Privacy Policy

This Privacy Policy explains how Love From Los Feliz ("Pop In," "we," "us") collects, uses, and shares information when you use the Pop In iOS app and related web pages (the "Service").

Pop In is built around a simple promise: it's a private, friend-scoped way to gather the people you already know. We don't sell your data, we don't show ads, and we don't track you across other apps or websites.

Information we collect

Account & sign-in. Pop In uses Sign in with Apple. We receive a unique Apple identifier and, if you choose to share it, your email address (which may be an Apple private-relay address such as @privaterelay.appleid.com). We accept relay addresses and never require you to reveal a real email. We do not collect your phone number, and we never upload your contacts.

Profile. Your display name, optional profile photo, and — only if you opt in — your birthday as month and day (never the year). You may remove any of these at any time.

Location (declarative postal code). You may enter a postal/ZIP code so that location-based "Posts" can reach the right people. This is a value you type in. We do not use GPS, and we do not collect or track your device's location.

Food / dietary information ("Table"). If you choose to set up a food profile, we collect the dietary preferences, restrictions, and allergies you enter, plus any free-form notes. We never ask why you have a restriction (allergy, religious, medical, or personal) — your description is authoritative. This information is visible only to your connected friends. Because such information can imply sensitive characteristics, we treat it as sensitive and use it only to power the in-app food-awareness features.

Household / dependent information ("Table Family"). If you use Table Family, you may create profiles for household members or dependents (including children) whose food you manage. These profiles contain a first name and dietary buckets you provide. Dependents are not account holders and cannot sign in. On any dietary card you choose to share, a dependent is shown as first name and dietary buckets only — no photo and no other identifying information.

Content you create. Plans, Pop Ups, Parties, Posts, event chat messages, photos and media you upload, friend nicknames, private notes, and similar content. Private notes about a friend are never shown to that friend.

Purchases. If you subscribe to Pop In Host, the purchase is processed by Apple. We receive your subscription status (active/inactive) from our billing provider; we do not receive or store your payment card details.

Limited technical & usage data. Basic information needed to operate the Service (session tokens, device push tokens for notifications) and aggregate, non-identifying usage events (for example, "a plan was created") that help us understand whether features work. These usage signals are not sold and are not used to build advertising profiles. We do not use third-party advertising or cross-app tracking SDKs.

How we use information

We use information to: provide the core gathering features; deliver notifications and reminders you've enabled; show food-awareness ("Table") information to your friends as you've configured; operate Pop In Host subscriptions; keep the Service safe (including acting on reports of objectionable content or abuse); and comply with legal obligations.

How information is shared

With your friends, as you direct. The core of Pop In is sharing gatherings and profile details with the friends and audiences you choose. Per-person dietary identities on a gathering's Table card are filtered server-side so that non-host guests see only aggregate information, never who has which restriction.

Web guests. When you share a gathering link, people who open it can see what's needed to respond. Guest food data (if you ask for it) is scoped to that gathering and purged when the gathering ends.

Service providers. We use vendors who process data on our behalf under contract, including Apple (sign-in, push, payments), Cloudflare (application hosting), Supabase (database hosting), RevenueCat (subscription management), and GeoNames (postal-code lookup). They may process data only to provide their service to us.

Legal & safety. We may disclose information if required by law or to protect the rights, safety, and security of users or the public.

We do not sell your personal information, share it for cross-context behavioral advertising, or share food data outside your friend graph.

Data about children

Pop In is intended for adults and is not directed to children, and is not offered in Apple's Kids Category. Some users may, through Table Family, provide limited information (first name and dietary buckets) about household members who are minors, solely so hosts can set the table safely. If you are a parent or guardian providing such information, you are responsible for that choice; you can edit or delete it at any time, and deleting your account deletes it. If you believe a child has created an account, contact us at privacy@popinbesocial.com and we will remove it.

Retention & deletion

We keep information for as long as your account is active. You can delete your account at any time from Settings → Account → Delete Account. Deletion is permanent and removes your account and associated personal data across our systems — including your profile, plans, posts, messages, participation records, friend connections, drafts (Possible Plans), household/dependent profiles, and reports you've filed — and revokes your Sign in with Apple authorization. Backups are purged on our regular backup cycle. Some records may be retained where required by law.

Your choices and rights

You can edit or remove your profile fields, food data, and content in the app at any time, and control notifications in Settings. Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these, contact privacy@popinbesocial.com. We will not discriminate against you for exercising your rights.

Security

We use technical and organizational measures designed to protect your information, including encrypted transport and access controls. No system is perfectly secure, but we work to protect your data and to limit who can access it.

International users

We operate the Service from California, USA. If you use Pop In from elsewhere, you understand your information may be processed in the United States and other countries with different data-protection laws.

Changes to this policy

We may update this policy. If we make material changes, we'll update the date above and, where appropriate, notify you in the app.

Contact

Privacy questions: privacy@popinbesocial.com
Safety / abuse reports: safety@popinbesocial.com
Love From Los Feliz, 4649 1/2 Russell Ave., Los Angeles, CA 90027