Privacy Policy

Welcome to ShowUp. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application.

We collect information you provide directly to us, including:

• Account information (phone number, name, email address)
• Profile information (profile picture, favorite quote)
• Event data (titles, descriptions, dates, times, locations, cover photos, galleries)
• Group data (names, descriptions, avatars, member lists, galleries)
• Chat messages and images (up to 4 images per message)
• Location data when you add locations to events
• Contacts data when you choose to invite friends
• Bug reports and feedback you submit
• Device tokens for push notifications

When you use the invite feature:

• Your device contacts are accessed locally to display invite options
• We do not upload or permanently store your entire contact list on our servers
• Phone numbers of contacts you invite may be stored to track invitation status
• Non-users who receive SMS invites are not tracked or profiled by ShowUp
• You can revoke contacts permission at any time through your device settings

ShowUp requests the following device permissions:

• Contacts: To find and invite friends to join ShowUp
• Camera and Photo Library: For profile pictures, event photos, group avatars, galleries, and chat images
• Location: To search for and select event locations
• Push Notifications: To notify you about events, messages, and invitations

We process your data based on the following legal grounds:

Consent: Profile pictures, location access, contacts access, and push notifications. You can withdraw consent at any time.

Contract Performance: Account data and core functionality required to provide the ShowUp service.

Legitimate Interests: Security measures, fraud prevention, and service improvements that benefit all users.

We use the following third-party services to operate ShowUp:

• Firebase (Google): Authentication, database storage, file storage, and cloud functions
• Google Maps/Places API: Event location search and autocomplete
• Firebase Cloud Messaging: Push notification delivery

These services may collect and process data according to their own privacy policies.

Your data is stored and processed using Firebase, which operates data centers globally, including in the United States. By using ShowUp, you consent to the transfer of your information to the United States and other countries where Google operates data centers.

Google maintains certifications under the EU-U.S. Data Privacy Framework and implements standard contractual clauses for international data transfers.

We use the information we collect to:

• Authenticate your account via phone number verification
• Display your profile to other users in shared groups and events
• Enable direct messaging and group/event chats
• Send push notifications for events, messages, and invitations
• Store and display event and group galleries
• Process bug reports and user feedback
• Protect against fraudulent or unauthorized activity

• We collect basic performance metrics to improve app stability
• We do not use third-party advertising trackers or sell data to advertisers
• We do not build advertising profiles based on your activity
• Firebase may collect anonymized crash reports and performance data

We do not sell your personal information. Your information may be visible to other users as part of the app's functionality:

• Your name and profile picture are visible to users in shared groups and events
• Event hosts and group admins can see participant and member lists
• Chat messages are visible to all participants in that chat
• Gallery images are visible to group members or event participants

We use Firebase (Google) as our infrastructure provider to store and process your data.

We retain your data for the following periods:

• Account data: Retained while your account is active; deleted within 30 days of a deletion request
• Chat messages: Retained until the chat is deleted or 2 years of inactivity
• Gallery images: Retained until the associated event or group is deleted
• Bug reports: Retained for up to 1 year
• Inactive accounts: May be deleted after 2 years of inactivity

Note: When you leave a chat, your previous messages may remain visible to other participants.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes secure authentication via SMS verification and encrypted data storage through Firebase.

In the event of a data breach that affects your personal information, we will:

• Notify affected users within 72 hours where required by law
• Provide information about what data was affected
• Describe the measures taken to address the breach
• Offer guidance on steps you can take to protect yourself

You have the right to:

• Access your personal data through your profile
• Correct inaccurate data by editing your profile
• Request deletion of your account and data
• Request a copy of your data (data portability)
• Control notification preferences in settings
• Revoke device permissions at any time through your device settings
• Withdraw consent for data processing where consent is the legal basis

If you are a California resident, you have additional rights:

• Right to Know: You can request information about what personal data we collect, use, and disclose
• Right to Delete: You can request deletion of your personal data
• Right to Opt-Out: We do not sell your personal information to third parties
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at support@showup-app.io. We will respond to verifiable requests within 45 days.

ShowUp is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If we discover that we have collected personal information from a child under 13, we will delete that information promptly.

Parents or guardians who believe their child has provided us with personal information may contact us at support@showup-app.io to request deletion.

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. Your continued use of ShowUp after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about our data practices, please contact us at support@showup-app.io