Privacy policy

Operated by JMJC Digital Pty Ltd, ABN 86 698 608 623, 227 Abbotsford St, North Melbourne VIC 3051.

Last updated: [LAST UPDATED DATE]

Placeholders in [SQUARE BRACKETS] must be filled in or confirmed by Chris before publishing. Anything marked TO CONFIRM is not verified from the code and must not be published as written.

Operated by JMJC Digital Pty Ltd (ABN 86 698 608 623), 227 Abbotsford St, North Melbourne VIC 3051 ("we", "us"). This policy explains what personal information CrowdPop collects, why, who we share it with, how long we keep it and how to delete it.

Contact for privacy questions: hello@crowdpop.com.

What we collect

When you create an account

• Email address and a password. Passwords are stored as a one-way hash, never in plain text.
• Optional first and last name.
• Whether you use CrowdPop as a user or as a venue.
• If you sign in with Google or Apple: the account ID that the provider gives us and the email address it verifies. With Apple, we receive the name and email you choose to share with us.
• Sign-in session details: a refresh token, your IP address and your browser or device type. Sessions expire after 7 days.

Your profile

• Username, avatar, categories you choose, and whether others can look you up.
• The venue you are currently checked in to.

Location

• CrowdPop uses your location only while the app is open. We don't track your location in the background.
• Location is on by default. You can turn off "Share my location" in Settings. Some features won't work without it.
• Auto check-in uses lower-precision location to detect when you are near a venue you have visited or saved. Near a favourite venue, it uses higher precision.
• We store your latest reported position only. Each new report replaces the previous one.
• Your check-in location is used to check that you are close enough to a venue. We don't store that location.

Your activity

• Check-ins, crowd level reports, and any corrections you suggest to venue information.
• Ratings (stars and tags) you give to venues.
• Chat messages in venue chats and direct or group chats, and any reports you make about them.
• Favourites, mates and social settings (off by default), trips you plan, and event reminders.
• Taste preferences you choose ("what I'm into"), such as tags, crowd preference, and usual days and times. These are stored. TO CONFIRM: whether these are used to personalise anything.
• Points and rewards you earn.

Photos

• Live photos you upload, with the crowd level and time they were taken. Photos are uploaded only when you are checked in to the venue.
• Location metadata (EXIF/GPS) is removed from photos on upload.
• Faces are blurred on your device before upload.

Devices and notifications

• Your device's push notification token and platform.
• Your notification settings.

Technical records

• Request logs: the method, the path (without query text), status, time taken, your account ID, IP address and browser or device type. We keep these for 30 days.
• Audit logs: records of important actions, including the actor, the action, and the IP address.

Venue accounts

• Business name, contact details, and the business information required by the account (including tax ID and date of birth fields in our systems). TO CONFIRM: which of these fields are collected in practice.
• Venue profile links (such as website, Instagram and TikTok URLs). We store the link only.
• Events, promotions, staff profiles and photos the venue chooses to publish.
• Venue accounts can see the audience numbers for their push notifications. They don't see individual users.

Why we collect it

• To create and secure your account, and to sign you in.
• To check you in to venues, show crowd levels and let you post observations.
• To send venue alerts to devices within range that have been active in the last 24 hours.
• To run chat, and to moderate chat and photos.
• To run rewards, and to keep the service working and secure.
• To send you account emails, such as verification and password reset.

Who we share it with

We don't sell your personal information, and we don't use third-party advertising or analytics SDKs in the app.

We use these service providers. They receive only what they need for the purpose listed:

• Google and Apple: verify sign-in tokens.
• Firebase Cloud Messaging (Google): delivers push notifications. It receives your device token and the notification content.
• Google Maps: displays maps in the app, including your location layer.
• Photon (komoot, OpenStreetMap): place search. It receives the search text and your device's location.
• Google Routes, or OSRM (OpenStreetMap): walking directions. They receive the start and destination points.
• Anthropic or OpenRouter: powers Poppy, the CrowdPop chat assistant. When you use Poppy, it receives the venue name, your message (up to 400 characters) and recent messages in the venue chat (up to 200 characters each, without names). TO CONFIRM: which provider is live.
• OpenRouter (Google Gemini model): moderates live photos. It receives the full image.
• Mailgun, or SendGrid as a fallback: sends account emails. They receive your email address, the subject, and the verification or reset link.
• Cloudflare R2: stores live photos.
• DigitalOcean Spaces: stores venue, event and staff photos.
• Stripe: venue billing. It receives the venue's email and account ID. TO CONFIRM: whether billing is live.
• Cloudflare Pages: hosts the venue and admin portals.
• Supabase (Postgres, Sydney region) and Coolify: our database and API hosting. TO CONFIRM: all hosting regions and backup locations.

Venue data (opening hours, reviews and similar listings) comes from Google Places, Outscraper and BestTime. We send them a grid area, not your personal details.

Reviews shown on CrowdPop come from Google via Outscraper. Users don't write reviews on CrowdPop.

We may disclose information if the law requires it.

How long we keep it

Deleting your account

You can delete your account in the app: Settings > Delete account. You'll need to tick an acknowledgement before it proceeds. Deletion takes effect straight away.

User accounts: we permanently delete your profile, sessions, devices, favourites, chat messages, memberships, rewards, trips, photos, ratings, check-ins and mates. Any reports you made are kept, with your identity removed.

Venue accounts: deleting a venue, admin or business account does not delete the whole record. The login is removed (your email is replaced with a deleted placeholder, and your password and social sign-in IDs are removed). Business records are kept:

• the venue business name, phone number, tax ID, date of birth field and timezone
• the Stripe customer ID, used for billing records
• venue claims and subscriptions
• staff profiles and venue push history

Why these are kept: [TO CONFIRM: the reason and the legal basis for keeping each record, such as tax or billing obligations. Not stated in the code.]

Sessions, the profile, devices, favourites, messages, memberships, rewards, trips, photos, ratings, mates and blocks are deleted for venue accounts too.

Once deleted, your request logs and audit logs no longer link to your account. Live photo files are deleted.

To delete your account without the app, contact hello@crowdpop.com.

Children

CrowdPop is for people aged 16 and over. We don't currently have an age check in the app.

Security

Passwords are hashed with bcrypt. Sessions use short-lived access tokens with a 7-day refresh. Resetting your password signs you out everywhere. Our data is stored in Australia (TO CONFIRM for all services). Live photos are served only through short-lived signed links. Third-party API keys are stored in the database without encryption at rest. TO CONFIRM: whether that is acceptable, or whether it should be listed here.

Changes to this policy

We'll post changes here and update the date below. [LAST UPDATED DATE]

Contact us

JMJC Digital Pty Ltd
ABN 86 698 608 623
227 Abbotsford St, North Melbourne VIC 3051
Email: hello@crowdpop.com