

3. In-App Notifications

With your permission, Reloc sends:

• Social interactions: Alerts when someone likes or comments on your community post
• Event reminders: A reminder 3 days before an event you saved to Favorites ends
• Admin announcements: Important updates from Reloc administrators
• Booking requests (for organization owners) and booking status updates (for users)

You can disable all notifications anytime via Profile → Notifications. Disabling notifications removes your push token from our servers immediately.

4. Guest Mode

If you use the app as a guest, we issue a temporary session token valid for 72 hours. No personal data is collected during guest sessions. After 72 hours, the session expires automatically and no data is retained.

5. Data Sharing

We do not sell, trade, or share your personal information with third parties for marketing purposes.

We may share data with:

• Hosting/infrastructure providers: Necessary to operate the app (Railway.app)
• Cloud storage providers: Your profile photo and any images you upload (e.g. for an organization listing) are stored with Cloudinary, our image hosting provider
• Legal requirements: If required by law or to protect the rights and safety of our users
• Organizations on the platform: When you submit a booking request, your name, contact phone, and booking details are shared with the relevant organization to fulfill your request

Address data of places and events is sent to OpenStreetMap Nominatim only to obtain geographic coordinates — no personal user addresses are transmitted. Push notification tokens are processed exclusively by Firebase Cloud Messaging.

6. Data Security

All communication with our servers is encrypted over HTTPS/TLS. Passwords are hashed using industry-standard algorithms and are never stored in plain text. We apply industry-standard security practices to protect your data from unauthorized access.

We retain your data for as long as your account is active. You may delete your account at any time from the Profile screen in the app.

7. Your Rights

You have the right to:

• Update or delete your account at any time (Profile → Privacy)
• Disable push notifications in your device settings
• Request deletion of all your personal data by contacting us

8. Children's Privacy

Reloc is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Third-Party Services

The app uses the following third-party services, each subject to its own privacy policy:

• Apple Maps / Google Maps: For map display
• OpenStreetMap Nominatim: Geocoding place addresses to map coordinates. Nominatim Privacy Policy
• OpenStreetMap Tiles: Map tiles for place/event/service map previews in the admin panel. OSM Privacy Policy
• Firebase Cloud Messaging (Google): Delivers push notifications to your device — your device push token is transmitted to Firebase's servers solely for this purpose. Firebase Privacy Policy
• Firebase Analytics (Google): Collects anonymized in-app usage data (screens viewed, actions taken) to help us understand how the app is used. Firebase Privacy Policy
• Google Sign-In: If you choose to sign in with Google, Google shares your account's name and email with us to create your Reloc account. Google Privacy Policy
• Sentry: Collects crash reports and error diagnostics to help us fix bugs. Sentry Privacy Policy
• Cloudinary: Stores your profile photo and any images you upload. Cloudinary Privacy Policy

10. Anti-Abuse & Content Moderation

To keep Reloc safe and prevent spam or abuse, we automatically track certain actions you take in the app — such as likes, comments, posts, ratings, favorites, reports, bookings, and subscriptions — recording the type of action, how many times it has occurred, and when. This tracking does not include the content of your posts or messages beyond what is necessary to detect abusive patterns.

If we detect a pattern of abusive activity, we may temporarily restrict your ability to perform that specific action, and repeated violations can result in your account being temporarily or permanently suspended. The same protections apply to organizations on the platform: an organization that repeatedly violates our usage policies may be temporarily or permanently suspended from creating or managing content.

If you believe a restriction or suspension was applied in error, please contact us using the details in Section 12.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or your personal data, contact us: