This policy describes what information Prefer (“we”, “the app”) collects about you, how we use it, and the choices you have. Prefer is operated by David Conneely, reachable at [email protected].
What we collect
When you sign up and use Prefer, we collect:
- Account information. Your email address and a password hash, both stored by our authentication provider (Supabase Auth). Optionally a username, display name, and short bio that you choose.
- Your profile picture. If you choose to set a profile picture, we access your photo library only so you can pick that one image, and the image you select is stored by our file-storage provider (Supabase Storage). Setting a profile picture is optional; we don't browse or upload anything else from your library.
- Your rankings and votes. Every list you create, every item you score or rank, every head-to-head comparison you make. These records are tied to your account so the app can show you your own rankings and so the community-aggregate views work. Pairwise comparisons in particular are retained as the dataset that powers our recommendation features. We may also use this data, in aggregated or anonymised form, to produce taste insights that we share with or sell to third parties; aggregated and anonymised data does not identify you individually.
- Your reviews and comments. Free-text reviews you write about items and comments you leave on shared rankings. These are visible to anyone who can see the ranking they relate to.
- Reactions and follows. Emoji reactions you place on shared rankings and the social graph of who you follow.
- Basic device information. Standard application logs include device OS, OS version, and app version, used to diagnose crashes. We do not collect device advertising identifiers.
We do not knowingly collect information from people under the age of 13.
What we do not collect
- We do not run third-party advertising trackers. There is no AdMob, no Facebook Pixel, no Google Analytics.
- We do not collect your location.
- We do not access your camera, microphone, or contacts. We access your photo library only when you tap to choose a profile picture (see above), never in the background.
- Audio previews (e.g. 30-second song previews on music rankings) stream directly from the original source (Spotify, Deezer). We do not store or relay your listening data.
How we use what we collect
- To operate the app: show your account, save your rankings, deliver the social features.
- To compute community aggregates (the “consensus” view on a ranking) which are visible to all signed-in users. Your individual votes are not shown to others; only the aggregated result.
- To build personalised Discover recommendations using your ranking history.
- To produce aggregated taste and trend insights. We may share or sell these insights to third parties. They are derived from many users’ data combined and do not identify you individually.
- To diagnose crashes and errors. Crash logs may include account identifier (not email) but no review text or password material.
Who we share information with
We do not sell information that identifies you personally (your email, your individual account records).
We may share or sell aggregated and anonymised data — taste trends, popularity rankings, and similar insights derived from many users combined — to third parties such as partners, researchers, or commercial customers. This data does not identify you individually.
We use service providers to operate the app: Supabase (database, authentication, file storage) and Expo (build infrastructure, push delivery if enabled). These providers act on our instructions and are bound by their own data-protection terms.
When you share a ranking via a generated link, anyone with that link can view that specific ranking (the items, the order, your username). That is intentional; the share feature is opt-in.
Account deletion and your rights
You can delete your account at any time from the app: open your profile, tap Edit profile, scroll to “Delete account”, and confirm. This removes your profile, rankings, reviews, comments, reactions, follows, and authentication record. Pairwise comparison records you contributed are also deleted; the community-aggregate views are recomputed without them.
Aggregated or anonymised insights we have already produced do not identify you and are not deleted, because they are no longer personal data once aggregated.
If you cannot reach the in-app flow, email [email protected] from the address tied to your account and we will delete it manually within 30 days.
You may also request a copy of the data we hold about you by emailing the same address.
Data retention
We retain your data while your account is active and for up to 30 days after deletion to allow recovery in case of accidental deletion. After that the data is permanently removed.
Backups are encrypted and retained for up to 90 days for disaster recovery, after which they are overwritten.
International transfers
The app’s infrastructure is hosted by Supabase in Frankfurt, Germany (eu-central-1). If you are accessing the app from outside the European Union, your data is transferred to and processed in that region. Where required, we rely on Standard Contractual Clauses as the basis for that transfer.
Changes to this policy
We may update this policy from time to time. When we do, we will update the “Last updated” date at the top. If the changes are material we will notify you in the app on next launch.
Contact
[email protected]