Privacy Policy

Last updated: May 7, 2025

FoxTrail ("we", "us", "our") is operated by Alpatar. This Privacy Policy explains how we collect, use, and protect your information when you use the FoxTrail mobile application.

1. Information We Collect

Account Data: We create an anonymous account via Firebase Authentication. No real name, email, or phone number is required. Your identity is a randomly generated alias and color.

Location Data: FoxTrail uses your device GPS to pin messages to real-world locations. Approximate coordinates (~100m precision) are stored with each message. We do not track your location in the background.

Content: Messages ("writes"), photos, and chat messages you create are stored on Firebase Firestore and Firebase Storage.

Device Fingerprint: A SHA-256 hashed fingerprint of non-identifying device properties is collected solely for ban evasion prevention. This hash cannot be reversed to identify you.

Photos: Photos are captured live via your device camera only. Gallery uploads are blocked at the OS level. Photos are stored in Firebase Storage and auto-deleted after 7 days unless marked permanent.

Purchase Data: In-app purchase transaction IDs are stored for receipt validation and duplicate prevention. We never store payment card details — all payments are processed by Apple or Google.

2. How We Use Your Information

• Display messages at real-world locations on the map
• Enable anonymous chat between users
• Enforce community guidelines (spam detection, content moderation, ban enforcement)
• Validate in-app purchases
• Send push notifications you opt into (new replies, matches)
• Improve app performance and fix bugs

3. Data Sharing

We do not sell, rent, or share your data with third parties for marketing. Data may be shared with:

• Firebase (Google): Authentication, database, storage, cloud functions
• Mapbox: Map rendering (only viewport coordinates, not your identity)
• Apple / Google: In-app purchase validation
• Law enforcement: Only when legally required or to protect user safety

4. Data Retention

• Messages: Non-permanent messages expire after 1–24 hours. Permanent messages persist until deleted.
• Photos: Auto-deleted after 7 days unless the message is permanent.
• Chat messages: Retained until either user deletes the conversation.
• Account data: Retained until you delete your account.
• Device fingerprints: Retained only for banned devices.

5. Your Rights

• Delete your account and all associated data (Settings > Delete Account)
• Delete individual messages and conversations
• Opt out of push notifications
• Request a data export by contacting us

6. Children's Privacy

FoxTrail is rated 17+ and is not intended for children under 17. We do not knowingly collect data from minors. If discovered, such accounts are deleted immediately.

7. Security

We use HTTPS/TLS encryption, Firebase security rules, server-side receipt validation, and SHA-256 hashed fingerprints. No system is 100% secure, but we follow industry best practices.

8. Content Moderation

• Automated content filters in 16 languages (pre-publish)
• Community reporting (5 independent reports = auto-hide)
• Admin review within 24 hours
• Anti-spam: rate limiting, cooldowns, duplicate detection, location throttling

9. International Users

Data is processed and stored on Google Cloud (Firebase) in the EU (europe-west1). By using the app, you consent to data processing in the European Union.

10. Changes

We may update this policy. Changes will be posted here with an updated date. Continued use constitutes acceptance.

11. Contact

Questions or data requests: g.alpatar@gmail.com or Contact Form