Privacy Policy for Xplooria

Last Updated: June 1, 2026

Effective Date: June 1, 2026

Introduction

Welcome to Xplooria ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

We reserve the right to make changes to this Privacy Policy at any time. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

1. Information We Collect

1.1 Personal Information You Provide

When you register for an account, use our services, or interact with the App, we may collect the following personal information:

Account Information:
- Email address
- Password (encrypted and securely stored)
- Display name / username
- Profile photo (optional)
Profile Information:
- Date of birth (for age verification)
- Bio / About me text (optional)
- User preferences and settings
Authentication Data:
- Google account information (name, email, profile picture) when using Google Sign-In
- Apple ID information (name, email) when using Sign in with Apple
- Firebase Authentication tokens

1.2 User-Generated Content

Place Contributions:
- Place names and descriptions
- Categories (restaurants, tourist spots, cafes, homestays, etc.)
- GPS coordinates (latitude/longitude)
- District/location information
- Photos and images uploaded by you
Reviews and Ratings:
- Written reviews and comments
- Star ratings
- Photos attached to reviews
Community Content:
- Community posts and comments
- Bucket list items
- Dilemma votes and responses
- Dare participations
Reports and Feedback:
- Listing correction reports
- Inappropriate content reports
- Bug reports and feedback

1.3 Location Data

GPS Coordinates:
- When you submit a new place, we collect precise GPS coordinates
- Location data is used to show nearby places and improve recommendations
- You can control location permissions through your device settings
Location Addresses:
- City, district, and general location information
- Stored location addresses for places you add or interact with

1.4 Usage and Activity Data

Gamification Data:
- Experience Points (XP) earned
- User level and progression
- Badges and achievements unlocked
- Leaderboard rankings
- Challenge participation and submissions
Interaction Data:
- Bookmarks and saved places
- Search queries
- Places viewed and visited
- Time spent in the app
- Feature usage statistics

1.5 Device and Technical Information

Device Information:
- Device type, model, and operating system
- Unique device identifiers
- Mobile network information
- Device language and timezone
App Usage Data:
- App version and build number
- Crash reports and error logs (via Firebase Crashlytics)
- Performance metrics
- Network connectivity status
Push Notification Data:
- Firebase Cloud Messaging (FCM) tokens
- Notification preferences and settings

1.6 Cookies and Similar Technologies

We use Firebase Analytics and other tracking technologies to:

Understand how users interact with our App
Improve app performance and user experience
Analyze usage patterns and trends
Provide personalized content and recommendations

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Providing and Maintaining Our Services

Create and manage user accounts
Authenticate users and maintain secure access
Display user profiles and contributions
Enable social features (community posts, comments, follows)
Process and display place submissions and reviews
Calculate and display gamification elements (XP, levels, badges)
Manage leaderboards and challenge rankings

2.2 Personalization and Recommendations

Show nearby places based on your location
Recommend places based on your interests and activity
Customize your app experience based on preferences
Display relevant content in your feed

2.3 Communication

Send push notifications about:
- Challenge updates and leaderboard changes
- New comments or interactions on your content
- Dare invitations and community activity
- Important account and service updates
Respond to your support requests and feedback
Send administrative communications about policy updates

2.4 Safety and Security

Detect and prevent fraud, spam, and abuse
Enforce our Terms and Conditions
Protect against security threats
Verify user identity and age
Monitor for inappropriate content
Handle user reports and moderation

2.5 Analytics and Improvement

Analyze app usage patterns and trends
Identify and fix bugs and technical issues
Improve app features and performance
Conduct research and development
Generate aggregated, anonymized statistics

2.6 Legal Compliance

Comply with applicable laws and regulations
Respond to legal requests and prevent harm
Enforce our agreements and policies
Protect our rights and property

3. How We Share Your Information

3.1 Public Information

The following information is visible to other users of the App:

Profile Information: Display name, profile photo, user level, badges
User Contributions: Places you add, reviews you write, ratings you give
Community Content: Posts, comments, bucket lists, dilemma votes
Leaderboard Data: Your rank, points, and username on public leaderboards
Challenge Participation: Your submissions and rankings in contribution challenges

3.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

Firebase Services (Google):
- Firebase Authentication (account management)
- Cloud Firestore (data storage)
- Firebase Storage (image hosting)
- Firebase Analytics (usage analytics)
- Firebase Cloud Messaging (push notifications)
- Firebase Crashlytics (crash reporting)
Apple Services:
- Sign in with Apple authentication
- Apple Push Notification Service (APNs)

These service providers are contractually obligated to protect your information and use it only for the specified purposes.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

Court orders or legal processes
Government or regulatory requests
Law enforcement inquiries
Protection of our rights, property, or safety
Prevention of fraud or illegal activity

3.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the successor entity. You will be notified of any such change via email or prominent notice in the App.

3.5 Aggregated and Anonymized Data

We may share aggregated, anonymized data that does not identify you personally:

Usage statistics and trends
Popular places and categories
General demographic information
Performance metrics and analytics

3.6 With Your Consent

We may share your information for other purposes with your explicit consent.

4. Data Retention

4.1 Active Accounts

We retain your personal information for as long as your account is active or as needed to provide you services.

4.2 Account Deletion

When you delete your account:

Your personal information (email, password, profile data) is permanently deleted within 30 days
User-generated content (reviews, posts, place submissions) may be retained in anonymized form to preserve community contributions
Some data may be retained for legal, regulatory, or security purposes

4.3 Legal Requirements

We may retain certain information to comply with legal obligations, resolve disputes, enforce agreements, and protect against fraud and abuse.

4.4 Backup Data

Backup copies of deleted data may persist in our systems for up to 90 days for disaster recovery purposes.

5. Data Security

5.1 Security Measures

We implement industry-standard security measures to protect your information:

Encryption: Data is encrypted in transit (TLS/SSL) and at rest
Authentication: Secure Firebase Authentication with encrypted passwords
Access Controls: Limited access to personal data on a need-to-know basis
Monitoring: Continuous monitoring for security threats and vulnerabilities
Regular Audits: Security assessments and updates

5.2 User Responsibility

You are responsible for:

Maintaining the confidentiality of your password
Using a strong, unique password
Logging out of shared devices
Notifying us of any unauthorized access

5.3 No Guarantee

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

6. Your Privacy Rights

6.1 Access and Portability

You have the right to:

Access your personal information stored in our systems
Request a copy of your data in a portable format
Review your account settings and activity

6.2 Correction and Update

You can:

Update your profile information through the app settings
Correct inaccurate or incomplete data
Request assistance with data corrections via support

6.3 Deletion

You have the right to:

Delete your account through the app settings
Request deletion of specific personal information
Withdraw consent for data processing (where applicable)

6.4 Objection and Restriction

You may object to or request restriction of certain data processing activities:

Marketing communications (opt-out of notifications)
Analytics and tracking (limited options)
Automated decision-making

6.5 Data Portability (GDPR/CCPA)

For users in the EU, UK, or California:

Request a copy of your data in machine-readable format
Transfer your data to another service (where technically feasible)

6.6 How to Exercise Your Rights

To exercise any of these rights:

Use in-app settings for profile updates and account deletion
Email us at: privacy@xplooria.com
Submit a request through the app's support section

We will respond to requests within 30 days (or as required by applicable law).

7. Children's Privacy

7.1 Age Restrictions

Our App is not intended for children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children under these ages.

7.2 Parental Consent

If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information immediately.

7.3 Parental Controls

Parents or guardians who believe their child has provided personal information to us can contact us at privacy@xplooria.com to request deletion.

8. International Data Transfers

8.1 Global Services

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers (Firebase/Google) operate servers.

8.2 Data Protection Standards

We ensure that such transfers comply with applicable data protection laws through:

Standard Contractual Clauses (EU)
Data Processing Agreements
Adequate safeguards and protections

8.3 EU-US Data Transfers

For users in the European Economic Area (EEA), UK, or Switzerland, we comply with applicable data transfer frameworks and regulations.

9. Regional Privacy Rights

9.1 European Users (GDPR)

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing:
- Consent (for optional features and marketing)
- Contract performance (to provide our services)
- Legitimate interests (for analytics and improvements)
- Legal obligations (for compliance purposes)
Right to Complain: You may lodge a complaint with your local data protection authority
Data Protection Officer: Contact us at dpo@xplooria.com

9.2 California Users (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act:

Right to Know: What personal information we collect, use, and share
Right to Delete: Request deletion of your personal information
Right to Opt-Out: Opt-out of sale of personal information (we do not sell personal data)
Right to Non-Discrimination: Equal service regardless of privacy rights exercise

To exercise CCPA rights, email: privacy@xplooria.com

9.3 Other Jurisdictions

Users in other regions may have additional rights under local privacy laws. Please contact us for specific information about your rights.

10. Third-Party Services and Links

10.1 Third-Party Integrations

Our App integrates with third-party services that have their own privacy policies:

Google Services: Google Privacy Policy
Apple Services: Apple Privacy Policy
Firebase: Firebase Privacy

We encourage you to review these policies.

10.2 External Links

The App may contain links to external websites or services. We are not responsible for the privacy practices of these third parties. Please review their privacy policies before providing any information.

10.3 Social Media

If you share content from our App on social media platforms, those platforms' privacy policies apply to the shared information.

11. Push Notifications

11.1 Types of Notifications

We send push notifications for:

Challenge updates and achievements
New comments or interactions
Community activity and dares
Important account updates

11.2 Managing Notifications

You can control push notifications:

Through your device settings
Through the app's notification preferences
By opting out of specific notification types

11.3 FCM Tokens

We use Firebase Cloud Messaging (FCM) tokens to deliver notifications. These tokens do not personally identify you and are used solely for notification delivery.

12. Analytics and Advertising

12.1 Firebase Analytics

We use Firebase Analytics to understand app usage and improve our services. Analytics data includes:

App interactions and feature usage
Device and technical information
Crash reports and errors
User engagement metrics

12.2 Crashlytics

Firebase Crashlytics collects crash data to help us identify and fix bugs:

Stack traces and error logs
Device state at time of crash
App version and configuration
No personally identifiable information

12.3 No Third-Party Advertising

We do not currently display third-party advertisements or share data with advertising networks.

13. Changes to This Privacy Policy

13.1 Updates

We may update this Privacy Policy from time to time to reflect changes in:

Our practices
Legal requirements
New features or services
User feedback

13.2 Notification

We will notify you of material changes by:

Updating the "Last Updated" date at the top
Sending a push notification
Displaying a prominent notice in the App
Sending an email to your registered address

13.3 Continued Use

Your continued use of the App after changes become effective constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Xplooria Support Team

Email: privacy@xplooria.com
Support Email: support@xplooria.com
Data Protection Officer: dpo@xplooria.com

Mailing Address: Xplooria [Company Address] [City, State, ZIP Code] [Country]

Response Time: We aim to respond to all inquiries within 30 days.

15. Consent and Acknowledgment

By creating an account and using Xplooria, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. You consent to the collection, use, and sharing of your information as described herein.

If you do not agree with this Privacy Policy, please do not use our App or services.

This Privacy Policy is effective as of June 1, 2026 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.