Privacy Policy

1. Scope and who we are

This Privacy Policy applies to the Groupicorn iOS application and its related web pages and services (collectively, “Groupicorn”). Groupicorn is developed and operated by andrewarrow.dev (“we,” “us,” or “our”).

Groupicorn is a peer-to-peer social coordination tool for private groups whose members already know one another in real life. We do not require a herd to have any particular purpose or affiliation; this policy applies equally to every herd.

2. Information we collect

Anonymous account and profile information

After you review and accept the first-run privacy notice, Groupicorn creates an anonymous account. We collect a randomly generated account identifier, authentication and session information, the Groupicorn username and avatar you select, your herd membership and role, and the date you joined. You do not need to provide a legal name, email address, or phone number.

Optional linked account

You may link Google or Apple to use multiple herds or restore access on another device. If you do, we collect the provider name, provider account identifier, email address, display name, profile image URL, and link date that the provider makes available. Linking is not required to create or join your first herd.

Messages and other content

We collect the text messages you choose to send in community chat or direct chat, together with the sender, recipient or herd, and timestamp needed to deliver and display those messages. Messages may contain personal or sensitive information if you choose to include it, so please share thoughtfully.

If you report a message, we store the reported message, its sender, herd or direct conversation source, timestamp, and the account that submitted the report so we can investigate and respond. Groupicorn also applies an automated word-based filter when messages are submitted. The filter does not profile you or use your messages for advertising.

Availability and optional precise location

If you turn on chat availability, we store that status so it can be shown to your herd. If you separately enable location sharing and grant iOS location permission, the app collects precise latitude and longitude while you use the feature. It uses that location to determine whether you are at or traveling toward a listed meetup place and to estimate an arrival time. While enabled, the app generally requests a fresh location about once per minute.

Groupicorn stores only your current shared location state. Each update overwrites the prior coordinates rather than creating a location history. Location sharing is off unless you choose to enable it.

Camera access

With your permission, Groupicorn uses the camera only to scan a nearby herd’s invitation QR code. QR scanning is processed on your device. We do not collect, store, or transmit photos, video, or audio from the camera.

Technical service data

Our hosting provider may process standard network and request information, such as an IP address, request time, and error or security logs, as needed to operate, protect, and troubleshoot the service. Groupicorn does not include advertising or cross-app tracking technology.

3. How we use information

We use information described above to:

• Create and maintain your anonymous account and herd membership.
• Let you create or join a herd and display your selected Groupicorn identity.
• Deliver community and direct messages.
• Show your optional chat availability and current meetup status to your herd.
• Calculate nearby meetup status and approximate arrival times.
• Maintain security, prevent misuse, troubleshoot errors, and operate Groupicorn.
• Comply with law and enforce our rights and policies.

We do not use your information for targeted advertising or to track you across apps and websites owned by other companies.

4. How information is shared

With people in your herd

Herd members can see your selected username and avatar, membership information, community messages, chat availability, and any current meetup or in-route status you choose to share. Precise coordinates used for meetup status may be available to members of your herd while current. Direct messages are available only to the participants in that conversation. Blocking suppresses messages and current presence between both accounts. A blocked person may still appear as a member of a shared herd.

With service providers

We use Supabase for authentication, database hosting, and message delivery. Supabase processes information on our behalf to provide these services. We require service providers that receive user data to provide privacy and security protections consistent with this policy and applicable Apple requirements.

For legal and safety reasons

We may disclose information if reasonably necessary to comply with law, legal process, or a valid government request; protect the rights, safety, or security of users or others; investigate abuse; or protect Groupicorn. If Groupicorn is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction subject to this policy or notice of any material change.

We do not sell personal information or share it for cross-context behavioral advertising.

5. Retention and deletion

• Location: Groupicorn keeps one current location state, not a location trail. New coordinates overwrite prior coordinates. Turning location sharing off or logging out clears the current shared location from active presence.
• Community chat: Each herd retains its newest 1,000 community messages. Older messages are automatically deleted as new ones arrive.
• Direct chat: Each pair of herd members retains its newest 1,000 direct messages. Older messages are automatically deleted as new ones arrive.
• Account and membership: We retain your anonymous account, selected identity, membership, and related content while needed to provide the service or until the account is deleted, unless longer retention is required for security, legal compliance, dispute resolution, or enforcement.
• Safety reports: We retain reported-message records while needed to investigate abuse, protect users, enforce our rules, and meet legal obligations.

You can permanently delete your account from Groupicorn Settings → My Account → Delete my account. Deletion removes the authentication account and associated profile, memberships, messages, presence, blocks, and reports from active systems. If you linked Google or Apple, the app asks you to authenticate again so the provider token can be revoked. You may also contact help@andrewarrow.dev for help. Information required by law and limited copies in encrypted backups or security logs may remain until those systems rotate.

Logging out or deleting the app clears the local session but does not, by itself, delete information already stored by the service.

6. Your choices and privacy rights

• Turn chat availability or location sharing on or off in Groupicorn Settings.
• Change camera or location permission at any time in iOS Settings.
• Choose not to send a message or include personal information in a message.
• Report a message or block and later unblock another Groupicorn.
• Log out to clear Groupicorn’s session from your device.
• Permanently delete your account and associated data in Groupicorn Settings.
• Request access to, correction of, or deletion of your information by contacting us at help@andrewarrow.dev.

Depending on where you live, you may also have rights to receive a copy of your information, object to or restrict certain processing, or appeal a request decision. We will not discriminate against you for exercising a privacy right. We do not sell or share personal information as those terms are defined by California privacy law.

7. Security and international transfers

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including encrypted network connections, authenticated access, and database access controls. No system is completely secure, and we cannot guarantee absolute security.

Groupicorn and its service providers may process information in the United States and other countries where they operate. Those locations may have data protection laws different from the laws where you live. Where required, we use appropriate safeguards for international transfers.

8. Children’s privacy

Groupicorn is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through Groupicorn, contact us so we can investigate and take appropriate action.

9. Changes to this policy

We may update this Privacy Policy as Groupicorn changes. We will post the updated policy here and revise the effective date. If a change materially affects how we use information, we will provide additional notice when appropriate.