Privacy Policy

We collect only what is needed to run the App:

• Account data — your email address and password. Passwords are stored securely (hashed) by our authentication provider; we never see them.
• Profile — username, display name, home city, tastes, dietary preferences, and an optional profile photo.
• Content you create — trips, saved spots, favorites, reviews, community posts, comments, group messages and photos you upload.
• Location — your approximate or precise location, only when you use features that need it (finding nearby venues, travel times). You can deny or revoke this at any time in your device settings; we do not track location in the background.
• Usage & device data — basic usage events (e.g. number of searches / AI requests) to enforce free-plan limits and prevent abuse, and a push notification token if you enable notifications.
• Subscription data — if you subscribe, payments are handled by Apple. We and our billing provider (RevenueCat) receive your subscription status (active / expired). We never receive your card details.

• Create and manage your account.
• Provide core features (discovery, trips, community, AI suggestions, groups, notifications).
• Personalize venue recommendations using your tastes, diet, city and, optionally, location.
• Enforce plan limits and prevent fraud or abuse.
• Process and restore subscriptions.
• Respond to support requests.

We do not sell your personal data.

We share the minimum necessary data with trusted providers, each with its own privacy policy:

• Supabase — database, authentication and file storage.
• Google Places / Maps — venue search, details and travel times (your search queries are sent to Google).
• Google Gemini — generates AI venue suggestions and itineraries (your prompt text is sent to Google to produce a response).
• RevenueCat & Apple — subscription processing.
• Expo — delivery of push notifications.

AI suggestions are generated automatically and may be inaccurate or incomplete. We send your message/prompt text to our AI provider to produce a response; we do not use your private content to train third-party models.

We keep your data while your account is active. When you delete your account (Settings → Delete account, or by contacting us), your account and associated personal data are permanently deleted, except data we must keep for legal, accounting or fraud-prevention reasons.

As you are served from the EU, under the GDPR you have the right to access, correct, export or delete your data, and to object to certain processing. To exercise these rights, contact us at contact@mkdynamics.be. You can also delete your account directly in the App (Settings → Delete account). You may lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).

You can permanently delete your account at any time from Settings → Delete account. This removes your profile, content and personal data.

Bingo is not intended for children under 13 (or the minimum age in your country). We do not knowingly collect data from children.

We use industry-standard measures (encryption in transit, access controls, row-level security) to protect your data. No method is 100% secure, but we work to keep your information safe.

Your data may be processed on servers located outside your country (e.g. by our providers). We rely on appropriate safeguards where required.

We may update this policy. We will post the new version with an updated "Last updated" date, and notify you in-app for material changes.

Questions? Email contact@mkdynamics.be.