Skip to content

Privacy Policy

Last updated 8 August 2026

1. Introduction and Data Controller

This Privacy Policy explains how Roberts Novikovs ("we," "us," or "our"), a sole trader based in Rīga, Latvia, processes your personal data when you use the ShowUp mobile app (Android package: com.itsrobix.ShowUp) and website (https://showup-app.co).

  • Contact email: robnovdev@gmail.com
  • Lead supervisory authority: the Latvian Data State Inspectorate (Datu valsts inspekcija).

2. What ShowUp Is

ShowUp is a mobile app for finding and joining small local social activities nearby. Activities appear as pins on a map centred on your location.

3. Data We Collect and How We Use It

We strictly limit data collection to what is necessary for the app to function.

  • Account data. Email address and password (stored as a bcrypt hash by Supabase Auth), session IP address, and user agent.
  • Google Sign-In. If used, we receive your email, full name, Google profile picture URL, and Google account ID (sub).
  • Profile data. First name, last name, username, and interests are required. Profile photo, bio, and social media handles (Instagram, TikTok, Snapchat, X, Facebook) are optional. Note: profile photos are stored in a public storage bucket and are visible via URL.
  • Activity and participation data. Details of activities you host (including exact latitude and longitude), attendance, invitations, friends, and blocked users.
  • User-generated content. In-app chat messages, user reports, and feedback.
  • Device identifiers. We collect an Expo push notification token, and a secure SHA-256 hash of your hardware device ID to prevent referral fraud.

4. Location Data Processing

Location is central to ShowUp, and we handle it with strict privacy constraints:

  • Foreground only. We only request location access while you are actively using the app. We do not use background tracking or geofencing.
  • Single stored position. We store only your most recent coordinates, to centre the map and to calculate nearby users; we do not maintain a location history trail.
  • Visibility. Your raw coordinates are not visible to other users. However, if you host an activity, the coordinates you choose (or your current location if using "Quick post") become public to nearby users.

5. What We Do Not Do

  • We do not sell or share your personal data with data brokers or advertising networks.
  • We do not use analytics SDKs (for example Google Analytics or the Meta SDK), ad tracking, or cookies in the app.
  • We do not access your contacts, calendar, or photo library (beyond the single photo you upload).

6. Third-Party Processors

We use trusted third-party service providers (processors) to run ShowUp:

  • Supabase (Sweden, EU) — backend database, authentication, and file storage.
  • Mapbox (US) — map tiles and rendering (receives IP and tile requests).
  • Google and Expo (US) — authentication and push notification delivery.
  • RevenueCat, Apple, and Google Play — subscription management and payment processing. Card data is handled entirely by the app stores and never touches our servers.
  • Resend and Cloudflare Pages — transactional emails and website hosting.

7. Automated Processing and Moderation

  • Chat scanning. Every chat message is automatically scanned for prohibited content (for example hate speech or illegal sales). Messages are flagged for human review but are not automatically deleted.
  • Automated suspension (GDPR Art. 22). If an account receives 5 pending reports from other users, it is automatically suspended (hidden from other users) pending human review. You may contest a suspension by emailing us.

8. Data Retention and Deletion

  • Account deletion. You may delete your account in the app settings. This triggers a 14-day grace period during which your profile is hidden. After 14 days, your data is permanently deleted.
  • Moderation exceptions. If your account is involved in a safety report, it is anonymised and permanently banned rather than deleted, to preserve evidence for up to 24 months.

9. Children's Privacy

ShowUp is intended solely for users aged 18 and older. We do not knowingly collect data from children.

10. Your Privacy Rights (GDPR)

Under the GDPR, you have the right to:

  • Access a copy of your data.
  • Rectify inaccurate data via your profile settings.
  • Erase your data via the delete account function.
  • Withdraw consent for location or push notifications in your device settings at any time.
  • Lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or your local data protection authority.

11. Legal Bases for Processing (GDPR)

We process your data under the following legal bases:

  • Contract (Art. 6(1)(b)) — account creation, profile, hosting, chat, and subscriptions.
  • Consent (Art. 6(1)(a)) — precise location and push notifications.
  • Legitimate interests (Art. 6(1)(f)) — moderation, abuse prevention, and anti-fraud device hashing.

If you have questions about this policy or want to exercise any of the rights above, email us at robnovdev@gmail.com.