Privacy Policy

GraffitiTrail · Last updated: September 15, 2026

GraffitiTrail ("the app", "we", "us") lets you place virtual tags in augmented reality that are only visible to people who physically return to that spot. This page explains what data the app collects, why, and what control you have over it.

Information we collect

• Email address — used to create and secure your account (Firebase Authentication).
• Precise location — required for the app to work at all: tags are only shown within 50 meters of where you currently are, and your location is used to attach a place name to tags you create.
• Photos — only if you choose to add one to a tag, from your photo library or camera.
• Tag content — the text, images, and styling choices that make up the tags you place.
• Crash and diagnostic data — via Firebase Crashlytics, tied to an anonymous account identifier (never your email), used only to find and fix bugs.
• App integrity signals — via Firebase App Check, used to confirm requests come from a genuine copy of the app. This is not used to track you.

What we don't do

• We don't run advertising or behavioral-tracking analytics. Firebase Analytics ships with the app's backend but is switched off.
• We don't sell your data or share it with third parties for marketing.
• We don't track you across other apps or websites.

How your information is used

• Your email and password authenticate you and secure your account.
• Your location determines which tags you can see and where a new tag you place will appear to others.
• Tag content and photos are stored so your tags can be shown to you, and to other users unless you mark a tag private.
• Crash data helps us fix bugs before they affect more people.

Where your data lives

GraffitiTrail is built on Google Firebase — Authentication, Realtime Database, Cloud Storage, Crashlytics, and App Check. Firebase processes and stores this data on our behalf under its own security and privacy commitments: firebase.google.com/support/privacy.

Your controls

• Private tags — mark any tag private so only you can ever see it.
• Block — block another user from the ⋯ menu on any tag or from your profile; you'll stop seeing their tags immediately, everywhere in the app.
• Report — report any tag you find objectionable. Reports go to a moderation queue and are never visible to the person you reported.
• Delete your account — Profile → Delete Account permanently removes your account, every tag you've placed, and your block list. This can't be undone.

Children's privacy

GraffitiTrail is not directed at children under 13, and we do not knowingly collect information from children under 13.

Changes to this policy

If this policy changes in a material way, we'll update the date at the top of this page.