Effective date: May 25, 2026 — DropSpot, Ontario, Canada
This Privacy Policy describes how DropSpot ("we", "us", or "our") collects, uses, and protects your information when you use the DropSpot mobile application.
1. Information We Collect
We collect the following information when you create an account or use the app:
Email address and display name — provided during account creation
Username — chosen at account creation, stored publicly and associated with your reviews and activity
Sign in with Apple data — if you use Sign in with Apple, we receive your name and email address as provided by Apple
Location — foreground only, used to find nearby venues. Your last known latitude and longitude are stored in our database solely to send you proximity-based push notifications about nearby live venues (only if you have granted notification permission). This value is updated each time you open the app.
Spotify OAuth token and top artists — if you connect Spotify, used solely to build your taste profile
Taste profile — genres, BPM preferences, energy levels, and night types derived from your selections or Spotify data
Device push token — to send you notifications about nearby live venues (only if you grant permission)
Check-in history — venues you check into through the app
Vibe ratings and reviews — ratings and text you submit about venues
Vibe photos — photos uploaded by venue owners during a Go Live session; stored as encoded image data in our database, tied to the venue record, and visible to all app users for the duration of the session
Feedback form submissions — any messages or feedback you submit through in-app feedback forms, including the content of your message and your account identifier
2. How We Use Your Information
To show nearby live venues on the map
To calculate taste match scores between you and active venues
To send push notifications about nearby live venues (only with your permission)
To improve the accuracy and quality of our service
We do not sell your personal information to third parties.
3. Third-Party Services
DropSpot uses the following third-party services, each governed by their own privacy policies:
Supabase — database storage and authentication
Mapbox — map rendering and location services
Spotify API — music taste data (only if you connect Spotify)
Apple MusicKit — music taste data (only if you connect Apple Music)
Sign in with Apple — authentication; governed by Apple's Privacy Policy
Railway — backend hosting and infrastructure
Sentry — error monitoring and crash reporting for both the mobile app and backend services
4. Location Data
DropSpot requests access to your location only while the app is open (foreground use). If you have granted push notification permission, your last known latitude and longitude are stored in our database solely to determine whether nearby venues are live and to deliver proximity-based push notifications. This value is updated each time you open the app and is never used for advertising or sold to third parties. If you have not granted notification permission, no location data is stored server-side.
5. Data Retention
Account data — retained until you request deletion
Sonic fingerprints — expire automatically after 4 hours
Check-in and rating data — retained indefinitely unless you request deletion
6. Your Rights
You may request deletion of your account and all associated data at any time by emailing support@getdropspot.com. We will process deletion requests within 30 days.
DropSpot complies with PIPEDA (Canada's Personal Information Protection and Electronic Documents Act). For users in the European Union, we also comply with GDPR.
7. Children
DropSpot is intended for users aged 17 and older. We do not knowingly collect personal information from anyone under 17. If you believe a minor has provided us with personal data, please contact us at support@getdropspot.com.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Users will be notified of material changes via app update notes. Continued use of the app after an update constitutes acceptance of the revised policy.
9. Contact
For any privacy-related questions or requests, please contact us at support@getdropspot.com.