WHAT DATA
Data practices
This is the same breakdown the App Store shows under “App Privacy” — in sentences instead of tiles. The long form, with legal bases and retention periods, is the privacy policy.
Last updated: 8 October 2026What is collected
| App Store category | What that is here | What for |
|---|---|---|
| Email address | The address from your sign-in — by email and password, through Google or through Apple | Account, contact for support cases. Never visible to other users |
| Name | Display name, @handle and profile picture | The profile your friends see |
| User ID | The Firebase id and our own account id | Attributing everything that belongs to you |
| Device ID | Push token per installation (FCM/APNs) | So notifications reach you |
| Precise location | The coordinate when you shoot — resolved to the venue and kept with the moment so it can still pick up a venue added later. Others never see it raw: either the venue’s point, or, where no venue is mapped, yours rounded to about 50 m. Plus the point where you start or join a round and the spot of “Zuhause” (home) — both visible to the round, both deleted after 90 days. And the waypoints of the route of the night, only with your yes, also 90 days | Place on the moment, map, replay of the night, attaching a venue afterwards |
| Photos or videos | The two pictures per moment and your profile picture | The core of the app — delivery to your friends |
| Other user content | Drink and text on a moment, comments and prosts on them, titles of posted rewinds, reactions, places you create, imported history, reports. Plus bug reports you send us: text, screenshots and device details such as app version and device model | Feed, rewind, statistics, moderation, fixing bugs |
| Other data | Your date of birth from onboarding | Evidence that you are 18 or over |
What is not collected
- No contacts. No address-book scraping, no friend suggestions from your phone. Friends arrive by @handle, QR code or link.
- No advertising id, no IDFA, no cross-device identifier — and therefore no ATT prompt.
- No analytics SDK, no crash-reporting SDK, no ad network.
- No payment data. The app is free and has no in-app purchases.
- No health or fitness data, no search or browsing history, no phone number.
- No background location, except while a round is running with the route switched on.
- No movement profile between moments. Without the route of the night, only points you trigger yourself exist: at a moment, when you start or join a round, and at “Zuhause” (home). Nothing runs along in the background.
How long, briefly
- Moments in the feed
- visible for 24 hours, then in your history
- Account, moments, photos
- until you delete them or your account
- Rounds
- until the account that started them is deleted
- Map and heatmap
- show the last 365 days — the place itself stays with the moment
- The capture coordinate of a moment
- as long as the moment — it goes with it
- Route waypoints, join and home spots
- 90 days, then deleted automatically
- Comments
- until you delete them, or the moment or your account is deleted
- Reports
- until the reported moment or comment or your account is deleted
- Bug reports with screenshots
- until you delete your account — the GitHub ticket too
- Operational logs
- a few weeks
What you control
- Route of the night — off until you say yes: the app asks for each round, or you set it to “always” in the settings.
- Camera, photos, location, notifications — your device’s own prompts, revocable at any time.
- Delete moments — one at a time, both pictures with them.
- Delete your account — in the app, instantly and with no bin. What disappears.
- Access and portability — team@slackers.dev, answered within 30 days.
Who processes the data technically
Google (Firebase Auth and Cloud Messaging, Google sign-in, Cloud Run, Cloud SQL, Cloud Storage, Maps Platform, the Gemini API for checking and labelling the pictures) and Apple (Sign in with Apple, APNs for push on iOS). Server, database and photos live in Zurich (europe-west6); for the image check each photo goes once to the Gemini API, which also runs outside Switzerland and the EU. Bug reports you send us land in our internal task list on GitHub (Microsoft, USA), without your name, @handle or email address. The venues on the map come from an OpenStreetMap import (© OpenStreetMap contributors, ODbL). Details and legal bases in the privacy policy.