1. Introduction
PopSpot ("we," "our," or "us") is a hyperlocal event discovery app. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use PopSpot. By using the app, you agree to this policy.
PopSpot is operated by Ridley Cyber. For privacy inquiries, contact us at: info@ridleycyber.com
2. Age Requirement
PopSpot is intended for users 13 years of age or older. We do not knowingly collect personal information from children under 13. If we discover that a user is under 13, we will delete their account and data.
3. Information We Collect
3.1 Information You Provide
- Account information: When you sign in via Google OAuth, we receive your Google display name, email address, and profile photo URL from Google. We store this in our database to create your profile.
- Event content: If you post events (admin/business accounts), we store the event title, description, category, location, and timing.
3.2 Information Collected Automatically
- Location data: If you grant permission, we access your device's GPS coordinates to show nearby events and verify check-in proximity. Location is processed on-device and in our Firebase database. We do not sell or share your precise location with advertisers.
- Usage activity: We record upvotes, RSVPs, check-ins, and crowd reports you submit. This data is used to compute trending scores and personalize your feed.
- Device information: Standard Firebase Analytics may collect device type, OS version, and app version for performance monitoring. No personally identifiable information is linked to analytics events.
4. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Authenticate your account | Email, Google UID |
| Show your name and avatar | Display name, photo URL |
| Display nearby events | GPS coordinates (session-only) |
| Enable check-in proximity validation | GPS coordinates at moment of check-in |
| Compute trending scores | Upvotes, RSVPs, check-in counts |
| Moderation and safety | Report submissions, user UID |
| App performance and debugging | Device/OS metadata (anonymized) |
We do not use your data for targeted advertising. We do not sell your data to third parties.
5. Firebase and Google Services
PopSpot is built on Google Firebase, which provides:
- Firebase Authentication — handles sign-in credentials
- Cloud Firestore — stores user profiles, events, RSVPs, and reports
- Firebase Analytics (optional) — anonymized usage metrics
By using PopSpot, your data is processed on Google's infrastructure subject to Google's Privacy Policy and Firebase Terms of Service.
Google may process data in jurisdictions outside your country of residence. Firebase data storage is subject to Google Cloud regional settings configured for this project.
6. Data Sharing
We do not sell, trade, or rent your personal information. We may share data only in these circumstances:
- Service providers: Google Firebase (as described above).
- Legal obligations: If required by law, court order, or government authority, we may disclose information necessary to comply.
- Safety: To protect the rights, property, or safety of PopSpot users or the public.
7. Data Retention
- Account data (profile, events, RSVPs): retained until account deletion.
- Check-in activity: stored ephemerally; Cloud Functions expire check-ins after 3 hours.
- Reports: retained for moderation purposes until resolved or your account is deleted.
- Analytics data: retained per Google Firebase's default retention settings (up to 14 months for events).
8. Your Rights and Choices
Account Deletion
You can permanently delete your account from Profile → Delete Account. This removes your user profile, all RSVPs you created, and all events you posted. Account deletion is irreversible.
Location
You can deny or revoke location permissions in your device settings at any time. The app will function without location access (no nearby filtering or proximity check-in).
Data Access & Portability
To request a copy of your data, email info@ridleycyber.com with subject "Data Request."
Data Correction
Update your display name in the Profile tab. For other corrections, contact us by email.
9. Security
We use Firebase's built-in security (TLS in transit, Firestore security rules for access control) to protect your data. Despite these measures, no system is fully secure. Use at your own risk.
10. Children's Privacy
PopSpot is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us with information, contact us at info@ridleycyber.com and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify users of material changes by updating the "Last Updated" date. Continued use of PopSpot after changes constitutes acceptance.
12. Jurisdiction
This policy is governed by the laws of Texas, United States. Users outside the United States consent to the transfer and processing of their data in the United States.
13. Contact
Email: info@ridleycyber.com
App: PopSpot — Houston's Real-Time Pulse
Operated by: Ridley Cyber