Privacy Policy

Information we collect

• Account information: email address and password (or, if you sign in with Google or Apple, the identity they confirm to us), plus a username and optional profile photo you choose.
• Spot content: names, descriptions, tags, locations, and any photos or comments you or others post to a spot. Who else can see this content is controlled entirely by the visibility and sharing settings you choose for each spot (private, shared with specific people at a chosen access level, visible to a group, or public).
• Map activity: the map area you're viewing is sent to Mapbox to load map tiles, and to Google to search for places, so those services can return the right results — see "Third-party services" below.
• Billing information: if you subscribe to a paid plan, Stripe processes your payment directly — we never see or store your full card number. We keep a reference to your Stripe customer and subscription record so we know which plan you're on.
• Usage information: we keep a lightweight, aggregated count of requests to services like Mapbox and Google (by category, e.g. "map tiles" or "place search") so we can enforce daily usage limits per plan. Signed-out visitors are identified only by a random id stored in your browser's local storage, not by anything that identifies you personally.

How we use this information

To operate the map and spot-sharing features themselves; to show you the spots you've been given access to; to notify you of comments or access requests on spots you own or manage; to enforce plan usage limits and process subscription payments; and to keep the service secure and working correctly. We do not sell your personal information.

Third-party services

We rely on a small number of providers to run the app, each of which processes some data on our behalf:

• Supabase — hosts our database and handles sign-in.
• Mapbox — renders the map itself.
• Google Places— powers the map's place search.
• Stripe — processes subscription payments, if you subscribe.
• Google AdSense — may show ads on some pages; see below.

Advertising and cookies

Some pages may show ads served by Google AdSense. Google and its advertising partners may use cookies and similar technologies to serve ads based on your visits to this and other sites, and may collect information such as your IP address and device information for that purpose. Google's own use of this data is governed by Google's Partner Sites policy. You can opt out of personalized advertising, or see what data Google has associated with your ad preferences, at Google Ads Settings. Separately from ad cookies, we use your browser's local storage to keep you signed in and to remember a few preferences (like your last map position) — this is required for the app to function and isn't used for advertising.

Data retention and deletion

We keep your account and spot data for as long as your account is active. To request deletion of your account and associated data, email us at the address below — we don't currently offer a self-service delete button, so this is handled manually.

Children's privacy

Aroamia is not directed at children under 13, and we don't knowingly collect information from them.

Changes to this policy

If we make material changes to this policy, we'll update the effective date above.

Contact

Questions about this policy, or a request to access or delete your data: jason@aroamia.com.