This policy explains what Pop or Keep collects, why, and what you control. Plain English first; legal specifics below.
TL;DR
- We collect: your email address, photos, name, date of birth, gender, preferences, approximate location, device info, and the messages you send.
- We use it to: run the app, find compatible people near you, keep the community safe, and comply with the law.
- We share with: our infrastructure providers (database, storage, moderation, push), and law enforcement when legally required.
- We never sell your data.
- You can export or delete your account at any time from Me → Delete account.
1. Data we collect
From you
- Email address: used for sign-in and abuse prevention. Verified with a one-time code.
- Profile data: first name, date of birth, gender, interested-in, city, bio, photos.
- Messages: the text of messages you send to matches.
- Reports and blocks: safety signals you submit against other users.
Automatically
- Device info: browser, OS, app version, device form factor, locale, and (if you opted in) your Web Push subscription endpoint.
- Approximate location: derived from IP and device location services (with your permission), rounded to city-level.
- Usage events: pop, keep, match, message and report, via PostHog for analytics.
- Crash reports: via Sentry. We scrub PII before submitting stack traces.
From third parties
- Moderation: AWS Rekognition scans photos for prohibited content. Rekognition does not retain photos after processing.
- CSAM detection: photos are hashed and checked against NCMEC-registered denylists. Hash matches are escalated under U.S. law.
2. Why we use it
- Operate the App: show your profile, deliver messages, send notifications.
- Safety: moderate photos, run reports and blocks, detect impersonation, ban abusers.
- Legal compliance: respond to court orders, report CSAM to NCMEC.
- Product improvement: aggregate, anonymized metrics.
We do not use your data to train AI models that are sold or shared externally.
3. Who we share with
- Cloudflare R2: photo storage.
- AWS Rekognition: photo moderation (transient).
- CSAM provider (PhotoDNA / Thorn / Hive): perceptual hashes only.
- Web Push (VAPID → FCM / Apple Push): match & message notifications.
- Resend: sign-in code emails.
- Sentry: scrubbed crash reports.
- PostHog: product analytics events.
- Neon / self-hosted Postgres: primary database.
We do not sell personal data and have not in the last 12 months.
4. Retention
- Active account data: retained while your account exists.
- Messages: retained until you or your match deletes the account.
- Reports and audit logs: retained for 3 years for safety analysis.
- Deleted account: PII wiped immediately; email address retained 30 days (abuse prevention), then hard-deleted.
- CSAM preservation: governed by 18 U.S.C. § 2258A.
- Crash and analytics events: 90 days.
5. Your rights
Depending on where you live (EU/EEA, UK, California, Virginia, Colorado, Connecticut, Utah, and similar jurisdictions), you may have the right to:
- Access: download a copy of your data. Email privacy@poporkeep.com.
- Delete: delete your account from Me → Delete account, or by request.
- Correct: edit your profile in-app; for other corrections, email us.
- Object / restrict: opt out of non-essential analytics via Me settings.
- Portability: receive your data in machine-readable JSON.
- No discrimination: exercising these rights never degrades your service.
EU/EEA legal bases: contract (operating the service), legal obligation (CSAM reporting, law enforcement), and legitimate interest (safety, fraud prevention and analytics, narrowly scoped).
6. Children
Pop or Keep is for people 18 or older. We do not knowingly collect data from anyone under 18. If we learn we have, we delete the account. Underage reports are escalated immediately.
7. Security
- Transport encryption (TLS 1.2+) for all traffic.
- At-rest encryption for the database and object storage.
- OTP codes hashed with PBKDF2-SHA256 (100k iterations).
- JWT access tokens scoped short (15 min); refresh tokens rotate on use.
- Photos moderated before public exposure.
Vulnerability disclosure: security@poporkeep.com.
8. International transfers
If you use Pop or Keep from outside the United States, your data may be processed in the U.S. We rely on Standard Contractual Clauses for EU/EEA transfers.
9. Changes
We will notify you in-app of material changes at least 14 days before they take effect.
10. Contact
- Privacy questions: privacy@poporkeep.com
- Security disclosures: security@poporkeep.com