Inabottle - Privacy Policy

Effective Date: April 29, 2026

Inabottle ("we", "our", or "us") is operated by an individual developer. We prioritize user privacy and minimize data collection to only what is strictly necessary for a functional social experience.

1. Information We Collect

a. Technical Identifiers (GUID)

Upon installation, the app generates an Internal GUID (Globally Unique Identifier). This identifier is stored locally on your device and is used to associate your posts and settings with your app instance. It does not identify you personally to us in the traditional sense, but it distinguishes your device from others.

b. Precise Location Data

With your explicit consent, we collect precise GPS location data while the app is in the foreground. This data is linked to your anonymous GUID to enable location-based features, such as finding "bottles" near you. We do not track your location in the background.

c. Media and Audio Access

• Photos/Camera: Used only when you choose to create a "bottle" (post). Images are stored securely on Cloudflare R2 and are not linked to your real identity.
• Microphone: Used exclusively for live audio rooms. Audio is processed in real-time and is never recorded, stored, or analyzed on our servers.

d. Push Notifications

We use Firebase Cloud Messaging (FCM) to send updates. This requires a temporary device token. You can opt-out at any time via device settings.

2. Third-Party Partners & Data Transfers

We use the following partners for technical and advertising purposes: Supabase, Google AdMob, Firebase, Cloudflare R2, GetStream.io, and Google Cloud. By using the app, you acknowledge that your technical data (IP address, GUID, and GPS coordinates) may be transferred to and processed in servers located in the United States and other countries where these partners operate.

3. Data Retention and Deletion

You have full control over your data:

• Individual Posts: You can delete any post directly within the app interface.
• Full Data Wipe: Clearing the app data in your Android/iOS settings will permanently remove your local GUID and disconnect your device from our records.
• Withdrawal of Consent: You may revoke GPS, Camera, or Microphone permissions at any time via your device settings.

4. Brazil (LGPD) & European Union (GDPR)

Under the LGPD and GDPR, we act as the Data Controller. Legal bases for processing: Consent (Location/Media) and Legitimate Interest (Technical functionality). Users have the right to access, rectify, delete, port their data, or object to processing. Because we do not store names or emails, you must provide your Internal GUID to exercise these rights via email.

5. United States (CCPA/CPRA/State Laws)

We do not "sell" or "share" your personal information as defined by the California Consumer Privacy Act. We do not track users across third-party websites. Residents of California and other states have specific rights to data deletion and transparency which we honor through our pseudonymous approach.

6. Japan (APPI)

In accordance with the Act on the Protection of Personal Information (APPI), we ensure that technical identifiers processed by third-party providers comply with security standards. Users in Japan may request disclosure or cessation of use by contacting us via email.

7. Children's Privacy

Inabottle is intended for users aged 13 and older. We do not knowingly collect information from children under 13.

8. Contact Us

For privacy inquiries or to report content, please contact:

Email: [email protected]