Privacy Policy
Last updated: October 15, 2026
Introduction
Welcome to Drop It. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website or use our mobile application and tell you about your privacy rights and how the law protects you.
Definitions
- Account: A user-created profile with unique credentials that grants access to specific services, features, or personal data stored by GAIAWAVE.
- Device: Any hardware (e.g smartphone, computer, tablet) used to access the application, which may collect technical data
- Notification: Messages sent by Drop It to inform users about updates, security alerts, promotions, or account activity. Users may opt in/out of certain notifications.
- Personal Data: Any information that directly or indirectly identifies an individual. such as: email, date of birth, etc.
- Camera: A device hardware feature that allows users to capture images/videos within drop it.
- Location: Geographic data collected via GPS, Wi-Fi, or IP address, which includes: Precise real-time GPS coordinates.
- Website: refers to drop-it.ca
- Usage Data: Automatically collected information about how users interact with the app, including: Search queries, device identifiers, analytics data, etc.
- Drop: Equivalent of a post, any content you create, upload, or public on our platform.
- Dropped: Describe the act of sharing or making your content available on our platform.
Information We Collect
Personal Information
- Email address, or the account you sign in with through Google or Apple.
- Birthday, to confirm you are at least 13.
- Username, profile picture, and the region you choose for leaderboards.
- Your drops and replies, including photos and videos. We remove location and camera details embedded in photos before they are stored.
- Your progress in the app: Aura, Dripcoins, missions, streaks and titles.
- Your likes, dislikes, reports and blocks.
Location Information
Drop It is a location-based social media platform. We collect precise location data when you:
- Create a post or "drop" content at a location
- View content that others have dropped
- Use location-based features within the app
Technical Information
- Device information (type, operating system, unique device identifiers)
- App usage data and analytics
- Log files and crash reports
Camera Access
To enable features like posting photos/videos, we request access to your device’s camera.
How we use it:
- Capture and upload media
Data handling:
- We only process images/videos you CHOOSE TO UPLOAD. We do not have access to your camera continuously
- You can revoke camera permissions anytime via device settings, but this may limit functionality
Media Library Access
To drop existing photos/videos from your device’s gallery, we request access to your device's media library.
How we use it:
- Allow selection of media to share posts
Data handling:
- We only access media you EXPLICITLY SELECT (No broad scans of your library)
- You can deny access but will be unable to attach library files.
How We Use Your Information
We use the information we collect to:
- Provide and maintain our location-based social media service
- Enable you to create and discover location-specific content
- Send you important updates about our service
- Improve our app and develop new features
- Ensure the security and integrity of our platform
- Comply with legal obligations
Location Data
Drop It uses your precise location while you use the app, to show you drops within about 50 metres and to place the drops you post. A drop's location is stored rounded to about 10 metres.
Nearby alerts (off unless you turn them on)
If you turn on Nearby in Settings, Drop It can use your location while the app is closed, to tell you about drops near you that you have not seen yet. We keep only your last location, overwrite it each time, and delete it after 30 minutes. We also delete it when you turn Nearby off, log out, or delete your account. We do not keep a history of where you have been, and the person who posted a drop never learns who was alerted.
Daily venue
To pick which venue to feature for you, we estimate the area you usually spend time in from the drops you posted, opened or saw in the last 14 days. That estimate is not stored or shown to anyone.
Busy areas on the map
Busy areas show only the centre of a 200-metre square and a count, never a drop's exact position or who posted it.
Usage statistics
When you open the app, it tells us your phone type and app version, and your location if you allowed it. We reduce that location to the city or region and the venue area you are in, and we do not store the location itself. We use this, and a few in-app moments such as which sign-in option you chose or whether you opened a notification, to understand how Drop It is used. We do not use it for advertising or share it with anyone.
You can turn location off at any time in your phone's settings.
What Other People Can See
Your username, profile picture, drops and replies are public to people near them. Leaderboards show your username, Aura and title on the global board and on the region you choose. Drops show how many people viewed them, never who.
Your friends can see where your drops are on a map from anywhere, but not what they say. They still have to go there to read them. Drops you post to friends only, or to chosen friends, are visible only to those people. Blocking someone hides you from each other.
When you share a drop, anyone with the link can see your username, the name of the place, and how many people found it. The web page never shows the drop's exact location or what it says.
Notifications
If you allow notifications, we store a notification token for your device so we can tell you about likes, replies, popular drops and, if you turned it on, nearby drops. The token is deleted when you log out or turn notifications off.
Data Sharing
We do not sell your personal information. We may share your information in the following circumstances:
- With other users when you create public content
- With the service providers listed below
- When required by law or to protect our rights
- In connection with a business transaction (merger, acquisition, etc.)
Service providers
We use these providers to run Drop It. They process data only for us:
- Supabase: hosting for accounts, posts and media, stored in Canada.
- Apple Push Notification service and Firebase Cloud Messaging (Google): delivering notifications.
- Mapbox: maps.
- Google and Apple: sign-in, if you choose them.
- Postmark: sign-in code and account emails.
- Sentry: crash and error reports, without your name or email.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Limited access to personal data on a need-to-know basis
- Secure data centers and infrastructure
Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Objection: Object to processing of your personal data
- Restriction: Request limitation of processing
Data Retention
We retain your personal data only for as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy.
- Guest sessions ("Start exploring") are deleted after 30 days without use, or as soon as you sign up or leave guest mode.
- Deleting your account in the app deletes your profile, drops, replies, media, progress and notification tokens.
To learn how to delete your account, see Delete your Drop It account.
Children's Privacy
Drop It is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@drop-it.ca
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. We encourage you to review this privacy policy periodically.
Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at:
Drop It Privacy Team
Email: support@drop-it.ca
Address: 112-1111 Rue Saint-Urbain, Montreal, QC H2Z 1Y6
Data Deletion Requests
You may also request the deletion of certain personal data or your entire account, and we will process such requests in accordance with applicable laws.