PicPlots Privacy Addendum

What PicPlots specifically collects

• Account data. Email address and a password hash (we never store your plaintext password), or, if you choose Sign in with Apple, the Apple-relayed identifier and email. Date of birth (used for the age-gate; we keep the year only after first launch) and a self-chosen display name.
• Payment data. If you subscribe (product ID com.nirocorp.picplots.photoslot.monthly.v1) we receive a transaction ID, an Apple or Google receipt, the last four digits of the payment method, and the renewal status. We never see your full card number. Server-side receipt validation runs at POST /api/iap/validate.
• Photos and plot content. Photos you post to your plot, the plot's coordinates, captions, and any content metadata you set. Photos posted to a public plot are visible to other PicPlots users. EXIF location data is stripped from images before they are stored.
• Marketplace activity. Plots you list, plots you buy, prices, and timestamps.
• Moderation data. If you tap "report" on a plot or photo, the report (with the chosen reason) is sent to POST /api/reports and stored in our content_reports table for moderation review. We keep the report indefinitely so we can act on repeat offenders.
• Block list. When you block a user, that block is stored locally on your device and on our server so it follows you across reinstalls.
• Device and usage data. IP address, device model, OS version, app version, and crash reports. Standard server logs.

What PicPlots does not collect

• We do not collect precise location. The "plot" coordinate is a virtual coordinate on the photo wall — it is not a real geographic location.
• We do not access your camera roll without your permission. The OS prompts you when you tap "add photo."
• We do not collect contacts.
• We do not run third-party advertising or analytics SDKs.

Sharing

The processors we use for PicPlots are the ones listed in the master policy: Apple and Google (in-app purchases), Supabase (Postgres + Auth + Storage), and standard infrastructure providers. We do not share your photos or activity with advertisers.

Children

PicPlots enforces a hard age-gate on first launch: users under 13 are locked out, and users under 18 cannot make in-app purchases. We do not knowingly collect data from anyone under 13. See the master policy's children section for the full COPPA position.

Public visibility

By default, photos you post to a plot are visible on the public photo wall to other PicPlots users. Marketplace listings are public. Private profile data (your email, your DOB, your block list) is not public.

Deletion

You can delete your account from the in-app Settings screen, or by emailing jesse@niroaerial.com from your registered address. Deletion removes your photos, plot claims, and personal information within 30 days. Anonymized moderation hashes (so we can keep enforcing rules against re-uploaded prohibited content) and required financial records may persist longer.

Where to read more

Master Privacy Policy · PicPlots Terms Addendum · Master Terms of Service · About PicPlots

Questions: jesse@niroaerial.com