Privacy Policy

1. Data we collect

• Account data: name, phone number and/or email address, profile photo, account type (individual or organizer). You choose how to sign in — phone number (SMS code), email/password, Google, or Apple — or browse as a guest (anonymous account) without providing any of this.
• Location: your GPS position, used to show you nearby events on the map and to verify your presence (within 500 meters) before letting you post a photo at a live event.
• Content you post: photos taken on-site at an event, comments, events you create if you're an organizer (title, description, address, image, dates), and reports you submit.
• Interactions: events you mark "interested" in, save, view, and share (tied to your Firebase identifier, including when browsing anonymously).
• Notifications: your device's push token and your notification preferences.
• Technical data: crash reports (linked only to your user ID, never to your email, phone, or location), device-integrity signals used to block automated or fraudulent access (Firebase App Check), language, and standard technical logging.

2. How we use this data

• Show you relevant events near you and in the cities you explore.
• Power the social features (live photos, comments, "interested", shares).
• Verify your physical presence before validating an event photo.
• Secure your account and prevent fraud and abuse.
• Send you the notifications you've opted into.
• Give organizers statistics for their events (views, interested, comments, photos, shares).
• Maintain, secure, and improve the service, including via crash reports.
• Respond to your support requests.

3. Who we share your data with

• Other users: your name, profile photo, and account type are publicly visible, along with content you choose to post (photos, comments, events you create). Your email and phone number are never visible to other users.
• Our technical providers: Google Firebase (authentication, database, photo storage, server functions, push notifications, crash reporting); Google Sign-In and Sign in with Apple if you use those sign-in methods; Google Maps Platform for address lookup when creating an event. These providers process data on our behalf, under their own privacy commitments.
• Authorities: where required by law, or to protect our rights, our users' safety, or public safety.

We never sell your data or share it for third-party advertising purposes.

4. Where your data is hosted

Your data is hosted on Google Cloud / Firebase infrastructure, which may process it in multiple countries. These providers apply recognized contractual safeguards (standard contractual clauses) for international data transfers.

5. How long we keep it

For as long as your account exists. If you delete your account, your personal data, content, and files are cascade-deleted (see "Account deletion" below), except for reports you've submitted or that concern you, which we keep for moderation and safety purposes.

6. Account deletion

You can delete your account at any time from the app. This is irreversible and triggers deletion of: your profile, the events you created (and everything attached to them), your photos and comments, your "interested"/views/shares, your city votes, your profile and cover photos, and your authentication account. Reports remain archived for moderation.

7. Location: your control

We ask for location access only to show you nearby events and verify your presence when posting a live photo. You can revoke this access anytime from your phone's settings; some features (map, posting live photos) won't work correctly without it.

8. Notifications: your control

You choose which notifications you receive (new nearby events, reminders, activity on your events, updates, offers...) from the app's notification settings, and can turn them off anytime.

9. Security

Access to your personal data (email, phone, location) is restricted to you alone by our Firestore security rules. Traffic between the app and our servers is encrypted. We use Firebase App Check to block requests from unauthenticated devices or clients.

10. Minimum age

Vivaler is intended for people aged 16 and over. We don't knowingly collect data from users under 16. If you believe an account belongs to someone under 16, contact us at djesstsenda@gmail.com.

11. Your rights

Depending on where you live, you have rights to access, correct, delete, restrict, object to, and port your data, as well as the right to lodge a complaint with your local data protection authority. You can exercise most of these rights directly from the app (edit your profile, delete content, delete your account) or by contacting djesstsenda@gmail.com.

12. Changes to this policy

We may update this policy as Vivaler evolves. We'll flag significant changes in the app. The last-updated date is shown at the top of this page.

13. Contact

Questions about this policy or your data: djesstsenda@gmail.com.