Where Were We? — Privacy Policy
This is a small, private game for a small group of friends. The whole point is that what you share stays inside your group. This policy explains exactly what we collect, why, where it lives, and how you remove it. We tried to write it like a person, not a law firm.
If you ever have a question, write to mertaslan16@gmail.com.
The short version
- You sign in with Apple. We keep your name and email so your friends know who you are.
- When you post a spot, we store the photo, the map pin you confirm, and your one-line story.
- All of that is visible only to the people in your private, invite-only group. There is no public feed, no discovery, no ads.
- We do not use any analytics or tracking tools. There are no third-party trackers in this app.
- You can delete any post, wipe your whole history, leave a group (which removes your posts from it), or delete your account entirely.
Who runs this
Where Were We is operated by the app's owner (contact: mertaslan16@gmail.com). The app's backend runs on Supabase, which stores the data described below on our behalf. We do not sell your data to anyone, and we do not share it outside your group.
What we collect, and why
Your Apple account info (name and email). When you sign in with Apple, Apple gives us your name (once, on first sign-in) and your email. We store these so your friends can see who posted a spot and who guessed. Sign in with Apple is the only way to sign in. We do not ask for a password.
Photos you post. The photo you pick goes into a private storage bucket only your group can reach. Photos are served through short-lived signed links, only to people in the same group. The file name does not contain your name or user ID.
Map pins (the spot). A spot is a single map location. If the photo you pick carries GPS data in its EXIF, we read that on your device only to pre-fill the pin. You always confirm or move the pin yourself before it is saved. The pin we store is the one you confirm.
Your one-line story. The short memory line you write for a spot. It is shown to your group at the reveal. An optional hint line works the same way.
Your guesses. When you guess a spot, we store the pin you dropped. While a round is open, no one else can see your guess. Everyone's guesses appear together only after the round closes, and only to people in the group.
A push notification token. If you allow notifications, we store a device token from Expo's push service so we can tell you things like "everyone guessed your photo." If you decline, the app works fine without it.
Your group's basics. Group names, who is a member, when people joined, the invite token your group shares to add friends, and the friends you tag as having been somewhere with you.
That is the whole list. We do not collect your contacts, your browsing, your background location, or any advertising identifiers. The location permission is used only to center the map when you are dropping a pin.
What we do not do
- No analytics or tracking SDKs. No Google Analytics, no Facebook SDK, no Amplitude, no Mixpanel, nothing of the kind.
- No ads, ever.
- No public profiles, no public feed, no discovery. Groups are invite-only.
- No selling or renting of your data.
Who can see your stuff
Only the people in your private group. Every read is checked against your group membership on the server. Someone outside your group cannot pull your photos, pins, stories, or guesses. A new member of a group can see that group's existing posts, so invite people you trust.
Where it is stored, and for how long
On Supabase, our backend provider, which hosts the database and the private photo storage. We keep your posts, pins, stories, and guesses for as long as they are part of an active group, or until you delete them. Push tokens are kept until they go stale or you sign out.
Your controls (all inside the app)
- Delete a post. Remove one of your own spots. The post and its photo are deleted.
- Wipe your history. Delete all of your posts and their photos at once.
- Leave a group. Your posts and photos in that group are removed.
- Delete your account. Under the You tab. Removes your profile and all your data: posts, photos, pins, guesses, reactions, tags, and push tokens.
Children
This app is meant for adults sharing memories within a private friend group. It is not directed at children.
Apple's role
Sign in with Apple is provided by Apple under Apple's own privacy terms. We receive only the name and email Apple passes to us, and only if you allow it.
Changes to this policy
If we change how the app handles data, we will update this page and the date above. If the change is significant, we will try to tell you in the app.
Contact
Questions, requests, or data deletion: mertaslan16@gmail.com.