Privacy Policy

Information We Collect

Account and profile information: when you create an account we collect sign-in identifiers such as your phone number or email address. You may add a username, display name, and profile photo (avatar).

Mission and submission data: when you complete a mission you submit a proof photo and related metadata, including mission ID, daily drop ID, region, timestamps, and whether the submission was on time or late. Proof photos are stored in our cloud storage.

Usage and interaction data: we collect information about how you use the Service, such as features used, mission completions, streaks, archive activity, and interactions on The Wall.

Device and technical data: we may collect device type, operating system version, app version, IP address, and push notification tokens if you grant permission.

Support communications: if you contact us for help, feedback, or account requests, we retain those messages and related details needed to respond.

How We Use Your Information

To provide and improve the Service, including publishing daily missions, storing proof submissions, calculating streaks, and showing The Wall.

To authenticate your account and secure sign-in using your phone number or email.

To send push notifications when you enable them, such as mission drop alerts and reminders.

To understand usage through analytics so we can improve reliability and product experience.

To enforce our Community Guidelines and Safety standards, review reports, and prevent abuse.

To comply with legal obligations and respond to lawful requests.

Device Permissions

Camera and photo library: we request access to your device camera and photo library to let you capture and submit proof photos. Without this permission you cannot complete missions.

Push notifications: we request push notification permission to send you mission drop alerts and reminders via Firebase Cloud Messaging. This permission is optional.

All device permissions can be granted or revoked at any time in your device settings.

Third-Party Services

Firebase (Google): we use Firebase Authentication, Cloud Firestore, Cloud Storage, and Firebase Hosting to operate the Service. Data is processed on Google infrastructure. See https://policies.google.com/privacy.

PostHog: we use PostHog for product analytics, including events such as app opens, feature usage, onboarding funnel steps (for example, first open through first proof submission), streak and retention signals, and device and session identifiers. Proof photo content and mission images are not sent to PostHog. Session replay is disabled. See https://posthog.com/privacy.

Firebase Cloud Messaging: we use Firebase Cloud Messaging to deliver push notifications to your device when you enable them.

Expo and EAS: our mobile app is built and distributed with Expo and EAS (Expo Application Services). Expo may process limited technical data for builds, updates, and crash diagnostics. See https://expo.dev/privacy.

We do not sell your personal information.

How We Share Information

The Wall: proof submissions you post may be visible to other signed-in users who have also submitted proof for the same daily drop, according to product rules and your visibility settings.

Profile visibility: your username, display name, and profile photo may be visible to other users in the Service.

Contact details: we do not show your phone number or email address to other users.

Service providers: we use vendors (such as hosting and analytics providers) who process data on our behalf under confidentiality obligations.

Legal and safety: we may disclose information if required by law, legal process, or to protect the safety of users or the public.

International Data Transfers

Your information is processed on infrastructure operated by Google (Firebase) and PostHog. That infrastructure may be located outside your country of residence, including in the United States and the European Union.

Both providers operate under standard contractual clauses or other safeguards required by applicable data protection laws.

Data Retention

We keep account, profile, and submission data while your account is active or as needed to provide the Service.

When you request account deletion, we delete or anonymise personal data within the timeframes described on our Delete Account page, subject to limited retention described there.

We may retain certain records longer where required by law, for security and abuse prevention, or in anonymised form that cannot reasonably identify you.

Regional Privacy Rights

Australia: the Service is operated under the Privacy Act 1988 (Cth). If you believe we have handled your personal information contrary to the Australian Privacy Principles, you may first contact us at the address below. You also have the right to complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

EEA and UK: where the General Data Protection Regulation (GDPR) or UK GDPR applies, we process your personal data on the following legal bases: performance of the contract we have with you (operating the Service); our legitimate interests in improving and securing the Service; and your consent where optional permissions are requested. You have the right to access, rectify, erase, or port your personal data; to object to or restrict processing; and to withdraw consent at any time without affecting prior processing. You have the right to lodge a complaint with your local supervisory authority.

California: if you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) may apply. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. You have the right to know what personal information we collect, to request deletion or correction, and to be free from discrimination for exercising these rights. To make a request, email us at the address below.

Your Choices

You may request access to, correction of, or deletion of your personal data in the app (Settings > Account Management) or on our Delete Account page at https://verdict.modelabs.studio/delete-account. You can also email support@verdict.modelabs.studio.

You can turn off push notifications in your device settings or in the in-app Notifications settings.

Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact support@verdict.modelabs.studio and we will delete it promptly.

If you are 13 to 17, you should use the Service only with permission from a parent or guardian who has reviewed this policy with you.

Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you in the app or by updating the "Last updated" date above. Continued use after changes means you accept the updated policy.

Contact

Questions about privacy? Email support@verdict.modelabs.studio.

Verdict is operated by Mode Labs, Melbourne, Australia.