This privacy policy applies to the Popby app and the room pages it opens on the web (hereby referred to as "Application"), created by Mapletask (hereby referred to as "Service Provider") as a free service.
Popby is a small social app for close friends: you decorate a pixel-art room, look after a pet, visit your friends' rooms and share a hangout room with a few of them.
Information we collect
Account
- How you sign in: the account identifier Apple or Google gives us, or your email address. If you sign in with email and set a password, we store only a hash of it
- If you sign in with Apple, a token from Apple, stored encrypted, so that we can remove Popby from your Apple ID when you delete your account
- Your display name, handle and friend connect code
- Your birthday, only if you add it (friends see the month and day only)
What you create and do in Popby
- Your room, its decorations and whether its link is shared, your character's outfit, and your pet and its name
- Notes you leave in rooms, friend intros, answers to the daily question, daily lines and replies, and messages in hangouts
- Your friends, the hangouts you belong to, people you block, and gifts and souvenirs
- Cookies and items you earn and spend, kept as a ledger
- Reports you send: what you reported, a copy of the reported content at that moment, the reason and any note. Reports are used only for keeping Popby safe
Devices
- For each device you sign in on: the platform, device name and app version, so you can see and sign out your devices
- A push notification token and your app language, if you allow notifications
- Your device's IP address is seen by our servers when your device talks to them. It is used only to deliver the service and protect it from abuse, and is not stored in our database
The Application does not use analytics or advertising SDKs, does not track you across other apps or websites, and does not collect your location, contacts, photos, or microphone. The camera is used only while you scan a friend's QR code, and no image is saved or sent.
How we use it
We use this information only to run Popby for you and your friends: to sign you in, show your room and your friends' rooms, deliver messages and notifications, keep cookies and items correct, review reports and keep the community safe, and contact you about your account when needed. We do not sell your information and we do not use it for advertising.
Who can see what
- Your notes, intros, answers, lines and room are visible to your friends. Hangout messages are visible to the members of that hangout
- If you turn on link sharing for your room, anyone with the link can view your room, display name and pet, read-only
- People you block cannot see your hangout messages, characters or daily lines
Service providers
We share the minimum information needed with service providers that run parts of Popby for us:
- Apple — Sign in with Apple and push notifications (Apple Push Notification service)
- Google — Google sign-in and push notifications (Firebase Cloud Messaging)
- Resend — sending sign-in codes and account emails
- Our cloud hosting and database provider, which stores the data above on our behalf
We may also disclose information if the law requires it, or when we believe in good faith that it is necessary to protect someone's safety or to investigate abuse.
Data retention and deletion
We keep your information while you have an account. You can delete your account at any time in the app (Me → Delete account). When you do, we immediately and permanently delete your account and everything connected to it — your room, pet, friends, notes, messages, souvenirs, cookies, devices and push tokens — and, if you signed in with Apple, ask Apple to remove Popby from your Apple ID. Reports you made are deleted too. A report someone else made about you is kept, without your account link, for as long as we need it for safety. See Account Deletion.
Children
Popby is not for children. You must be at least 14 years old to use it. The Application is not directed to children under 13, and the Service Provider does not knowingly collect personal information from children under 14. If we learn that a child under 14 has created an account, we will delete it. If you are a parent or guardian and think your child has given us personal information, contact us at support@getpopby.app.
Your rights
You can see and change most of your information in the app, and delete your account at any time. Depending on where you live, you may also have the right to ask for a copy of your information, to correct it, or to ask us to delete it or limit how we use it. Email support@getpopby.app and we will answer within 30 days.
Security
Connections between the app and our servers are encrypted, sign-in tokens are kept in your device's secure storage, and sensitive tokens are stored encrypted on our servers.
Changes
We may update this Privacy Policy. When we do, we will update the date at the top of this page, and tell you in the app if the change is important.
Contact
If you have any questions about privacy in Popby, contact the Service Provider at support@getpopby.app.