Strollable ("we", "our", or "us") is operated as a sole proprietor based in British Columbia, Canada. This Privacy Policy explains what information we collect, how we use it, and your rights under British Columbia's Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
By using Strollable, you agree to the collection and use of information as described in this policy.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address — used for authentication and account communication
- Display name / username — auto-generated; shown publicly on your profile and on location submissions you contribute
- Sign-in method — Google OAuth, or a one-time verification code sent to your email
- Avatar — an illustration automatically generated from your chosen username (an animal and pattern pairing); no photo or personal image is used to create it
1.2 Location Data
- Approximate GPS coordinates — collected in-app only when you use the Near Me button or "Find Change Table" (nearest change table). We do not store your GPS history. Location is processed on-device and used only for the current session feature.
- Submitted location data — addresses and coordinates you voluntarily submit as part of a location contribution are stored in our database and displayed on the map.
1.3 Content You Submit
- Location names, descriptions, categories, amenity details, hours, phone numbers, and websites you submit
- Photos you upload (stored in Supabase Storage)
- Issue reports you file on existing locations
- Your saved places list
1.4 Usage Data
- Analytics events collected via PostHog: feature interactions (e.g., filter_applied, emergency_mode_activated, location_submitted). Events are associated with a randomly-assigned user ID, not your email. We use this to understand which features are useful and to improve the app.
- Crash reports collected via Sentry: device type, OS version, app version, and stack traces when the app crashes. No personally identifying information is included in crash reports.
1.5 Device Information
We do not collect device identifiers (IMEI, advertising IDs) beyond what PostHog and Sentry collect automatically for session tracking, and the push notification token described below if you enable notifications.
1.6 Push Notifications
If you allow notifications, we collect a device push token via Firebase Cloud Messaging (Google) to send you alerts about your submissions, updates, and badges earned. This token is tied to your device, not your identity, and is deleted if you disable notifications or delete your account.
1.7 Website Waitlist Sign-Up
This Privacy Policy also covers strollable.netlify.app, our marketing website. If you enter your email address in the "Notify me" form before the app launches, we collect:
- Email address — submitted via Netlify Forms and used only to send you a one-time confirmation message and, later, a one-time launch notification when Strollable is available on Google Play.
This email address is kept separate from your in-app account unless you later sign up using the same address. We do not use it for any other marketing, and you can ask us to remove it at any time by emailing us.
2. How We Use Your Information
| Purpose | Legal basis |
|---|---|
| Authenticate your account and keep it secure | Contractual necessity |
| Display your contributions on the map | Contractual necessity |
| Send transactional emails (sign-in verification code) | Contractual necessity |
| Send push notifications (submission status, badges earned) | Consent |
| Send waitlist confirmation and launch notification emails | Consent |
| Improve the app through analytics | Legitimate interest |
| Detect and fix bugs via crash reporting | Legitimate interest |
| Respond to support requests | Legitimate interest |
We do not sell, rent, or trade your personal information to third parties.
3. Data Storage and Security
Your data is stored in Supabase (Supabase Inc., servers in AWS us-east-1). Supabase is SOC 2 Type II certified.
Analytics data is stored in PostHog (PostHog Inc., EU cloud region).
Crash data is stored in Sentry (Functional Software Inc., servers in US).
We use row-level security (RLS) so each user can only read and modify their own account data. All connections use TLS encryption in transit. Passwords are never stored — we use one-time email verification codes and OAuth only.
4. Data Retention
- Account data: retained while your account is active. When you delete your account, your profile, saved places, and badges are permanently deleted within 24 hours. Location submissions you made remain on the map as community contributions — your username is removed from them.
- Analytics events: retained for 12 months in PostHog, then automatically purged.
- Crash reports: retained for 90 days in Sentry.
- Photos: deleted from Supabase Storage when the associated location is removed.
- Waitlist email addresses: retained until the launch notification has been sent, or until you ask us to remove it, whichever comes first.
5. Sharing With Third Parties
We share data with the following processors only as needed to operate the app:
| Processor | Purpose | Location |
|---|---|---|
| Supabase Inc. | Database, authentication, file storage | US (AWS) |
| PostHog Inc. | Analytics | EU |
| Functional Software Inc. (Sentry) | Crash reporting | US |
| Google LLC | Sign-in via Google OAuth | US |
| Google LLC (Firebase Cloud Messaging) | Push notifications | US |
| Mapbox Inc. | Map tiles, geocoding, and address search | US |
| Netlify Inc. | Website hosting and waitlist form processing | US |
| Google LLC (Gmail) | Sending waitlist confirmation and launch emails | US |
We do not share your personal information with advertisers or data brokers.
6. Children's Privacy
Strollable is designed for parents and caregivers aged 18 and over. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please contact us and we will delete it promptly.
7. Your Rights
Under PIPA (BC) and PIPEDA, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your account and associated personal data (via Settings → Delete Account, or by emailing us)
- Withdraw consent at any time, which may mean we can no longer provide the service
- Lodge a complaint with the Office of the Information and Privacy Commissioner for BC
To exercise any of these rights, email us at strollable.vancouver@gmail.com.
8. Cookies and Tracking
The Strollable mobile app does not use browser cookies. PostHog uses a persistent anonymous identifier stored in device storage to connect sessions from the same user; this is not linked to your email or name.
9. Changes to This Policy
We may update this policy to reflect changes to our practices or legal requirements. When we do, we will update the "Last updated" date above. Continued use of the app after changes are posted constitutes acceptance of the updated policy. For material changes, we will notify you via the app or by email.
10. Contact
For privacy questions or requests:
Email: strollable.vancouver@gmail.com
This policy is written in plain language. If you have questions, please reach out — we're happy to explain anything.