Privacy Policy for Pye

1. Introduction

At PYE, we know that being "outed" can have disastrous consequences for your personal life, work life and relationships. We also know that people living an ENM lifestyle can be targets for people and groups who discriminate against non-traditional lifestyles. Privacy isn't just an obligation - protecting your data is part of the value we offer you compared to using mainstream calendar apps.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

2. Information We Collect

2.1 Information You Provide to Us

When you use Pye, we may collect the following types of information:

• Account Information: When you create an account, we collect your email address and password (which is stored in encrypted form), or authentication information if you choose to sign in with Google.
• Profile Information: You may choose to provide name, photo, relationship identifiers, and other details to personalize your experience.
• Calendar and Availability Data: Information about your schedule, availability, and events you create or participate in.
• Relationship Information: Data about your partners, relationship dynamics, and permission settings.
• Communications: Content of messages sent through our application to other users.
• Push Notifications: If you enable push notifications, we store your subscription endpoint and encryption keys. Push notification content is designed to avoid partner names and other sensitive details.

2.2 Information Collected Automatically

When you use our Service, we may automatically collect:

• Device Information: non-identifying information about your mobile device or computer such as device type, operating system, and browser type. This helps us fix bugs and decide how to prioritize new features for different platforms.
• Usage Data: Information about how you use the Service, such as times you log in/log out, screens you visit, and actions you take. We use this data exclusively for fixing bugs and informing feature development.
• Location Information: We use your IP address to determine your timezone for aligning times on your calendar. We do not store or share data on your live location.

2.3 Calendar Integration

If you choose to integrate with Google Calendar or other external calendar services:

• We access your calendar data on a read-only basis to display your existing commitments in your and your logistics partners' calendars. We also use this data to automatically block off available time as busy.
• We do not modify your external calendar data.

2.4 Analytics and Monitoring

We use analytics and monitoring services to improve the Service:

• Error Monitoring (Sentry): We use Sentry for error tracking, performance monitoring, and session replay (a sample of sessions and all sessions where errors occur) to diagnose issues. Session replays are configured with text masking and media blocking so that sensitive on-screen content is not captured.
• Web Analytics (Vercel): Our marketing site and app collect page paths, session identifiers, device type, browser, and approximate geographic location (country, region, city) for usage analysis.

2.5 Cookies and Similar Technologies

We use cookies and similar technologies for:

• Authentication: Session cookies (e.g., sb-access-token) to keep you signed in.
• Preferences: Local storage and cookies for settings such as sidebar state.

Our analytics provider uses in-memory storage where possible rather than persistent cookies.

3. Data Security

We protect your data using industry-standard measures:

• Encryption in Transit: All data is transmitted over TLS/HTTPS.
• Encryption at Rest: Your data is stored in Supabase (PostgreSQL) with encryption at rest.
• Access Controls: Row-level security (RLS) and authentication ensure only you and linked partners can access your data, respecting your sharing permissions.
• Strict Access Controls: Our personnel have access only to the information necessary to perform their duties.

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Respond to comments, questions, and requests and provide customer service.
• Communicate with you about the Service, including updates and notifications.
• Generate anonymized, aggregated data for service improvement purposes.

5. How We Share Your Information

5.1 Sharing With Partners

• Information is shared with your partners only according to the permission settings you establish.
• Partner information is only shared when both you and the partner agree to "link" accounts. Depending on permission level and settings, you and partners may see each other's dating schedule and status, dates and date details, such as attendee names, activities, boundaries and location. Logistics partners may see this data even if they're not participating in the date.
• We provide template-based permissions with customizable settings for different relationship types.

5.2 Service Providers

We share information with third-party vendors who need access to information to perform services on our behalf, such as:

• Supabase — Authentication, database, and storage
• Vercel — Hosting and web analytics
• Render — Hosting
• Sentry — Error monitoring and performance
• Stripe — Payment processing
• Google — OAuth and Calendar integration

All service providers are contractually obligated to use your information only for providing services to us and in accordance with this Privacy Policy.

5.3 Legal Requirements

We may disclose your information if required by law, regulation, or legal process. We never share data with any government agency without being legally compelled to do so, and will take all feasible steps to resist such orders through legal processes.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, user information may be transferred as part of the transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your information.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Analytics and usage data may be retained for product improvement and reporting purposes. You can request deletion of your personal data at any time.

You can request deletion of your account and associated data at any time through our application or by contacting our support team.

7. Your Rights and Choices

7.1 Account Information

You can review and update your account information at any time by logging into your account. You can also request deactivation/deletion of your account by emailing richie@lovepye.com. You may also request a copy of all your retained data by emailing richie@lovepye.com. We will respond within 30 days.

7.2 Push Notifications

You can opt out of receiving push notifications by changing your notification settings in your device settings or within our application.

7.3 Calendar Permissions

You can disconnect external calendar integrations at any time through your account settings.

8. Children's Privacy

Our Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information.

9. International Data Hosting and Transfers

PYE hosts stored data on Canadian servers via Amazon Web Services. Your data is protected and access governed by Canadian law while at rest.

Your information may be transferred through computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this page. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• Email: richie@lovepye.com
• Address: Pye App, Box 732, 368 Pearkes Drive, Revelstoke BC. V0E 2S0