Privacy Policy

Last updated: 20 May 2026

Bivvy ("we", "our", or "us") operates the Bivvy mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Account information. When you register, we collect your email address and a username you choose. Your real name is never collected, stored, or displayed.

Location data. The App reads your device's GPS position only when you actively request it — for example, to centre the map or to check in to a spot. We do not track your location in the background.

User-generated content. Spots you submit, reviews you write, photos you upload, check-ins you record, and chat messages you send are stored on our servers.

Device token. If you enable push notifications, your FCM device token is stored so we can send you notifications. You can revoke this at any time in your device settings.

Usage analytics. We collect anonymised event data (screen views, feature usage) to understand how the App is used and improve it.

Error reports. If the App crashes, a crash report including device type, OS version, and a stack trace is sent to our error-tracking service.

2. How We Use Your Information

• Providing and improving the App and its features
• Showing you spots near your location
• Sending optional push notifications (new followers, spot approvals)
• Moderating user-generated content to keep the community safe
• Diagnosing bugs and crashes
• Processing payments if you subscribe to Bivvy Pro

We do not sell your personal information to third parties.

3. Third-Party Services

The App uses the following third-party services, each with its own privacy policy:

• Firebase (Google) — push notification delivery
• PostHog — anonymised usage analytics (self-hosted in the EU)
• Sentry — crash reporting and error monitoring
• Cloudflare — CDN and DDoS protection for our servers
• RevenueCat — subscription and in-app purchase management (Pro subscribers only)

4. Data Storage and Security

Your data is stored on servers located in the European Union (Hetzner, Germany). We use TLS encryption for all data in transit. Passwords are hashed with bcrypt and never stored in plain text.

5. Data Retention

We retain your account data for as long as your account exists. If you delete your account, your username is anonymised and your personal data is removed within 30 days. Spot, review, and photo content you submitted may remain attributed to an anonymised identifier.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and personal data
• Object to or restrict processing of your data
• Data portability

You can delete your account directly in the App under Settings → Delete account. For other requests, contact us at support@bivvy-app.com.

7. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via a notice in the App. The date at the top of this page always reflects the most recent revision.

9. Contact

Questions about this Privacy Policy? Reach us at support@bivvy-app.com.