How StallPass collects, uses, and protects your information.

1. Scope and service operator

This Privacy Policy applies to the StallPass mobile app, the StallPass website, and related support pages. StallPass helps people find bathrooms, submit updates, save locations, and, for approved businesses, manage listing details and claims.

2. Information we collect

• Account and session information such as your display name, email address, account ID, role, account status, sign-in records, and preferences.
• Precise or approximate foreground location when you allow it, plus searches and selected places needed for nearby results, emergency discovery, and directions.
• Things you submit, such as bathroom listings, codes, photos, ratings, reports, accessibility updates, live status, business claims, and moderation records.
• Saved accessibility preferences and need profiles. A profile such as wheelchair access or IBD urgency can reveal disability, accessibility, or health-related needs that you choose to save.
• Device and app information such as push tokens, platform, app and operating-system version, installation or anonymous identifiers, crash reports, and performance data.
• Product interaction and operational events, such as app launches, searches, listing views, code-reveal outcomes, navigation actions, and offline-sync results.
• Rewarded-ad information such as ad requests, impressions, interactions, reward outcomes, diagnostics, and the limited account-or-guest verification value used to prevent reward fraud.

3. How we use information

• To provide search, map, directions, and bathroom detail features.
• To run accounts, favorites, contribution history, business tools, moderation, and support.
• To send notifications and help prevent fraud, abuse, and misuse.
• To understand feature use, measure service health, and fix crashes, bugs, and reliability problems.
• To offer optional rewarded code or points unlocks and verify completed rewards.
• To honor export, deactivation, deletion, notification, and permission choices.

4. How information is shared

StallPass does not sell personal information. We share limited information with:

• Supabase for authentication, database, storage, server functions, realtime features, and first-party event analytics.
• Expo for push-notification delivery and Expo Insights app-launch and technical telemetry.
• Sentry for crash, error, and performance monitoring. Signed-in diagnostics may include a StallPass account ID and account segment, but Sentry is configured not to send default personal information.
• Apple Maps on iOS, Google Maps on Android, and Google Places for maps, directions, address, and business lookup. Google services are also governed by the Google Privacy Policy and applicable Google Maps terms.
• Google AdMob for optional rewarded ads, consent handling, ad delivery, measurement, diagnostics, and server-side reward verification.
• Other StallPass users when you choose to publish community content. Public submissions can remain visible without your account identity when needed for map integrity.

We may also disclose information when required by law, to enforce product rules, or to protect users, the public, or StallPass.

5. Ads, consent, and tracking

StallPass offers optional rewarded video ads through Google AdMob. StallPass requests a non-personalized ad for every reward request and does not use bathroom searches, saved health or accessibility needs, or community contributions to personalize ads. Non-personalized ads may still use an IP address, general location, device or advertising identifiers, ad interactions, and diagnostics for contextual delivery, frequency limits, aggregated reporting, fraud prevention, and reward verification.

Google may present a consent form before StallPass requests an ad where required. The app checks whether Google allows an ad request and does not load a reward video when consent or another legal basis is unavailable. Where Google requires additional privacy options, its privacy-options form can be used to review or change the available ad choices. You can always close a reward video, though the associated reward may not be granted.

On iOS, Google Mobile Ads declares that a device identifier may be used for advertising and measurement that meets Apple's definition of tracking. Before initializing reward ads, StallPass asks for permission through Apple's App Tracking Transparency prompt. Denying permission does not block bathroom discovery or prevent StallPass from attempting a non-personalized reward ad without access to the advertising identifier.

6. Retention and deletion

StallPass keeps account and service data while an account is active or as long as needed to run the service, investigate abuse, or meet legal obligations. First-party analytics, Expo Insights, Sentry, and AdMob records follow the applicable service or project retention settings. Local identifiers, drafts, and queued changes remain on your device until cleared, expired, overwritten, or the app is removed. The app supports both deactivation and permanent deletion. Personal account data is removed when deletion is completed, while anonymous community contributions may remain so listing information stays useful.

7. Your choices and rights

• Export your data from the app.
• Disable push notifications from within the app or system settings.
• Review Google ad consent and privacy choices when the control is required and available for your region.
• Decline or close a rewarded ad and continue using bathroom discovery without watching an ad.
• Deactivate the account if you want to stop using it without deleting data.
• Permanently delete the account from the in-app account controls.
• Use the public privacy choices page for instructions and support routing.
• Request privacy support using the contact details below.

Public privacy controls and support instructions are also available on the privacy choices page.

8. Security

StallPass uses reasonable safeguards to protect data while it is stored and transmitted. No service can promise perfect security, and you are still responsible for keeping your account login and device secure.

9. Children's privacy

StallPass is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has shared personal information through the service, contact us so we can review the issue and take appropriate action.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect product changes, legal requirements, or business practices. Important changes may be shared in the app, on the website, or through other reasonable channels before or when they take effect.

11. Contact

For privacy questions or deletion support, contact support@stallpass.org.