Privacy Policy

1. Data we collect, and why

We only collect data that the app needs to function. We do not maintain hidden profiles of you.

•Phone number: Login by SMS code and contact matching so your contacts can find you.

•Email address: Email login, reviewer/login support, and account communication when needed.

•Username & display name: How you appear to others in PostCards and conversations.

•Device contacts (names + phone numbers): Optional contact sync to find which of your contacts already use Areea. See Section 4.

•Approximate location: City/country/key-city context for audience selection and location-aware features. See Section 3.

•Your content: PostCards, comments/messages, reactions, pings, mentions, reports, and the audience you choose for each post.

•Your connections: Connections, connection requests, blocks, and pings exchanged.

•Push token: A device token from Firebase Cloud Messaging, delivered via Apple APNs, so we can send notifications you enable.

•Device & session info: Basic technical data needed to keep you signed in and operate the service — active sessions, device/bundle identifier used for push routing, and app/permission status.

We do not collect: advertising identifiers (IDFA), browsing history, payment data, biometric data, or health data.

2. How we use your data

We use the data above to:

• Sign you in and keep your account secure.
• Let your contacts find you and let you find them.
• Publish your PostCards to the contacts/connections and audience scope you select.
• Run conversations, replies, mentions, reactions, pings, and follows.
• Show relevant local and global activity from your contacts/connections based on approximate location.
• Send notifications you've enabled.
• Receive and review reports, enforce blocks, protect users, debug the service, and comply with law.

We do not use your data to build advertising profiles or to track you across other apps or websites.

3. How location works

Location is central to Areea, so we minimize it deliberately.

• Your device's GPS reading is reverse-geocoded using Apple's location services to determine city, region, and country.
• Areea reduces coordinates to 2 decimal places before backend processing/storage, roughly city-area precision.
• Your precise pin is never shown to other users. No one sees your location more specifically than the city/location label you choose to share.
• Location only helps determine the audience context for contacts/connections. It does not make your PostCards public to all Areea users.
• Location is requested only while you use the app, and you can turn it off anytime in device settings. Without location, city- and country-scoped features may be limited.

4. How contacts sync works

Finding people you already know is optional and user-initiated.

• If you grant contacts permission, Areea uploads the names and phone numbers in your address book so we can match them against existing Areea accounts.
• Because matching is by phone number, numbers for people who are not on Areea are also uploaded and may be retained as unmatched contact entries for matching and connection suggestions.
• We do not message non-users, auto-invite anyone, sell contact data, or use contacts for advertising.
• Contact data is used only to power My Connections, contact-based discovery, and connection suggestions.
• You can avoid this entirely by not granting contacts permission. You can still use Areea and search by exact @username.
• Uploaded contacts can be deleted from the app where available, and account deletion removes your uploaded contact data.

5. Sharing & service providers

We do not sell your personal data and we do not share it for advertising. We share data only with vendors who process it on our behalf, under contract, to run Areea:

• Google Cloud / Cloud Run / Postgres — core backend hosting and database infrastructure.
• Firebase / Firestore / Firebase Cloud Messaging — realtime projections and push infrastructure.
• Twilio Verify — SMS verification codes for phone login.
• SendGrid — email verification codes and operational email.
• Apple — APNs push delivery and device location/geocoding services.

We may also disclose data if required by law, or to protect the rights, safety, and security of users, the public, or Areea.

6. What we do NOT do

• We do not sell your personal data.
• We do not use third-party advertising, and there are no ad networks in the app.
• We do not use IDFA.
• We do not track you across other apps or websites.
• We do not use contacts, location, or content for advertising.

7. Push notifications

If you enable notifications, we register a push token for your device. We use it to notify you about activity you've opted into, such as replies, mentions, pings, connection requests, followed conversations, and important account/service events. You can turn notifications off per type inside Areea, or entirely in device settings. Disabling notifications deactivates or stops use of the stored token where applicable.

8. Reports, blocks, and safety records

If you report content or a user, we collect the report reason, optional note, relevant IDs, and a moderation snapshot of the reported content/context so we can review it even if the original content changes or is deleted.

If you block someone, we store the block relationship and timestamp so future contact can be prevented or filtered. Blocking is forward-looking; past shared history may remain where needed for context, safety, or moderation.

We aim to review reports within 24–48 hours. Limited moderation and safety records may be retained where needed for legal, security, or safety reasons.

9. Data retention

We keep your data for as long as your account is active, unless a shorter or longer period is needed for the service, safety, or legal compliance. When you delete your account, we remove or anonymize your data as described below.

10. Account deletion & your rights

You can delete your account at any time, in the app: go to Settings → Account → Delete account and confirm by typing the required phrase. Deletion is permanent and:

• Removes or anonymizes your profile and login identifiers — phone number, email, username, and display name.
• Deletes your contact-sync data, location state/history, connections, pings, connection requests, and push tokens.
• Signs out active sessions.
• Deletes all PostCards you created and closes/removes their conversations.

For continuity of conversations other people took part in, comments/messages you left on other people's PostCards may remain visible but are attributed to "Deleted user" — with no name, handle, profile, or location attached. Limited moderation and safety records may be retained where needed.

Your rights

Depending on where you live, you may have rights over your personal data, including the right to access, correct, delete, object to/restrict processing, withdraw consent, and not be discriminated against for exercising privacy rights. Because we do not sell or share personal data for advertising, there is no advertising sale/share opt-out to provide.

To exercise privacy rights, contact app@areea.co. We respond within the timeframes required by applicable law.

11. Children

Areea is not intended for anyone under 17. You must be at least 17 to use Areea. We do not knowingly allow people under 17 to use the Service. If you believe someone under 17 is using Areea or has provided us data, contact app@areea.co and we will review and delete it where appropriate.

12. Security

We protect your data with reasonable technical and organizational measures, including encryption in transit, authenticated and revocable sessions, passwordless login, and infrastructure access controls. No system is perfectly secure, but we work to protect your data and respond promptly to incidents.

13. International data transfers

Areea is operated from Estonia, European Union, and our service providers may process data in other countries, including the United States. Where personal data is transferred across borders, we rely on appropriate safeguards such as Data Processing Agreements and, where required, the European Commission's Standard Contractual Clauses or equivalent mechanisms.

14. Changes to this policy

We may update this policy as Areea evolves. When we make material changes, we will update the effective date above and, where appropriate, notify you in the app. Continued use of Areea after an update means you accept the revised policy.

15. Contact

Questions about this policy, privacy, safety, legal, or support? Contact us at app@areea.co or write to:

Wonions OÜ

Registry code 17040564

Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe tn 3 // 5 // 7, 10145, Estonia