This Privacy Policy describes how apreet, Inc. (a Delaware corporation; "we," "us," or "apreet") collects, uses, and protects your personal data. We are committed to your right to privacy and we take your privacy seriously. We keep your personal data confidential and secure according to this Privacy Policy and applicable laws and regulations. We have strict internal privacy policies and procedures and strive to keep your personal data secure.
This Privacy Policy applies to the apreet software and services and does not apply to any other websites, software, products, or services that you may access from apreet, each of which may have privacy policies materially distinct from this one. Note that the transmission of data over the Internet may not always be secure. Email was not built for confidential information.
We use the following services to deliver you the best experience.
SMS Verification
To verify your mobile phone number we send a one-time SMS with a code through Vonage Holdings Corp., 23 Main Street, Holmdel, NJ 07733, USA. Their privacy policy: vonage.com/legal/privacy-policy.
Signing In with Google or LinkedIn
You can create an apreet account or sign in using your Google or LinkedIn account. If you choose to do so, the provider authenticates you and shares a limited set of profile information with us, typically your name, email address, profile photo, and a provider account identifier (and, for LinkedIn, basic professional details such as job title and company). We use this information to create and secure your account and to populate your profile. We do not post anything to your Google or LinkedIn account.
Google sign-in is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA (Google Privacy Policy). LinkedIn sign-in is provided by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA (LinkedIn Privacy Policy). Using these providers is optional; you can also register with your phone number instead.
Support & User Engagement
You can chat with us. We use Intercom as a chat service. We also use Intercom to push emails and notifications to help you get the most out of apreet. Sign-up date, chats, chat histories, app usage, emails, and notifications are stored on Intercom systems. Intercom, Inc., 55 2nd Street, 4th Floor, San Francisco, California, 94105.
As part of our service agreement, Intercom collects publicly available contact and social information related to you (email address, gender, company, job title, photos, website URLs, social network handles, physical addresses) to enhance your user experience. Intercom's privacy practices: intercom.com/terms-and-policies#privacy. Intercom's terms of use: intercom.com/terms-and-policies#terms. If you want to opt out of having this information collected by or submitted to Intercom, please contact us.
Tracking of App Crashes
apreet uses an SDK from Firebase Crashlytics, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. The SDK lets us see reports of bugs in our iOS and Android app. After a crash, the app sends information about the incident to Crashlytics: device type, OS version, certain phone information, time of the crash, the state of the application at the time of the crash, and stack traces. Crashlytics uses Installation UUIDs to measure how many users are impacted and minidump data to process NDK crashes. The following personal data is processed and transmitted to Firebase Crashlytics:
- IP address of the device
- device information, such as a RFC-4122 Universally Unique Identifier (UUID) to deduplicate crashes; the timestamp of the crash; the app's bundle identifier and version number; the device's OS name and version number; the device's model name, CPU architecture, amount of RAM and disk space; and language
Firebase Crashlytics retains crash stack traces, extracted minidump data, and associated identifiers (including Crashlytics Installation UUIDs) for 90 days. Data transmitted to Firebase Crashlytics is neither stored nor transferred to other services or resources, nor associated with other data available to Google. Personal data processed by Firebase Crashlytics is transferred to Google servers in the U.S.
Full list of data processed by Firebase Crashlytics: firebase.google.com/support/privacy. Crashlytics' privacy is governed by the Google Privacy Policy.
App Analytics
Our iOS and Android apps use Google Analytics for Firebase, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, to understand how the app is used in aggregate, for example which features are used, app version adoption, and retention. This SDK processes app usage events, a Firebase installation identifier, and device and OS information, and transmits them to Google servers in the U.S.
We use this only to improve the product. We do not display advertising in apreet, we do not use this data to build advertising profiles, and we have not enabled advertising-identifier collection: we do not present an App Tracking Transparency prompt on iOS, so Firebase does not access your device's advertising identifier (IDFA). Firebase Analytics' data handling is governed by the Google Privacy Policy; see also firebase.google.com/support/privacy.
Server Log Files: apreet App
We automatically collect server logs that your device sends to our servers when using our app:
- your device, device OS, OS version
- your apreet app version
- your current location (if you granted us permission)
- time of requests
We attribute this data to your account. We track server logs to better understand your usage and improve the service for you. We may analyze the server logs if we see irregular usage patterns or suspect illegal use.
How and Why Do You Use My Contact Data?
apreet processes your contacts (names, phone numbers, email addresses, addresses) periodically, both people already using apreet and other contacts. Where permitted by applicable law, you confirm that you are authorized (and have your contacts' permission) to share their information with us. apreet processes your contacts only to find your matches and the nearby cities where your paths may cross; we do not use them to build advertising profiles.
apreet determines if any of the phone numbers in your address book is already associated with an apreet user. If so, and if your mobile number is in that user's address book, we match you as friends and show both of you where your paths will cross in the next four weeks. For all other contacts, apreet processes the location information in the address book, i.e., the city. For any destination on your itinerary, apreet shows you contacts nearby.
We do not read or transfer the notes section of your contacts in your address book. Those are strictly private and we keep it that way. We do not write to your address book; we do not change or create new contact information. We process your contact data internally; we do not share your contact data with third parties.
How and Why Do You Use My Calendar Data?
apreet uses your calendar events to build your itinerary for the next four weeks. This is mainly based on the dates and location information of the calendar events. For flights, we determine the airport of departure and arrival based on the title/summary/subject and the location data.
We do not read or transfer data in the description or notes section of your calendar events. Those are strictly private and we keep it that way. We do not write to your calendar; we do not change or create new events. We process your calendar data internally; we do not share your calendar data with third parties.
How and Why Do You Use My Location Information?
We collect and use, with your permission, the location information from your device while you are using the app, when you choose to use location-related features, such as using your current location as a starting point for your itinerary. We try to match it to a nearby town or city and your contacts who have an address in your address book that is close by, and contacts using apreet currently or planning to be in the near future nearby. We may also use your location information to troubleshoot errors such as mistaken localization or matches.
apreet accesses your location only while the app is in use; it does not track your location in the background. You can turn off the app's access to location information in your device settings. If the app gets the starting point wrong, it feels "wrong", which is why we believe using the current location as a starting point of your itinerary is an important part of your user experience, and we recommend enabling location permission. We process your location data internally; we do not share your location data with third parties.
How Do You Use Notifications?
apreet notifies you, with your permission, of contacts you may meet three days before a trip; of friends and contacts joining apreet; and of new destinations added to your itinerary.
How Do You Use My Photos?
You may select and upload a profile picture from your photo library. Profile photos are stored on Amazon Web Services (AWS) infrastructure (Amazon Web Services, Inc.); see aws.amazon.com/privacy.
Who Has Access to My Data?
Your data is important to us. We strive to keep the data you provide secure, and we do not share or disclose this data to third parties unless otherwise stated in this Privacy Policy or required by legal obligations.
How is My Data Secured?
We take precautions to keep your data private. We use industry-standard measures to secure your personal data from accidental loss and unauthorized access, use, alteration, and disclosure. We restrict access to users' data to those employees who need access to perform their job functions, such as our customer service personnel and technical staff.
We use encryption to make sure your data is kept safe whenever it is transmitted between your mobile device and our servers. Note that we cannot guarantee the security of your account information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of your data at any time.
Request Your Data & Deletion of Account
You may, at any time, ask us what personal data we have stored about you. To request your personal data, contact us at support [at] apreet [dot] com.
You can delete your apreet account and all personal data associated with it: open the apreet app and tap Menu (top-left icon) → My Profile → Delete Account. Or request the deletion of your account and personal data via email.
The deletion of your account does not include any data we are obliged to keep for administrative, legal, or security purposes.
We Do Not Sell or Share Your Personal Information
apreet does not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising. We do not use your personal data to build advertising profiles, and we do not allow third-party advertisers on the apreet app or this website.
Data Retention
We retain your personal data for as long as your account is active or as needed to provide the apreet services. After you delete your account, we make reasonable efforts to remove your data within 30 days, with the following exceptions: data retained in routine backups (which expire on their normal rotation), and any data we are obliged to keep for administrative, legal, or security purposes. Crashlytics data is retained for 90 days (see above).
California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:
- Right to know what personal information we collect, use, and disclose.
- Right to delete personal information we have collected from you.
- Right to correct inaccurate personal information.
- Right to opt out of the sale or sharing of personal information. apreet does not sell or share personal information (see above).
- Right to limit the use and disclosure of sensitive personal information.
- Right to non-discrimination for exercising any of these rights.
To exercise any of these rights, email support [at] apreet [dot] com. You may designate an authorized agent to make a request on your behalf.
European & UK Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (and the UK GDPR) gives you certain rights, and we process your personal data on the following legal bases:
- Performance of a contract (Art. 6(1)(b)): to create your account, operate the service, and match you with contacts and destinations.
- Your consent (Art. 6(1)(a)): for processing your contacts, calendar, location, photos, and for sending push notifications and our newsletter. You can withdraw consent at any time, in your device settings or by contacting us; withdrawal does not affect processing already carried out.
- Our legitimate interests (Art. 6(1)(f)): to keep the service secure, prevent abuse, and understand and improve how our app and website are used, balanced against your rights.
- Legal obligation (Art. 6(1)(c)): where we must retain or disclose data to comply with the law.
You have the right to access, correct, delete, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent. To exercise these rights, email support [at] apreet [dot] com. You also have the right to lodge a complaint with your local data protection supervisory authority.
Your personal data is processed on our own servers and on the systems of the service providers described in this policy. Some of these providers (such as Google, Intercom, and Mailchimp) are based in the United States, so your data may be transferred to and processed in the U.S. under their respective data-protection terms (see "International Users" below).
Children's Privacy
apreet is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact support [at] apreet [dot] com and we will take steps to delete it. The Terms of Service additionally require all users to be at least 18 years old.
International Users
apreet is operated by apreet, Inc. Your personal data is processed on our own servers and on the systems of the service providers described in this policy; some of those providers are based in the United States. If you are accessing apreet from another country, data-protection laws there may differ from those where your data is processed. By using apreet, you understand that your personal data will be processed as described in this Privacy Policy.
Newsletter Mailing List
As a recipient of our newsletter, you have provided us with your email address and information that allows us to verify you are the owner of this address and willing to receive the newsletter. Your email is used to keep you up to date about our activities.
We send emails through our partner Mailchimp, The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. See mailchimp.com/legal. Mailchimp is part of Intuit Inc.; see intuit.com/privacy/statement. You may unsubscribe at any time.
Server Log Files: apreet Website
We automatically collect server logs that your browser sends to our servers when visiting this site:
- your device's browser type and version
- your device OS
- referrer URL
- your device's host name
- time of requests
This data is not directly attributable to a person. We do not cross-reference this data with other data. We may analyze the server logs if we see irregular usage patterns or suspect illegal use.
Website Analytics: Plausible
We use Plausible Analytics to understand how the apreet website is used (for example: which pages are popular, where visitors come from). Plausible is a privacy-friendly, lightweight analytics tool that does not use cookies and does not collect personal data. No personal information is stored or shared with third parties for analytics.
We self-host Plausible on our own infrastructure. Plausible's data policy: plausible.io/data-policy.
Because Plausible does not use cookies, this site does not require a cookie banner.
Links to Other Sites
Our website and app may link to third-party sites and profiles (for example, our founders' LinkedIn profiles or the App Store and Google Play). This website does not embed social media plugins, share buttons, or trackers, so simply visiting our pages does not send your data to those networks. If you follow a link to a third-party site, that site's own privacy policy applies, and we have no control over the data it collects.
Questions?
Email us at support [at] apreet [dot] com if you have any questions about this Privacy Policy.