Legal

Privacy Policy for TX Carry Compass

Effective date: March 4, 2026

This Privacy Policy explains how TX Carry Compass ("we," "us," "our") collects, uses, stores, and shares information when you use the TX Carry Compass iOS and Android apps and related web properties where this policy is posted.

1. Information We Collect

A. Information you provide

If you create an account or submit content, we process:

• Account data: email address and password (for email/password sign-in), or Sign in with Apple credential data (ID token; Apple may share relay email and account identifiers with our auth provider).
• Profile data: user ID and display name / username.
• Community contribution data: comments, business change requests, misinformation reports, photo uploads, and optional captions.

B. Location data

If you grant location permission, the app accesses precise location to:

• show nearby businesses and map results,
• improve distance-aware search,
• monitor optional proximity alert regions,
• trigger optional local alerts when entering monitored regions.

When these features are used, coordinates are sent to backend search endpoints. We do not create a user-facing location history in app tables.

C. Photo library access

If you choose to upload a photo, the app requests photo library access to selected images. The app re-encodes uploaded images to remove EXIF metadata before upload.

D. Notifications

If enabled, the app uses local notifications for proximity alerts. Notification and background location permissions are requested for this feature.

E. Data collected automatically

Infrastructure may process technical metadata such as IP address, request timestamps, and error logs for security, reliability, and abuse prevention.

2. Data We Store

A. On your device

• auth session tokens and user ID in local app storage,
• appearance preference in local app preferences,
• alert settings and cooldown timestamps in local app preferences,
• cached JSON API responses in app cache storage.

B. On our backend

Through Supabase-backed services, we store:

• profile records (user ID, display name, role, timestamps),
• submitted comments/photos/reports/change requests and moderation status,
• moderation event logs,
• business and signage records, including approved community updates,
• public-business content shown to users after approval.

For "51%" license verification, we also store and query a TABC license dataset imported from public source data.

3. How We Use Information

• operate core app features (map, search, account, submissions, alerts),
• authenticate users and secure accounts,
• review and moderate community submissions,
• publish approved community content,
• prevent abuse and enforce platform rules,
• maintain service performance and reliability.

4. How Information Is Shared

We may share information:

• With service providers:
  • Supabase (authentication, database, file storage, API hosting)
  • Apple services used by app features (MapKit search/maps, Sign in with Apple, notification/photo frameworks)
• With other users: approved comments, approved photos, and approved business/signage updates become visible in the app.
• For legal/safety reasons when required by law or to protect rights, safety, and service integrity.

We do not sell personal information to data brokers. We do not use third-party advertising SDKs or cross-app tracking identifiers (such as IDFA) in this codebase.

5. Data Retention

We retain data for as long as needed to operate, secure, and moderate the service, including maintaining record integrity for approved content and enforcement history.

When a verified deletion request is received, we will delete or de-identify personal data unless retention is required for legal, security, fraud-prevention, or dispute-resolution purposes.

6. Your Choices and Rights

You can:

• disable location permission in your device settings,
• disable notifications in your device settings,
• sign out from the Account tab,
• delete your account from the Account screen in the app or request account/data deletion by contacting us.

If you are in a region with specific privacy rights, contact us and we will process requests as required by applicable law.

7. Security

We use reasonable technical and organizational safeguards designed to protect data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

This service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

9. International Data Transfers

Your data may be processed in countries other than your own, depending on where our infrastructure and providers operate.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will update the effective date at the top of this page when changes are made.

11. Contact Us

For privacy requests or questions, contact:

• Email: contact[at]txcarrycompass[dot]app