Privacy Policy

Version 2026-08-27

What we collect

• Account: email address and sign-in identity (email, Google or Apple). Passwords are handled by our auth provider; we never see them.
• Profile: display name, handle, avatar, bio, city and any social links you add.
• Community content: Finds, photos, notes, confirmations, disputes, reports, follows and favourites.
• Location: only with your permission, and only while you use the app — to show what is near you and to place a Find you post. We also keep a coarse "last seen near" point on your profile row so notifications about nearby Finds work.
• Taste profile: derived signals about which kinds of Finds you open, save and confirm, used to personalise your feed.
• AI features: what you type into Scout, OMG Brain and Tell Me More, plus the answer and any 👍 / 👎 / "needs updating" rating.
• Search: the search terms typed into the app, stored to improve our vocabulary and spot gaps.
• Notifications: your notification preferences and radius.
• Analytics (optional): anonymous usage events, only if you opt in.
• Technical: device type, error diagnostics, rate-limit counters.

What is public, and what is not

Public: your display name, handle, avatar, bio, city, social links, points and level, plus the Finds, photos and public confirmations you post.

Never public:

• Your email address.
• Your precise or last-known coordinates.
• Your taste profile and personalisation signals.
• Your trust and reputation scores.
• Your searches, Scout conversations and Tell Me More questions.
• Your notification settings, blocks and mutes.
• Consent records and reports you file.

Counts derived from community activity (how many people confirmed a Find, how often a question is asked) are shown in aggregate, without identifying who did what beyond the public attribution on your own posts.

Photos and location metadata

Photos you upload are stored in a private bucket and shown through time-limited links. A photo attached to a Find is published with that Find, and the Find's coordinates are public by design — that is the point of the map. Don't photograph the inside of your home, and remember posting a Find at your own address makes that location public.

AI processing

Scout, OMG Brain and Tell Me More send your prompt and relevant public app context to third-party AI model providers through our AI gateway in order to generate an answer. Do not put personal or sensitive information into these features. We cache answers to reduce cost and latency, and we keep aggregate demand data (which questions are popular) rather than building a public behavioural profile of you.

Imported data about places and businesses

Baseline records are imported from open datasets such as OpenStreetMap and Wikidata, plus admin CSV imports. These describe places and businesses, not app users. See Data sources & licences, and Copyright & content reporting to get a record corrected or removed.

Agent / MCP access

If you connect an AI agent to your OMGwhat account, it acts with your permissions and can read and write the same things you can. Revoke access by disconnecting the agent. We log agent calls for abuse prevention.

Who we share with

We do not sell your personal data and we run no advertising trackers. We use processors to run the service: our hosting and database provider (which also handles auth, storage and email delivery), our AI gateway and its model providers, and geocoding services for turning addresses into map points. Beyond that, we disclose data only when legally required or to protect someone's safety.

Your choices and rights

From Settings → Privacy you can toggle analytics, request an export of your data, and request deletion of your account. You can revoke location permission at any device level at any time. Depending on where you live (for example the EU/UK under GDPR, or California under CCPA/CPRA) you may have rights to access, correct, delete, port, or object to processing — email privacy@omgwhat.app and we will honour requests we can verify.

Retention

Account and profile data is kept while your account exists. Deletion requests are actioned within 30 days; some records (moderation actions, abuse logs, and Finds other people have confirmed and rely on) are retained in de-identified form. Search logs and AI caches are kept for a limited period for quality and abuse prevention.

Children

OMGwhat is not directed at children under 13 and we do not knowingly collect their data.

Contact

privacy@omgwhat.app

This policy describes our actual practices today. It is not a claim of certification or formal compliance with any specific regime. The operating entity, data-controller identity, EU/UK representative, international transfer mechanism and named subprocessor list still need an attorney's review.