drop helps people find each other in real life: post a plan, see who's in, go to events, and meet the people you keep running into. This policy explains what information we collect to do that, how we use it, who we share it with, and the choices you have.
"drop", "we", "us" and "our" mean drop, operated by a sole proprietor based in California, United States. This policy covers the drop iOS app, the website at ondrop.rsvp, and the drop text number (together, the "Service").
The short version: we collect what we need to run drop, we never sell your personal data, we don't show ads or track you across other companies' apps and websites, and you can delete your account from inside the app at any time.
Information you give us
- Phone number. Your account is your phone number. We text you a one-time code to sign in.
- Profile. Your name, username, birthday (so we can confirm you're 18 or older), gender if you choose to share it, a short intro, your profile photo, your Instagram handle if you add one, and your interests and profile details such as school, job or experience, hometown and pets.
- Home area. The neighborhood and city you pick on the map when you set up your profile. This is a place you choose, not a reading of your device's location.
- What you do on drop. Plans ("seeds") you post, plans you say you're in on, events you host or attend, RSVPs and your answers to RSVP questions, event flyers and other images you upload, polls and poll votes, messages you send, clubs you join, circles you create or belong to, who you met, and the feedback you give after an event.
- Texts to drop. Messages you send to the drop text number, including replies to our messages.
- Shared links. Links you share into drop from other apps using the share sheet, for example an event page you want to import.
- Reports and support. What you tell us when you report someone, report content or contact us for help.
- Payments. If you buy a ticket to a paid event, we keep a record of the purchase (the event, amount, and status). Your card details go straight to Stripe. We never see or store your full card number. If you host paid events, Stripe collects the information it needs to pay you out.
Device permissions, and only when you use them
The app asks for each permission in context, and you can turn any of them off in iOS Settings at any time. drop still works without them; only the feature that needs the permission stops working.
- Location. Used only for Drop Touch, when you connect with someone in person. At the moment you tap Connect, the app reads your location once so we can record the neighborhood where you met (for example, "Mission District"). We keep that place name, not your coordinates. drop does not track your location in the background or at any other time.
- Bluetooth. Used only while the Touch screen is open, to find the phone held next to yours. It stops when you leave that screen.
- Camera. Used to take photos (such as a profile photo or event flyer) and to scan drop codes.
- Photo library. Used to let you choose images to upload, and to save images you choose to save, such as a story image to share.
- Contacts. When you invite a friend, you pick one contact in the iOS contact picker. Only that person's phone number is sent to drop, so we can text them your invite. Their name stays on your phone. drop never uploads or reads your address book.
- Notifications. If you allow push notifications, we store a push token for your device so we can send them.
Information collected automatically
- Device and app info. Device model, operating system version, app version, and your push token.
- Usage analytics. We record how the app is used (for example, which screens you open and which features you use) in our own analytics, tied to your account. We use this to understand what's working and fix what isn't. We don't use a third-party advertising or analytics SDK for this.
- Crash and error reports. When the app crashes or hits an error, we send a diagnostic report to Sentry. This can include a short replay of the moments before the error, with text and images masked so the content on your screen is not captured.
- Website basics. Our website uses cookies that are needed to keep you signed in. We don't use advertising cookies.
How we use your information
- To create your account, sign you in, and run the Service.
- To recommend people, plans, events and clubs you might like, based on things like your interests, profile details, home area and who you've met.
- To send you texts and push notifications about your plans, events, invites, messages and account.
- To understand requests you text us, pull event details out of links you import, and tag plans, events and clubs so they reach the right people.
- To keep drop safe: reviewing reports, enforcing our Terms, and preventing fraud, spam and abuse.
- To process ticket purchases and pay hosts.
- To measure and improve how drop works, and to fix bugs.
- To comply with the law.
What other people can see
- Your profile (name, username, photo, intro, interests and profile details, and Instagram handle if you add one) is visible to other drop users. Your phone number and birthday are not shown on your profile.
- Plans. When you say you're in on a plan, people who can see that plan can see that you're in.
- Events. Hosts see who RSVPs and your answers to their RSVP questions. Other guests can see you on the guest list.
- Messages, clubs and circles. Messages are visible to the people in that conversation. Club and circle members can see who else is a member.
- People you meet. When you connect with someone through Drop Touch, you each see the connection and where it happened.
Service providers we use
We share information with companies that help us run drop. They process it on our behalf, under contracts that limit what they can do with it:
- Supabase: database, sign-in and file storage.
- Vercel: hosting for our website and servers.
- Twilio: sending and receiving text messages.
- Expo: delivering push notifications and app updates.
- Sentry: crash and error reporting.
- Stripe: ticket payments and host payouts.
- Mapbox: maps and place search.
- Resend: sending email.
- OpenAI and Anthropic: AI models that process some content, such as texts you send to the drop number, event links and pages you import, your interests and profile details, and club descriptions. We use them to understand requests, pull out event details and generate tags. Under their API terms, they do not use this data to train their models.
We may also share information when the law requires it, to protect the safety of our users or the public, to enforce our Terms, or as part of a merger or sale of the business (in which case this policy would continue to apply to your information, or we'd tell you first).
What we don't do
- We do not sell your personal data.
- We do not share your personal data for advertising, and there are no advertising SDKs in drop.
- We do not track you across other companies' apps or websites.
Keeping and deleting your data
We keep your information for as long as your account is open. You can delete your account in the app under Settings > Delete account.
Deleting your account deletes your account and profile, your participation in plans and events, and the messages tied to your account. Events or clubs you hosted that other people took part in are kept for them, but no longer show your name; they appear as hosted by "Deleted User".
We may keep limited records where the law requires it (for example, payment records), and deleted data can remain in backups for a limited period before it is overwritten.
To stop text messages from drop, reply STOP to any message. Reply HELP for help.
Your choices and rights
- Access and correct. You can see and edit your profile in the app. To get a copy of your data, email us.
- Delete. Delete your account in the app, or email us and we'll do it for you.
- Notifications. Turn push notifications on or off in iOS Settings, and reply STOP to stop texts.
- Permissions. Turn off location, Bluetooth, camera, photos or contacts access in iOS Settings at any time.
- Blocking. Block people you don't want to interact with.
California and other US state rights
Depending on where you live, including California, you may have the right to know what personal information we collect and how we use it, to get a copy of it, to correct it, to delete it, and to opt out of its sale or sharing for targeted advertising. We don't sell or share personal information in those ways. To use any of these rights, email us. We won't treat you differently for using them. We may need to confirm your identity (usually by your phone number) before acting on a request.
Age requirement
drop is for adults 18 and older, and we ask for your birthday to confirm it. drop is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe someone under 18 is using drop, email us and we'll delete their account.
Security
We use industry-standard safeguards, including encryption in transit and access controls on our database, to protect your information. No system is perfectly secure, so we can't promise absolute security, but we work to protect your data and will tell you if a breach affects you as the law requires.
Changes to this policy
If we change this policy, we'll update the date at the top. If the change is significant, we'll let you know in the app or by text before it takes effect.
Contact us
Questions, requests or concerns about your privacy? Email us at hi@droptxt.co.