Ruiners — Privacy Policy
Ruiners (“Ruiners,” “we,” “us”) is operated by Invisible LLC. This Privacy Policy explains what information the Ruiners mobile and web app collects, how we use it, and the choices you have. By using Ruiners you agree to this policy.
- We collect what’s needed to run a collaborative maps app: your account details, the maps and places you create, your device location (to show you on the map and find nearby places), and product-usage analytics.
- Your email address is never shown to other users. Only you see it.
- Content you add to a map is visible to the members of that map — and, if the map’s owner marks it public, to anyone signed in who has its link.
- We don’t sell your personal information, and we don’t use it to track you across other companies’ apps or websites.
Information we collect
1. Account information
When you create an account we collect your email address and a password (managed by Amazon Cognito; we never store your raw password). You also choose a display name and may add a profile photo and, in the future, a short bio. If you sign in with Google or Apple, we receive a basic identifier and email from that provider to create or link your account.
If you enable two-factor authentication, we process either a phone number (for SMS codes) or an authenticator-app secret (TOTP). Phone numbers are also collected if you choose to invite someone to a map by text.
2. Content you create
Maps, pinned places (names, categories, icons, and map coordinates), your written descriptions, comments, and replies, and any photos or videos you attach. This content is stored so it can be shared with the members of the maps you choose.
3. Location information
With your permission, we use your device’s precise and/or approximate location to center the map on where you are, power the “my location” button, sort places by what’s nearest, and search for nearby places. You can decline or revoke this permission in your device settings; the app still works, with reduced location convenience. We do not build or sell a history of your movements.
4. Usage and device information (analytics)
We use PostHog (a product-analytics service) to understand how the app is used — for example which screens are viewed and which actions are taken — along with basic device and app information (device type, operating system, app version) and an analytics identifier. This helps us fix problems and decide what to build. Analytics is on by default and you can turn it off in the app’s settings at any time.
5. Notifications
If you enable push notifications, we store a device push token so we can deliver alerts about activity on your maps. We use your email address to send account emails (sign-up confirmation, password reset) and, if you opt in, map-activity notifications.
How we use information
- Provide and operate the app: authentication, creating and sharing maps, showing places on the map, and delivering directions via Google Maps.
- Enable collaboration: showing your content and display name to the members of maps you share, at the role you assign them.
- Send account and (optional) activity notifications.
- Keep accounts secure (two-factor authentication, session management, abuse prevention).
- Improve the product through aggregate, opt-out-able analytics.
How information is shared
We share personal information only as described here. We do not sell it.
- With other users, by your choice. Content you add to a map — and your display name and profile photo — is visible to the members of that map. Your email address is not. If a map’s owner or an admin marks a map public, that map’s places and comments (and the display names attached to them) become readable by any signed-in user who has the link, until the map is made private again.
- Service providers who run the app on our behalf:
- Amazon Web Services (AWS) — hosting, authentication (Cognito), database (DynamoDB), media storage (S3), and email/SMS delivery (SES/SNS).
- Google Maps Platform — maps, place search, and directions. Your use of the map and searches are subject to Google’s privacy policy.
- Google and Apple — if you use their sign-in.
- PostHog — product analytics.
- Expo — push-notification delivery.
- Legal and safety. We may disclose information if required by law or to protect the rights, safety, and security of our users or the service.
- Business transfers. If the app or company is acquired, information may transfer as part of that transaction.
Data retention and deletion
We keep your information for as long as your account is active. You can delete your account and associated personal data at any time from within the app (Profile → Delete account), or by contacting us at privacy@ruiners.org. Some information may be retained as required for legal, security, or backup purposes, and content you added to maps shared with others may persist in those shared maps unless removed.
Your choices and rights
- Analytics: opt out any time in the app’s settings.
- Location, notifications, camera, photos, microphone: control these permissions in your device settings.
- Notification channels and per-map muting: manage in the app.
- Access, correction, deletion: contact us at privacy@ruiners.org.
- Depending on where you live (e.g. the EU/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights to access, correct, delete, or port your data, and to object to certain processing. We honor these requests as required by law and do not discriminate against you for exercising them.
Security
We use industry-standard measures — encryption in transit, managed authentication with optional two-factor, and per-record access controls — to protect your information. No system is perfectly secure, but we work to protect your data and limit access to it.
Children’s privacy
Ruiners is not directed to children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
International users
We operate the service in the United States (AWS, US East region). If you use Ruiners from outside the U.S., you consent to processing your information in the U.S. and other countries where our service providers operate.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by a new effective date and, where appropriate, in-app notice. Continued use after an update means you accept the revised policy.