Draft. This page is not final and is not yet legal advice.

Privacy policy

RainBowie is built so you can use it safely in places where being out is dangerous. This page explains exactly what that means for your data.

Version 2026-11

The short version

  • Your exact location never leaves your phone. We only receive the neighbourhood or a roughly 5 km area.
  • Identity tags you add to your profile are only shown to you.
  • There are no advertising or analytics companies in the app, and we never sell your data.
  • You can download everything we hold about you, or delete your account, from the app at any time.

Who we are

RainBowie is run by [legal entity name], [registered address] ("we"). We are the controller of the personal data described here. You can reach us at privacy@rainbowie.app.

Using an LGBTQ+ app can say something about your sexual orientation or gender identity, and so can what you post. We treat everything you give us as sensitive data and process it only with your explicit consent, which you give when you create an account and can withdraw by deleting it.

What we collect

When you create an account

  • Your email address, or the ID Apple or Google gives us if you sign in with them.
  • Your handle, avatar colour and, if you add them, pronouns, identity tags, home city and interests.
  • The version of this policy you agreed to, and when.

When you use the app

  • Safety reports, reviews, posts, comments and photos you add. Photos are stripped of location data on your phone before upload.
  • Places you save, events you mark as interested or going, trips and their dates, and cities you follow.
  • A coarse area (about 5 km across) when you ask for nearby places or file a report. Never your GPS position.
  • A push token, if you allow notifications, so we can send them.
  • Your privacy settings, such as discreet mode and neutral notifications.

When you pay

Payments go through Apple or Google. We receive a receipt to check the purchase. We never see your card details.

When you verify a business

The business name, contact email or phone number, and any documents you upload to prove you run it.

Technical data

Our hosting provider keeps server logs with IP addresses for security and to fix faults. [confirm log retention period]

What we never collect

  • Your precise location, location history or background location.
  • Your contacts, photos you haven't chosen to upload, or other apps on your phone.
  • Advertising identifiers. There is no ad or tracking software in RainBowie.

Why we use it

What we doLegal basis
Run your account and show you the map, places, events, trips and communityContract, and your explicit consent for sensitive data
Calculate neighbourhood safety bands from reportsYour explicit consent
Screen new posts and reports for abuse, doxxing and spam before they go publicLegitimate interest in keeping people safe, and your explicit consent
Send the notifications you turned onYour consent
Check purchases and keep accounting recordsContract and legal obligation
Verify businesses before they get a badgeContract
Keep the service secure and investigate abuseLegitimate interest

We don't use your data for advertising, we don't sell it, and we don't build profiles of you for anyone else.

What other people see

  • Your handle, avatar colour, pronouns and level, alongside what you post.
  • Never your email, identity tags, home city, trips or saved places.
  • If you post anonymously, other people see "Anonymous" and no photos. Moderators can still see who wrote it, so they can act on abuse.

Who processes it for us

These companies process data on our behalf, under contract, and only for the purpose listed.

CompanyWhat forWhere
SupabaseDatabase, sign-in, file storage and server functions[region]
AnthropicAutomated screening of new posts, comments, reviews and reports for abuseUnited States
ResendVerification emails to businesses[region]
TwilioVerification calls to business phone numbersUnited States
AppleSign in with Apple, notifications and payments on iPhoneUnited States
GoogleSign in with Google, notifications and payments on AndroidUnited States
OpenFreeMapMap tiles. Your phone requests them directly, so OpenFreeMap sees your IP address and the map area you view.[region]

Where data leaves the European Economic Area, we rely on the EU Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework. [confirm per processor]

How long we keep it

  • Your account data, until you delete your account. Deletion removes your profile, content, photos and exports.
  • Safety reports lose weight over time (their influence halves every 90 days). [decide: are reports kept, anonymised or deleted when an account is deleted?]
  • Download links for data exports expire after one hour.
  • Purchase records, for as long as tax law requires. [period]

Your rights

You can see, correct, download or delete your data, object to how we use it, or withdraw consent. Most of this is in the app:

  • Export your data: Profile, then Privacy & safety, then Export my data.
  • Delete your account: Profile, then Privacy & safety, then Delete account and data. This is immediate and can't be undone.

For anything else, email privacy@rainbowie.app. We reply within one month. You can also complain to your data protection authority, or to ours: [supervisory authority].

Age limit

RainBowie is for people aged [16 or 18] and over. If we learn that a younger person has an account, we delete it.

Changes

When this policy changes in a way that matters, the app asks you to agree again before you continue. Each version has a date; this one is 2026-11.

Contact

privacy@rainbowie.app
[legal entity name], [registered address]