CityFind (“CityFind,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect through the CityFind website (the “Website”) and the CityFind mobile application (the “App”) (collectively, the “Services”), how we use and protect it, and the choices and rights available to you. By using the Services, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Services.
1. Information We Collect
1.1 Information You Provide Directly
- Email Address. If you choose to create an account, we collect your email address to send you a secure “magic link” sign-in code. We do not collect or require a password.
- Saved Listings. If you create an account, information about which Listings you save or bookmark is stored and associated with your account so that your saved list is available across sessions and devices.
We do not collect your name, phone number, physical mailing address, payment information, or government-issued identifiers through the Services.
1.2 Location Information
With your permission, the Services access your device's or browser's location (while the Services are in use) to show you Listings near you and to sort search results by distance. Location processing (such as distance calculations) is performed on your device. We do not store a history of your precise location or track your movement over time on our servers. You can deny or revoke location access at any time in your device's or browser's Settings; doing so will not prevent you from browsing Listings, though distance-based sorting may not be available.
1.3 Usage and Analytics Information
We may collect limited, aggregated usage information, such as which Listings are viewed or interacted with, to help us understand overall engagement and improve the Services. Where technically feasible, this information is not tied to your identity and is used only in aggregate.
1.4 Device and Log Information
Our backend service provider (Supabase, described in Section 4) may automatically log certain technical information necessary to operate the Services, such as IP address, device type, operating system version, and timestamps of requests. This information is used for security, debugging, and service reliability purposes.
1.5 Information We Do Not Collect
The Services do not access your camera, photo library, contacts, microphone, or advertising identifier, and do not use third-party advertising or tracking SDKs.
2. How We Use Your Information
We use the information described above to:
- provide, operate, and maintain the Services' core features, including account authentication and saved Listings;
- show you Listings relevant to your location;
- respond to your requests, questions, or support inquiries;
- monitor and analyze usage trends to improve the Services' functionality, content, and user experience;
- detect, prevent, and address technical issues, fraud, or misuse of the Services; and
- comply with applicable legal obligations.
We do not sell your personal information, and we do not use your personal information for third-party advertising or share it with data brokers.
3. Legal Basis for Processing (EEA/UK Users)
If you are located in the European Economic Area or the United Kingdom, we process your information on the following legal bases:
- performance of a contract, where processing is necessary to provide the Services' features you request, such as your account and saved Listings;
- legitimate interests, such as improving and securing the Services, provided those interests are not overridden by your data protection rights; and
- consent, such as your consent to location access, which you may withdraw at any time.
5. Data Retention
We retain your account information and saved Listings for as long as your account remains active, or as needed to provide you the Services' features. If you delete your account using the in-app account deletion feature or by contacting us, we will delete or anonymize your personal information within a commercially reasonable time, except where we are required to retain certain information to comply with legal obligations, resolve disputes, enforce our agreements, or for legitimate fraud-prevention or security purposes.
6. Your Rights and Choices
6.1 Access, Correction, and Deletion. You may delete your account and associated personal data at any time directly within the App via the account deletion feature in your Profile settings, or by contacting us using the information below.
6.2 Location Permissions. You can enable or disable location access at any time through your device's Settings app or your browser's permission settings.
6.3 California Residents. If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what personal information we have collected about you, the right to request deletion of that information, and the right to non-discrimination for exercising these rights. We do not sell or share personal information as defined under the CCPA. To exercise these rights, contact us using the information below.
6.4 EEA/UK Residents. If you are located in the EEA or UK, you may have rights under the GDPR/UK GDPR, including the right to access, rectify, erase, restrict, or port your personal data, and the right to object to certain processing. You also have the right to lodge a complaint with your local data protection authority.
6.5 Do Not Track. Because the Services do not use third-party tracking or advertising technologies, we do not currently respond to browser or device “Do Not Track” signals, as none are applicable to the Services' functionality.
7. Data Security
We use commercially reasonable administrative, technical, and physical safeguards designed to protect your information, including encrypted transmission of data (HTTPS/TLS) between the Services and our backend, and access controls on our database (including row-level security policies restricting user data to the account it belongs to). However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security of your information.
8. Children's Privacy
The Services are not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children under that age. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at the email below.
9. International Data Transfers
Your information may be processed and stored in the United States or other countries where our service providers, including Supabase, maintain infrastructure. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for international transfers of personal data.
10. Third-Party Listings
Listings displayed in the Services may reference third-party businesses, vendors, or event organizers. This Privacy Policy does not apply to the privacy practices of those third parties, and we encourage you to review their privacy policies directly if you interact with them.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the revised Policy on the Website, make it accessible within the App, and update the “Last Updated” date above. Material changes will be communicated through the Services or by other reasonable means where required by law. Your continued use of the Services after any changes constitutes your acceptance of the revised Policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, including data deletion requests, please contact us at:
CityFind Support
hello@cityfind.app