Inabottle - Privacy Policy
Effective Date: April 29, 2026
Last Updated: October 13, 2026
Inabottle ("we", "our", or "us") is operated by an individual developer. We prioritize user privacy and minimize data collection to only what is strictly necessary for a functional social experience.
1. Information We Collect
a. Technical Identifiers (GUID)
Upon installation, the app generates an Internal GUID (Globally Unique Identifier). This identifier is stored locally on your device and is used to associate your posts and settings with your app instance. It does not identify you personally to us in the traditional sense, but it distinguishes your device from others.
b. Precise Location Data
With your explicit consent, we collect precise GPS location data while the app is in the foreground. This data is linked to your anonymous GUID to enable location-based features, such as finding posts near you. We do not track your location in the background.
c. Media and Audio Access
- Photos/Camera: Used only when you choose to create a post. Images are stored securely with our cloud storage provider and are not linked to your real identity.
- Microphone: Used exclusively for live audio rooms. Audio is processed in real-time and is never recorded, stored, or analyzed on our servers.
d. Push Notifications
We use a third-party push notification service to send updates. This requires a temporary device token. You can opt-out at any time via device settings.
e. IP Address
Our servers and infrastructure providers automatically log your IP address when you use the app. This is used for security, fraud prevention, and abuse detection, and to comply with legal obligations. It is not used to identify you personally.
f. App Integrity Verification
We use an app integrity verification service to confirm that requests to our backend come from a genuine, unmodified copy of the app running on a legitimate device. This relies on device and app integrity signals provided by your device's operating system and app store, and does not identify you personally.
2. Third-Party Partners, Advertising, and Data Transfers
We use the following types of partners for technical and advertising purposes:
- Cloud hosting, database and file storage providers
- Real-time audio providers (for live audio rooms)
- Push notification and app integrity verification services
- Google, for advertising (see below)
By using the app, you acknowledge that your technical data (IP address, GUID, and GPS coordinates) may be transferred to and processed in servers located in the United States and other countries where these partners operate. A list of the specific partners we use is available on request at [email protected].
Advertising: We use Google AdMob to display non-personalized advertisements. Even for non-personalized ads, AdMob may process your Advertising ID and other device signals to serve ads, limit how often you see the same ad, and detect invalid activity. You can review or reset your Advertising ID, and limit ad tracking generally, from your device settings (Android: Settings > Google > Ads; iOS: Settings > Privacy & Security > Tracking).
3. Data Retention, Account Recovery, and Deletion
You have full control over your data:
- Retention Period: We retain your data, tied to your Internal GUID, for as long as your account remains active. We do not automatically delete data after a fixed period; it is kept until you request deletion as described below.
- Individual Posts: You can delete any post directly within the app interface.
- Account Recovery: If you keep a record of your Internal GUID, you may contact us to help restore access to your account and posts on a new device. We verify these requests by asking you to provide your Internal GUID before assisting.
- Account & Data Deletion Request: To permanently delete your account and all associated data from our servers, email us at [email protected] with your Internal GUID. We will verify your request and delete your data within 15 days. You do not need to reinstall or open the app to make this request.
- Local Data Wipe: Clearing the app's data in your Android/iOS settings removes the GUID stored on that device, disconnecting it from your account. This does not delete your data from our servers — to do that, use the Account & Data Deletion Request above.
- Withdrawal of Consent: You may revoke GPS, Camera, or Microphone permissions at any time via your device settings.
4. Brazil (LGPD) & European Union (GDPR)
Under the LGPD and GDPR, we act as the Data Controller. Legal bases for processing: Consent (Location/Media) and Legitimate Interest (Technical functionality, security, and fraud prevention). Users have the right to access, rectify, delete, port their data, or object to processing. Because we do not store names or emails, you must provide your Internal GUID to exercise these rights via email.
5. United States (CCPA/CPRA/State Laws)
We do not "sell" or "share" your personal information as defined by the California Consumer Privacy Act. We do not track users across third-party websites, and the advertising we show is non-personalized. Residents of California and other states have specific rights to data deletion and transparency which we honor through our pseudonymous approach.
6. Japan (APPI)
In accordance with the Act on the Protection of Personal Information (APPI), we ensure that technical identifiers processed by third-party providers comply with security standards. Users in Japan may request disclosure or cessation of use by contacting us via email.
7. Children's Privacy
Inabottle is intended for users aged 13 and older. We do not knowingly collect information from children under 13.
8. Contact Us
For privacy inquiries, account or data deletion requests, or to report content, please contact:
Email: [email protected]