Privacy Policy

Effective date: May 20, 2026

Last updated: May 20, 2026

HowCrowd ("HowCrowd," "we," "us," or "our") operates the HowCrowd mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Service.

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Who we are

HowCrowd provides community-powered, real-time crowd status for places you care about. For privacy questions or requests, contact us at support@howcrowd.app.

2. Information we collect

We collect information in the following categories:

2.1 Account and profile information

• Email address, display name, and profile photo (when you create an account or sign in).
• Authentication identifiers from sign-in providers (Apple, Google, email magic link, or anonymous guest ID).
• Account preferences, Pro membership status, reward points, and activity statistics (e.g., total responses).

2.2 User-generated content

• Pings (location questions), crowd status responses, optional photos, and reports you submit.
• Business official status updates (for verified business accounts).
• Content you submit may be visible to other users as part of the Service.

2.3 Location information

• Precise location while you use the app (when-in-use only) to show nearby spots, verify on-site responses, and validate photo metadata.
• We do not collect background location. You may disable location in your device Settings; some features will not work without it.

2.4 Photos and camera

• Photos you capture or upload for crowd responses or your profile (Pro users for response photos).
• Photo metadata such as capture time may be used to verify on-site submissions.

2.5 Device and technical information

• Device type, operating system, app version, and language settings.
• Push notification tokens (FCM/APNs) if you enable notifications.
• IP address and general diagnostic data processed by our infrastructure providers.

2.6 Analytics and crash data

• Usage analytics (e.g., feature interactions, session data) via Firebase Analytics to improve reliability and performance.
• Crash and error reports via Firebase Crashlytics to diagnose bugs.

2.7 Information we do not collect

• We do not knowingly collect payment card numbers in the app (Pro subscriptions, when offered, are processed by Apple).
• We do not sell your personal information.

3. How we use your information

We use information to:

• Provide, operate, and improve the Service (crowd status, pings, responses, maps, rewards).
• Verify that responses come from users near a location.
• Authenticate you and manage your account, points, and Pro status.
• Send push notifications you opt into (e.g., nearby pings, response alerts).
• Moderate content for safety (automated and human review processes).
• Detect, prevent, and address abuse, fraud, and security issues.
• Comply with legal obligations and enforce our Terms of Service.
• Analyze aggregated usage to improve the product.

4. Legal bases for processing (EEA/UK users)

If you are in the European Economic Area or United Kingdom, we process personal data based on:

• Contract — to provide the Service you request.
• Legitimate interests — security, moderation, analytics, and product improvement.
• Consent — where required (e.g., optional notifications, location when prompted by iOS/Android).
• Legal obligation — when required by law.

5. How we share information

We do not sell your personal information. We may share information with:

• Other users — crowd responses, display names, profile photos, and location-associated content you choose to publish.
• Service providers who help us operate the Service (see Section 6).
• Law enforcement or regulators when required by law or to protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice where required.

6. Third-party services

We use trusted third parties to run the Service. They process data on our behalf under contractual obligations:

• Google Firebase — authentication, cloud database (Firestore), file storage, cloud functions, analytics, crash reporting, and push messaging. Firebase Privacy
• Apple — Sign in with Apple and App Store services (if applicable). Apple Privacy
• Google — Google Sign-In (if you choose it). Google Privacy
• OpenAI — automated content moderation (text and images you submit may be sent for safety screening). Content is processed for moderation only. OpenAI Privacy
• Apple MapKit — map display and place search on iOS (subject to Apple policies).

These providers may process data in the United States and other countries. We configure retention and access controls appropriate to each service.

7. Content moderation

We use automated tools (including OpenAI) and community reports to detect abusive, illegal, or policy-violating content. Flagged content may be blocked, hidden, or removed. Repeated violations may result in account restrictions.

8. Data retention

• Response photos — automatically deleted from storage within approximately 24 hours after upload.
• Crowd responses and pings — archived or expired per product rules (typically within hours; historical aggregates may be retained in anonymized form).
• Account data — retained while your account is active and for a reasonable period afterward for legal, security, and backup purposes.
• Analytics and crash logs — retained per Firebase default periods unless deleted earlier.

We may retain information longer when required by law or to resolve disputes.

9. Your choices and rights

Depending on where you live, you may have the right to:

• Access, correct, or delete personal information we hold about you.
• Object to or restrict certain processing.
• Withdraw consent where processing is consent-based.
• Port your data in a machine-readable format (where applicable).
• Opt out of push notifications via device Settings or in-app controls.
• Disable location access via device Settings (limits app functionality).

To exercise these rights, email support@howcrowd.app. We will respond within the timeframe required by applicable law.

10. Account and data deletion

You may delete your account at any time:

• In the app — Profile → Delete Account (or email us using the in-app link).
• By email — send a request from your account email to support@howcrowd.app with the subject "Delete my HowCrowd account."

When we process a valid deletion request, we delete or anonymize your account profile, authentication record, and associated personal data within 30 days, except where we must retain information for legal, security, or fraud-prevention purposes. Content you posted may remain in anonymized or aggregated form. Some backup copies may persist temporarily before automatic purge.

11. Children’s privacy

The Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact support@howcrowd.app and we will delete it.

12. California privacy rights (CCPA/CPRA)

California residents have the right to know what personal information we collect, request deletion, and opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioral advertising. To submit a request, email support@howcrowd.app. We will not discriminate against you for exercising your rights.

13. International data transfers

We are based in the United States. If you access the Service from outside the U.S., your information may be transferred to, stored, and processed in the U.S. and other countries where our providers operate. We use appropriate safeguards where required by law.

14. Security

We use industry-standard measures including encrypted connections (HTTPS/TLS), Firebase security rules, access controls, and content moderation. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may be notified in-app or by email where required. Continued use after changes constitutes acceptance.

16. Contact us

Questions about this Privacy Policy or our data practices:

Email: support@howcrowd.app

See also our Terms of Service.