Privacy Policy

DriveDrop

Effective date: January 2, 2026

Last updated: January 2, 2026

DriveDrop ("DriveDrop," "we," "us," "our") provides QR-code profiles and messaging ("Drops") that help people leave quick, lightweight notes after scanning a DriveDrop sticker or link. This Privacy Policy explains what information we collect, how we use it, and your choices.

1) Scope

This Privacy Policy applies to:

  • the DriveDrop website and web app (the "Web Services"), and
  • the DriveDrop mobile app (the "App"), when available,

collectively, the "Services."

2) Information we collect

A. Information you provide

  • Account info: When you create an account (e.g., Sign in with Apple), we may receive identifiers such as your Apple-provided identifier and basic account metadata needed to operate your account.
  • Profile info: Username, avatar/photo (optional), and optional location text you choose to display.
  • Drops you send: If you create an account and leave a Drop, we collect the content of the Drop (including emojis), along with delivery metadata (timestamp, message type, etc.).
  • Reports/flags: If you flag a Drop, we collect the report and related context to review it.

B. Information we collect automatically

  • Scan events (even if the scanner does not create an account): When someone scans a DriveDrop QR code or visits a DriveDrop profile URL, we record an event such as: timestamp, the profile visited, device/browser signals, and referral/URL data.
  • Device and usage data: Approximate device information (browser type, OS, app version), performance logs, and interaction data (e.g., screen viewed, feature usage).
  • IP address and security signals: We may log IP address and related security signals for fraud prevention, abuse investigation, rate limiting, and platform integrity.
  • Approximate location: We may infer approximate location (e.g., city/state level) from IP address for analytics and safety. We do not require precise GPS location to use the Services.

C. Content and engagement metadata

  • Drop metadata: View counts, reactions (e.g., likes/emojis), moderation status, and whether a Drop was predefined vs. custom.
  • Profanity filtering results: If you attempt to submit a custom Drop, we may log whether it was blocked for policy reasons (without needing to store any extra personal info beyond what's required to enforce the rule).

3) How we use information

We use information to:

  • Provide and operate the Services (create accounts, show profiles, deliver Drops, display your Drops inbox, and run core app features).
  • Moderate and enforce safety (detect spam/abuse, process flags, investigate violations, and ban repeat offenders).
  • Improve the Services (analytics, debugging, performance monitoring, feature iteration).
  • Communicate with you (service updates, security notices, and account-related messages).
  • Enable purchases and fulfillment (e.g., ordering DriveDrop stickers, handling payments, shipping, and customer support).
  • Show ads or sponsored experiences (if enabled), and measure basic ad performance.

4) How we share information

We do not sell your personal information. We may share information in these situations:

A. Service providers (processors)

We use third-party vendors to host and operate core infrastructure and features, such as:

  • Cloud hosting, databases, and storage (e.g., Firebase/Google Cloud)
  • Authentication (e.g., Apple Sign In)
  • Payments and commerce (e.g., Stripe and/or Shopify-related services, if used)
  • Notifications (e.g., Apple Push Notification service)
  • Analytics and monitoring (crash/performance and usage analytics)

These providers process information on our behalf under contractual restrictions.

B. Legal, safety, and enforcement

We may disclose information if we believe it is reasonably necessary to:

  • comply with law, regulation, legal process, or government request;
  • protect the safety, rights, and property of users, DriveDrop, or the public;
  • investigate and prevent fraud, abuse, security incidents, or violations of our Terms.

C. Business transfers

If DriveDrop is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.

5) Public profiles and visibility controls

  • A DriveDrop profile page is designed to be publicly accessible to people who scan a QR code or open a DriveDrop profile link.
  • Your profile may show your avatar, username, and optional location (if you choose to display it).
  • Drops are delivered to the recipient's inbox; recipients can view and react. We may display certain aggregated counts to the recipient (e.g., Drops received, views).

6) Data retention

We retain information for as long as needed to:

  • provide the Services,
  • comply with legal obligations,
  • resolve disputes, and
  • enforce our agreements and safety policies.

We may retain certain logs (including IP/security logs) longer where necessary for security and abuse prevention.

7) Your choices and rights

Depending on where you live, you may have rights to:

  • access, correct, or delete certain personal information,
  • object to or restrict certain processing,
  • receive a copy of your information (data portability).

You can also:

  • update your profile (e.g., avatar/username),
  • manage certain settings (e.g., custom Drop settings, notification preferences),
  • report/flag abusive Drops.

To request deletion or access, contact us at: support@drivedrop.me

8) Cookies and similar technologies (Web Services)

We may use cookies/local storage to:

  • keep you signed in,
  • remember preferences,
  • understand usage and improve performance.

You can control cookies via browser settings, but some features may not function properly.

9) Children's privacy

DriveDrop is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children under that age.

10) Security

We use reasonable administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is 100% secure.

11) International use

If you access the Services from outside the United States, your information may be processed in the United States or other locations where our service providers operate.

12) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date and, if changes are material, provide additional notice.

13) Contact us

Questions or requests:

DriveDrop Privacy

Email: support@drivedrop.me