Droppd.it ("we", "our", or "us") operates the Droppd.it iPhone app, the web app at app.droppd.it, and the website at droppd.it. This policy describes how we collect, use, and protect your information.
Information we collect
- Account information — when you sign in with Google, Facebook, or Apple we receive your name, email address, and profile photo from that provider.
- Location data — when you post a found item we collect the precise GPS coordinates at the time of posting. The map shows only a randomly offset (~200m) approximate location. The exact location is visible only to you, to the person you confirm as the owner, and to our moderators.
- Photos — images you upload of found items. We strip EXIF metadata (including any GPS tags) before storing or displaying them.
- Item data — title, description, and category you provide when posting.
- Claims — when you claim an item, the answer you give to show it is yours. Only the finder and our moderators can read it.
- “Still here” confirmations — when you confirm a found item is still where it was left, we record that your account confirmed it and when.
- Messages — in-app messages between a finder and a claimer for item pickup coordination.
- Device identifiers — push notification tokens (FCM) to send you notifications about your items, if you grant permission.
- App integrity checks — to block bots and modified apps, each request is checked by Apple App Attest (iPhone app) or Google reCAPTCHA Enterprise (web app). These services evaluate device or browser signals; we receive only a pass/fail token.
How we use your information
- To display found items on the map and allow owners to claim them.
- To send push notifications when your item is claimed, when your claim is accepted, or when you receive a message.
- To moderate content and keep the platform safe.
- To enforce our Terms of Service.
Data sharing
We do not sell your personal data. We share data only with the following service providers who process it on our behalf:
- Firebase / Google Cloud — authentication, database, storage, and push notifications.
- Google Maps — displaying item locations on the map.
- Google Cloud Vision — automated content moderation of uploaded photos.
- Apple App Attest and Google reCAPTCHA Enterprise — verifying that requests come from a genuine copy of the app.
Data retention
Item data is retained until you delete it or until your account is deleted. You can delete your account and all associated data from the app settings. Deleted data is removed from our systems within 30 days.
Your rights (GDPR)
If you are in the European Economic Area you have the right to access, correct, export, and delete your personal data. To exercise these rights, delete your account in the app or contact us at privacy@droppd.it.
Children
Droppd.it is not directed at children under 13. We do not knowingly collect data from children under 13.
Changes to this policy
We may update this policy from time to time. We will notify you of material changes via the app or email. Continued use after changes constitutes acceptance.
Contact
Questions? Email us at privacy@droppd.it.