Locoround

Privacy Policy

Last updated: January 13, 2026

1. Introduction

At Locoround, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our location-based social platform.

By using Locoround, you consent to the data practices described in this policy. If you do not agree with the practices described in this policy, please do not use our services.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

  • Full name and username
  • Email address
  • Password (encrypted and hashed)
  • Profile picture (optional)
  • Account preferences and settings

2.2 Location Information

To provide location-based services, we collect:

  • Current GPS coordinates when you use the app
  • Location data associated with your handbills
  • Address information you provide
  • Location preferences and radius settings

2.3 Content Information

When you use our platform, we collect:

  • Handbill content (text, images, and media files)
  • Comments and interactions with other users' content
  • Pinned comments and preferences
  • Search queries and search history
  • Handbill interaction data (views, comments, shares)

2.4 Technical Information

We automatically collect certain technical information:

  • Device information (type, operating system, browser)
  • IP address and network information
  • App usage analytics and performance data
  • Log files and error reports
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision

  • Create and manage your user account
  • Display location-relevant handbills and content
  • Enable posting, commenting, and social interactions
  • Provide AI-powered search functionality
  • Process and display multimedia content

3.2 Communication

  • Send account verification emails
  • Provide customer support and respond to inquiries
  • Send important service updates and notifications
  • Communicate about policy changes

3.3 Improvement and Analytics

  • Analyze usage patterns to improve our services
  • Enhance AI search algorithms and recommendations
  • Debug technical issues and optimize performance
  • Conduct research and development

3.4 Safety and Security

  • Monitor for suspicious or harmful activities
  • Enforce our Terms of Service and community guidelines
  • Prevent fraud, spam, and abuse
  • Protect the rights and safety of our users

4. Information Sharing and Disclosure

4.1 Public Information

By design, certain information on Locoround is public, including your handbills, comments, username, and profile information. This content is visible to other users in your geographic area and may be discoverable through search.

4.2 Service Providers

We share your information with the following third-party service providers who help us operate our platform. Each provider processes data as necessary to provide their respective services:

Database & Authentication

  • Supabase: User accounts, authentication, and structured data storage (PostgreSQL)

Cloud Storage & CDN

  • Amazon Web Services (AWS) S3: Media file storage (images, videos)
  • AWS CloudFront: Content delivery network for optimized media delivery

AI & Machine Learning

  • Pinecone: Vector database for AI-powered search and content embeddings
  • OpenAI / HuggingFace: Language models for content processing
  • Google Generative AI: Content understanding and processing

Analytics & Performance

  • PostHog: Product analytics, feature usage tracking, error monitoring, and performance metrics. Data collected includes: user identification, device information, app usage, screen views, and custom events.

Push Notifications

  • Firebase Cloud Messaging (FCM): Push notification delivery for Android and iOS devices. We store device tokens to send notifications about activity on your content, nearby handbills, and important updates.

Mapping & Location Services

  • Mapbox: Interactive maps, geocoding, and location-based features

Email Services

  • Amazon SES: Transactional emails including verification, password reset, and notifications

Message Queue

  • RabbitMQ: Internal message processing for handbill interactions

All service providers are bound by data processing agreements and are required to implement appropriate security measures.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, property, or safety, or that of our users or the public.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

5. Location Data Privacy

5.1 Location Collection

We collect location data only when you use location-based features. You can control location sharing through your device settings, though this may limit some functionality.

5.2 Location Usage

Location data is used to show relevant local content, associate your posts with geographic areas, and provide mapping services. We do not track your location when the app is not in use.

5.3 Location Sharing

Location information attached to your handbills is visible to other users. We do not share precise location data with third parties except as necessary for map services.

6. AI Training and Data Processing

Important Notice

By using Locoround, you acknowledge and agree that your user-generated content, including but not limited to handbills, captions, comments, and media, may be:

  • Used to train artificial intelligence models
  • Stored in third-party vector databases (such as Pinecone)
  • Processed for machine learning purposes
  • Analyzed for pattern recognition and content recommendations

6.1 AI-Powered Features

We use artificial intelligence to enhance search functionality and content discovery. This includes processing text and images to understand content and provide relevant search results.

6.2 How We Use Your Data for AI

  • Content embeddings generation for similarity matching
  • Improving our recommendation algorithms
  • Training language models for better content understanding
  • Enhancing location-based services and predictions
  • Developing new features based on usage patterns

6.3 Third-Party Storage

We use various third-party services to store and process your data:

  • Supabase: Primary database for user accounts and structured data
  • Vector Databases (e.g., Pinecone): Storage of content embeddings for AI processing
  • AWS S3: Media file storage (images and videos)
  • Machine Learning Platforms: Data processing for AI model training

Note: Due to the nature of AI training, we cannot remove your data from models that have already been trained. Opting out will only prevent future use of your data for training purposes.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Our security measures include:

  • Encryption of data in transit and at rest
  • Secure authentication and password hashing
  • Regular security audits and monitoring
  • Access controls and staff training
  • Secure cloud infrastructure and backups

8. Data Retention

8.1 Account Data

We retain your account information for as long as your account is active or as needed to provide services. You may request account deactivation or deletion at any time through your account settings.

8.2 Content Data

Handbills are retained according to their specified duration settings. Comments and interactions are retained for the lifetime of the associated handbill.

8.3 Technical Data

Log files and analytics data are retained for operational purposes and are automatically deleted after a reasonable period.

8.4 Data Retention After Account Changes

Upon Deactivation:

  • All user data is preserved in our systems
  • Data can be fully restored upon reactivation
  • Your content remains visible with anonymized attribution

Upon Deletion:

  • Profile information (name, email, profile picture) is permanently removed
  • Content metadata (handbill locations, timestamps) may be anonymized and retained
  • Content itself (text, images, videos) remains associated with an anonymous "[Deleted]" identifier
  • Data already used for AI model training cannot be removed from trained models
  • Some data may be retained for: legal compliance, fraud prevention, dispute resolution, and platform integrity

9. Your Rights and Choices

9.1 Access and Control

You have the right to access, update, or delete your personal information. You can manage most of your information through your account settings.

9.2 Location Controls

You can control location sharing through your device settings and within the app. You can also set your preferred radius for discovering local content.

9.3 Communication Preferences

You can opt out of non-essential communications through your account settings. Essential service communications cannot be disabled.

9.4 Account Deactivation vs. Deletion

We offer two options for users who wish to leave the platform:

Account Deactivation (Temporary)

  • Your profile will be hidden from other users
  • Your handbills and comments will remain visible with "[Deactivated]" displayed as the author
  • Your personal data (name, email, profile picture) is preserved
  • You can reactivate your account at any time by logging in with your existing credentials
  • This is reversible

Account Deletion (Permanent)

  • Your profile and personal information will be permanently deleted
  • Your handbills and comments will remain visible with "[Deleted]" displayed as the author
  • You cannot recover your account after deletion
  • Some information may be retained for legal or operational purposes
  • Content shared with others or used for AI training cannot be removed
  • This is irreversible

10. Your Rights Under GDPR (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

10.1 Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: For AI training, marketing communications, and non-essential cookies
  • Contract Performance: To provide our services and fulfill our agreement with you
  • Legitimate Interests: For fraud prevention, security, service improvement, and analytics
  • Legal Obligations: To comply with applicable laws and regulations

10.2 Your GDPR Rights

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate personal data
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data (subject to legal retention requirements)
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time for consent-based processing
  • Right to Lodge a Complaint: File a complaint with your local supervisory authority

10.3 International Transfers

Your data may be transferred to countries outside the EEA, including the United States. We ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission or other approved transfer mechanisms.

10.4 Data Protection Officer

For GDPR-related inquiries, please contact us at: privacy@locoround.com

11. Your Rights Under CCPA (California Residents)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

11.1 Your CCPA Rights

  • Right to Know: Request disclosure of personal information we collect, use, disclose, and sell
  • Right to Delete: Request deletion of your personal information (subject to exceptions)
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out: Opt out of the sale or sharing of personal information
  • Right to Limit Use: Limit the use of sensitive personal information
  • Right to Non-Discrimination: Not be discriminated against for exercising your rights

11.2 Categories of Personal Information

In the past 12 months, we have collected the following categories of personal information:

  • Identifiers: Name, email address, username, IP address, device identifiers
  • Commercial Information: Account activity, interaction history
  • Internet Activity: Browsing history, search history, interaction with our platform
  • Geolocation Data: Precise and approximate location
  • Audio/Visual Information: Photos, videos, and media you upload
  • Inferences: Preferences, characteristics, and behaviors derived from your activity

11.3 Do Not Sell or Share My Personal Information

We do not "sell" personal information in the traditional sense. However, some sharing of data with third parties for targeted advertising or analytics may constitute a "sale" or "share" under CCPA/CPRA. To opt out, contact us at privacy@locoround.com with the subject line "Do Not Sell My Info."

11.4 Exercising Your Rights

To exercise your CCPA rights, you may submit a request by emailing privacy@locoround.com. We will verify your identity before processing requests. You may designate an authorized agent to submit requests on your behalf.

11.5 Financial Incentive Programs

We do not currently offer financial incentive programs that require disclosure under CCPA.

12. Children's Privacy

Locoround is not intended for children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under these age thresholds.

12.1 Age Verification

By creating an account, you represent and warrant that you are at least 13 years of age (or the minimum age required in your jurisdiction). We may require age verification at our discretion.

12.2 Parental Rights

If we become aware that we have collected personal information from a child under the applicable age threshold without parental consent, we will take steps to delete such information promptly. Parents or guardians who believe their child has provided personal information without consent should contact us at privacy@locoround.com.

12.3 COPPA Compliance

We comply with the Children's Online Privacy Protection Act (COPPA) and similar international regulations protecting children's privacy online.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States and other countries where our service providers are located.

We ensure that such transfers comply with applicable data protection laws by implementing:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Data Processing Agreements with all service providers
  • Appropriate technical and organizational security measures
  • Privacy Shield certifications where available (or successor frameworks)

14. Third-Party Links

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes affecting your rights, we will provide 30 days' notice via email or in-app notification. We encourage you to review this Privacy Policy periodically.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Locoround Privacy Team

General Inquiries: contact@locoround.com

Privacy Concerns: privacy@locoround.com

Data Subject Requests: privacy@locoround.com

Response time: Within 30 days for data subject requests

By using Locoround, you acknowledge that you have read, understood, and agree to this Privacy Policy.