Privacy Policy

Effective date: October 8, 2026

This Privacy Policy explains how Leon Hsieh (“I”, “me”) collects, uses, and protects information in the Bobadex app and on the Bobadex website.

Information we collect

• Account Information: email (via Supabase Auth), username, display name, bio, and profile image. Username, display name, bio, and profile image may be visible to other users, including on rankings.
• User Content: shops you add, drinks, ratings, notes, photos, and photo captions. Photos have a public/private control. Photos and captions you mark public can appear on brand pages on the Bobadex website. That gallery does not show the uploader’s name.
• Social: friendships (requests and acceptance). Rankings can be viewed without an account and may show display name, username, profile photo, bio, and activity counts.
• Collections: counties you choose to track, and suggestions you submit about those collections.
• Location: if you allow it, approximate device location, used to suggest the county collection you are in and to sort nearby brands. Coordinates are sent to our database only to look up that county. We do not store them as a location history.
• Notifications: if you allow notifications, a push token and device platform (iOS or Android), so we can send friend-request alerts.
• Diagnostics: crash reports and performance data (via Sentry), device/OS information.

We do not collect payment information.

Analytics

In the app, we use Firebase Analytics (Google) to understand basic usage and improve Bobadex. Data includes events such as app opens and screen views, device/OS information, coarse region (derived from IP), and app version. We do not collect advertising identifiers (IDFA/GAID) and we do not track you across other companies’ apps or websites. You can opt out of analytics at any time in Settings. The website does not use analytics.

Website

The website is hosted by Vercel. It stores a preference cookie for how brand artwork is displayed. That cookie is not used for advertising or analytics.

Sharing and processors

• Supabase — authentication, database, storage.
• Firebase Analytics (Google) — app usage analytics.
• Firebase Cloud Messaging (Google) — push notifications.
• Sentry — crash reporting and diagnostics.
• Vercel — website hosting.
• Image generation and research vendors — brand icon generation and brand research. No account or personal data is sent. Brand summaries and mascot artwork may be produced with AI from public information about those brands.

Data categories (Apple App Privacy)

• Contact Info: email (account).
• Name: username and display name, linked to account identity.
• User Content: shops, drinks, ratings, notes, photos, captions, bio, collection suggestions.
• Coarse Location: approximate location, used to suggest a county and sort nearby brands. Not stored as a location history.
• Identifiers: Supabase account ID, Firebase app instance ID, and push token (not used for advertising).
• Usage Data: interactions, screens viewed, basic event counts.
• Diagnostics: crash & performance data.

Data is used for app functionality, analytics, and diagnostics, and is not used for tracking or advertising. We do not sell your personal information or share it with third parties for advertising purposes.

Your choices

You can disable analytics collection in the app, and you can decline location and notification permission. You may request access, export, or deletion of your data by using the in-app tools or contacting leonchsieh@gmail.com.

How we use information

• Provide and improve the app and website (saving your shops and drinks, rendering your profile, showing public photos and rankings).
• Suggest a county collection and sort nearby brands when you allow location.
• Send friend-request notifications when you allow them.
• Maintain security and reliability (debugging, crash reports).
• Respond to support requests.

Legal bases (EEA/UK users)

• Contract: to provide the app you requested.
• Legitimate interests: maintain and improve the service (e.g., crash logs).
• Consent: where required (e.g., analytics, location, and notifications).

Data retention

We retain your account and content while your account is active. You may delete your account at any time; deletion removes your account and associated content subject to backups/logs retained for a limited time.

Your choices & rights

• Access/Export: download your data using the in-app export tool or by contacting us.
• Delete: use the in-app “Delete account” control or contact us.
• Privacy requests: email leonchsieh@gmail.com.

Children

Bobadex is not directed to children under 13. If you believe a child provided personal data, contact us to remove it.

Security

We use reasonable safeguards to protect your data. No method of transmission or storage is 100% secure.

International transfers

Your data may be processed in the United States or other countries where we or our processors operate.

Changes

We may update this Policy from time to time. We will post the updated version with a new “Effective date.”

Contact

Email: leonchsieh@gmail.com
Address: California, USA