Privacy Policy
This policy explains what personal data Nearby Drops collects, why, and what rights you have. It covers the Nearby Drops iPhone app and nearbydrops.com.
1. Who is responsible
The controller is Break The Pattern LLC, 1309 Coffeen Avenue, STE 1200, Sheridan, Wyoming 82801, United States. Email: hello@nearbydrops.com.
2. What we collect
Customers
- Account: your email address, or the email Apple shares with us when you use Sign in with Apple (this can be a private relay address). Your name only if you give it to us.
- Profile: your phone number, the districts and treatment categories you pick, your app language and your notification setting.
- Requests and bookings: which drops you request, your optional note to the salon, the status of each request, and ratings you leave.
- Saved salons you follow.
- Device: a push notification token, if you allow notifications.
Salons
- Business details: name, address, phone, website, Instagram, opening hours, services, prices, photos and the booking system you use.
- The owner's account email and phone number.
- Verification data from your public Google Maps listing (place ID, address, business status).
- Billing details for our monthly invoice (handled by Stripe, see below).
We do not collect your location. You choose your districts yourself. The map only uses your location if you tap the locate button, and it stays on your phone. We do not use advertising trackers and we do not sell personal data.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account, showing drops, sending requests to salons, showing their answers | Contract, Art. 6(1)(b) |
| Sending sign-in codes and service emails | Contract, Art. 6(1)(b) |
| Push notifications about new drops and your requests | Your consent, Art. 6(1)(a). You can switch them off at any time in the app or in iOS settings. |
| Verifying that a salon is a real business | Legitimate interest in a trustworthy platform, Art. 6(1)(f) |
| Invoicing salons and keeping accounting records | Contract and legal obligation, Art. 6(1)(b) and (c) |
| Security, preventing abuse, fixing errors | Legitimate interest, Art. 6(1)(f) |
4. What the salon sees
When you request a drop, that salon sees your first name, your phone number and your note, so it can confirm and reach you. Salons do not see your email address. Please do not put health details in your note unless the salon needs them for your treatment.
5. Who processes data for us
| Provider | What for | Where |
|---|---|---|
| Supabase Inc. | Database, sign-in, file storage, server functions | EU (Frankfurt, Germany) |
| Resend Inc. | Sending sign-in codes and service emails | USA |
| Apple Inc. | Sign in with Apple, push notifications, TestFlight and App Store | USA / Ireland |
| Google LLC | Checking salon listings on Google Maps (salon data only) | USA |
| Stripe | Monthly invoices and SEPA direct debit for salons (salon data only) | EU / USA |
| Vercel Inc. | Hosting this website | USA / EU |
Where data goes to the USA, the transfer is covered by the EU–US Data Privacy Framework where the provider is certified, and otherwise by the European Commission's Standard Contractual Clauses.
6. How long we keep it
- Account and profile data: until you delete your account.
- Requests and bookings: as long as your account exists. Records we need for invoicing salons are kept for up to 7 years, as Austrian tax law requires, and only for that purpose.
- Push tokens: removed when you sign out or the token stops working.
- Sign-in codes expire after a short time.
7. Deleting your account
You can delete your account in the app under Profile → Delete account. This removes your profile, requests, saved salons and push tokens. You can also email us and we will do it for you.
8. Your rights
You have the right to access, correct and delete your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. Email hello@nearbydrops.com and we will answer within one month.
You can also complain to a data protection authority. In Austria this is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb.gv.at.
9. Children
Nearby Drops is for people aged 16 and over. We do not knowingly collect data from younger children.
10. Website
nearbydrops.com does not use cookies or analytics. Our hosting provider processes technical data such as your IP address to deliver the page and keep it secure.
11. Changes
If we change this policy, we will update the date above and tell you in the app if the change matters to you.