Privacy Policy

1. Overview

assemble ("we", "us", "our") is committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws in Canada. This policy explains what we collect, why, and how it is used.

2. Information We Collect

• Account information: your name, email address, birth year, and city when you sign up.
• Profile information: photos and bio that you choose to add to your profile.
• Activity data: activities you create or join, including approximate and exact location addresses and coordinates.
• Messages: messages sent between users through the in-app chat.
• Device location: if you allow it, we use your device's location to centre the map view. This is not stored on our servers.

3. How We Use Your Information

• To create and manage your account
• To display activities and connect you with other users
• To show approximate activity locations publicly and share exact locations only with approved participants
• To send transactional emails (e.g. account confirmation, password reset)
• To improve the App and troubleshoot issues

We do not sell your personal information to third parties. We do not use your information for advertising.

4. Location Data

When you create an activity, you provide two types of location:

• Approximate location — visible to all users in the feed and map.
• Exact address — stored securely and only shared with participants you explicitly approve.

Your device's GPS location (used to centre the map) is processed in your browser and is never stored by us.

5. Photos

Photos you upload are stored securely using Supabase Storage. Your profile photo is visible to other users. Additional photos on your profile are also visible to others. We do not use your photos for any purpose other than displaying them within the App.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal information from our systems within a reasonable timeframe, except where retention is required by law.

7. Third-Party Services

We use the following third-party services to operate the App:

• Supabase — database, authentication, and file storage
• OpenStreetMap Nominatim — address search (no personal data is sent)

Each service has its own privacy policy. We encourage you to review them.

8. Your Rights

Under PIPEDA, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Withdraw consent and request deletion of your data

To exercise any of these rights, contact us at the address below.

8a. How to Delete Your Account

You have the right to request deletion of your account and all associated personal data at any time. To do so, email us at assembleapp.support@gmail.com with the subject line "Account Deletion Request" and include the email address associated with your account.

We will process your request within 30 days and confirm once your data has been removed. Note that some information may be retained for a limited period where required by law (e.g. to resolve disputes or comply with legal obligations).

9. Security

We take reasonable technical and organizational measures to protect your personal information. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy in the App. Continued use of the App after changes are posted constitutes your acceptance.

11. Contact

For privacy-related questions or requests, contact us at assembleapp.support@gmail.com.