Privacy Policy
Last updated: April 26, 2026
The short version: Culdesac collects only what's needed to help you find and join community events near you. We don't sell your data, we don't run ads, and you can delete your account and everything tied to it at any time from the app's settings.
1. Who we are
Culdesac is a community and events app operated by Sung Ha. You can reach us at [email protected]. This policy covers the Culdesac mobile app (Android and iOS) and the website at yourculdesac.com.
2. What we collect
Information you provide
- Account: email address, password (stored hashed), and optionally a Google account ID if you sign in with Google.
- Profile: name, age, photos, bio, interests, and any other details you choose to add.
- Content: messages, posts, event RSVPs, club memberships, and any other content you create in the app.
Information collected automatically
- Approximate and precise location: used to show you events and clubs near you, and to display your selected city. We only access location while the app is open and only after you grant permission. You can revoke this permission at any time in your device settings.
- Camera and photo library access: used only when you choose to upload a photo for your profile, a message, or a moment. We do not access your camera or photo library at any other time.
- Device and diagnostic data: device type, OS version, and app crash reports, used to fix bugs and improve the app.
- Push notification token: used to send you notifications about events you've joined, messages, and other activity. You can disable notifications at any time in your device settings.
3. How we use your data
- To provide the core app features: account management, finding nearby events and clubs, messaging, and notifications.
- To send you transactional emails (welcome message, account-related notices). We do not send marketing emails without your explicit consent.
- To improve the app by analyzing crashes and usage patterns in aggregate.
- To enforce our terms and prevent abuse, fraud, or harm to other users.
4. Who we share data with
We share data only with service providers that help us run the app. They process data on our behalf under contractual obligations and cannot use it for their own purposes.
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database, authentication, file storage, push notification delivery | All user-submitted data and account info |
| Google Sign-In | Optional sign-in with your Google account | Google account ID and email (only if you choose this option) |
| Google Maps | Map and location display | Approximate location, when you view a map |
| Resend | Transactional email delivery | Email address, message content |
| Expo Application Services (EAS) | Push notification routing, app updates | Push notification tokens, device identifier |
| Vercel | Hosting for the website (yourculdesac.com) | Standard web request logs (IP address, user agent) |
We do not sell your personal data or share it with advertisers.
5. How long we keep your data
We keep your account data for as long as your account is active. When you delete your account, we delete your profile, messages, posts, and uploaded media within 30 days. Some anonymized records may be retained longer for fraud prevention or to comply with legal obligations.
6. Your rights
You can:
- Access your data by emailing [email protected].
- Correct your profile and account information from within the app.
- Delete your account and all associated data from the app's settings, or by emailing us.
- Withdraw consent for location, camera, or notification access at any time in your device settings.
If you are in the European Union, the United Kingdom, or a jurisdiction with similar data protection laws, you also have the right to data portability and to lodge a complaint with your local data protection authority.
7. Children and teens
Culdesac is intended for users aged 13 and older. We do not knowingly collect personal data from anyone under 13. If you are a parent or guardian and believe a child under 13 has provided us with personal information, please contact us at [email protected] and we will delete it promptly.
For users aged 13 to 17, parents or guardians may contact us to request access to, correction of, or deletion of their child's account and associated data. We comply with the U.S. Children's Online Privacy Protection Act (COPPA), and where applicable, the GDPR's protections for children.
8. Security
We use industry-standard encryption in transit (HTTPS/TLS) and at rest. Passwords are hashed and never stored in plaintext. No system is perfectly secure, but we work to protect your data and will notify affected users if we discover a breach involving personal data.
9. International users
Culdesac is operated from the United States, and your data is processed in the United States and other regions where our service providers operate (including Canada and the European Union). By using the app, you consent to this transfer of data.
10. Changes to this policy
If we make material changes to this policy, we will notify you in the app or by email before the changes take effect. The "Last updated" date at the top of this page always reflects the latest version.
11. Contact
For any privacy-related questions or requests, email [email protected].