Privacy Policy

When you create an account, we collect:

• Phone number — collected at sign-up or when you sign in with a phone OTP. Stored in E.164 format and used to verify your identity via Twilio.
• Username and display name — chosen by you during onboarding. Visible to other users.
• Birthday — used to enforce our minimum age requirement. Users under 13 are blocked from creating an account.
• Email address — optional. If provided, used for transactional emails and account recovery.
• Bio — optional text you add to your profile.
• Profile photo — optional. Uploaded and stored on our servers (Cloudflare R2). We retain a history of your past profile photos for administrative purposes.
• Privacy setting — whether your account is public or private, set at sign-up and adjustable at any time.

If you sign in with Apple or Google, we receive:

• A unique identifier from Apple or Google tied to your account on that platform.
• Your name and email address, if you choose to share them (Apple gives you the option to hide your email).
• We store only the identifier and, if shared, the name and email. We do not receive your Apple or Google password.

• Photos and images — photos you post as Drops or Vault Direct posts, including processed versions (thumbnails, card images, background-removed variants). Stored on Cloudflare R2.
• Captions and descriptions — text you add to posts, including item names and collection names.
• Product links — if you attach an external product URL to a post, we scrape and store publicly available metadata from that URL (product title, price, site name, and product image) to display within your Drop.
• Comments — text comments you write on posts.
• Votes — whether you voted Cop or Drop on a given post. We record your vote to prevent duplicate voting.
• Likes — posts you have liked in the Cop feed.
• Vault collections — the names and organisation of collections you create in your Vault.

• Accounts you follow and accounts that follow you.
• Follow requests you send or receive (for private accounts).
• Accounts you have blocked.
• Reports you submit about content or other users.
• Appeals you submit against moderation decisions.

If you grant permission, the app reads phone numbers from your device's contacts to identify which of your contacts are already on CopOrDrop. We send those numbers to our server for matching, then immediately discard them — we do not retain your contacts. You can revoke this permission at any time in your device's Settings.

To protect the integrity of the platform, we maintain:

• A risk score associated with your account, based on behavioural signals.
• A shadowban status (none, soft, or hard) that may affect the visibility of your content without notifying you directly.
• Records of reports made against your content and any moderation actions taken.
• Device identifiers (a hashed fingerprint of your device) to detect and prevent ban evasion by users who have been permanently removed from the Service.

• Push notification token — an Expo push token generated by your device, used to deliver in-app and push notifications.
• Device type and OS version — collected passively for debugging and compatibility.
• IP address — collected by Cloudflare (our CDN and WAF provider) for rate limiting and security. We do not permanently store per-request IP logs.
• Error and crash reports — sent to Sentry when the app encounters an error. May include stack traces and limited device context.
• In-app notifications — we store notification records (type, body, read status) for up to 90 days, after which they are automatically deleted.

We use the following third-party processors to operate the Service. Each processes your data only as instructed by us:

• Twilio — SMS OTP delivery.
• Apple / Google — third-party sign-in authentication.
• AWS (Amazon Web Services) — automated image content moderation via Rekognition.
• Cloudflare — CDN, media storage (R2), and Web Application Firewall. IP addresses and request metadata pass through Cloudflare's network.
• Railway — backend API hosting and primary Postgres database.
• Upstash — Redis-based cache and queue (vote counts, feed sorted sets, job queues). Data is stored with TTLs and is not used for user profiling.
• Sentry — error and crash monitoring. Error reports may include partial app state and device context.
• Expo — push notification delivery infrastructure.
• Resend — transactional email delivery from noreply@copordrop.app.

The following information is visible to other users of the Service, subject to your privacy settings:

• Your username, display name, bio, and profile photo are always public.
• Your posts and Vault content are visible to all users if your account is public, or only to approved followers if your account is private.
• Your vote on any post is not publicly displayed — aggregate vote counts (Cop %) are shown, not individual voter identities.
• Comments and likes you make on posts are visible to other users who can see that post.
• Your follower and following lists are visible to other users.

We may disclose your information if we believe in good faith that it is necessary to:

• Comply with applicable law, regulation, legal process, or enforceable governmental request.
• Enforce our Terms of Service, including investigation of potential violations.
• Detect, prevent, or address fraud, security, or technical issues.
• Protect the rights, property, or safety of CopOrDrop, our users, or the public.

If CopOrDrop is involved in a merger, acquisition, financing, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via a prominent notice in the app or by email before your information becomes subject to a different privacy policy.