Privacy Policy for Rewind

1. Introduction

Welcome to Rewind! This Privacy Policy explains how Invictus Reserve ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use the Rewind mobile application (the "App").

Rewind is a nostalgic photo-sharing social network where you can capture and share one photo per day with friends, send sticky note messages, and connect with others through a unique, vintage-inspired experience.

By using Rewind, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our App.

2. Information We Collect

2.1 Information You Provide to Us

When you create an account and use Rewind, we collect the following information:

• Email Address - Used for account creation, authentication, and account recovery
• Username - Your unique identifier on Rewind, publicly visible to other users
• Display Name - Optional name shown on your profile
• Bio - Optional text description of yourself
• Profile Picture - Optional photo you upload to represent your account
• Photos - Images you capture and upload through the App
• Captions - Text descriptions you add to your photos
• Comments - Comments you post on other users' photos
• Likes - Your interactions with other users' photos
• Sticky Notes - Personal thoughts and notes you create on your private bulletin board
• Sticky Messages - Direct messages you send to mutual followers
• Notification Preferences - Your choices about which notifications you want to receive

2.2 Information Collected Automatically

When you use Rewind, we automatically collect certain technical information:

• Device Push Notification Token - Required to send you push notifications (via Expo)
• Usage Data - Timestamps of when you post photos, send messages, and interact with content
• Preferred Posting Time - The hour of day you typically post photos (used to schedule smart notifications)
• Daily Post Status - Whether you've posted your daily photo (to enforce our one-photo-per-day limit)
• Message Read Status - Whether you've read sticky messages sent to you

2.3 Information We Do NOT Collect

We want to be clear about what we don't collect:

• Location Data (GPS) - We do not track your physical location
• Phone Number - We do not require or store your phone number
• Contacts - We do not access your device's contact list
• Photo Library - We only access your camera; we do not access existing photos on your device
• Browsing History - We do not track your web browsing
• Analytics or Tracking Data - We do not use third-party analytics or tracking tools

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Provide Core Features

• Create and maintain your account
• Allow you to post and view photos
• Enable social interactions (follows, likes, comments)
• Deliver sticky note messages between users
• Enforce the one-photo-per-day posting limit

3.2 To Send Notifications

We send push notifications when:

• It's time to post your daily Rewind photo (based on your preferred posting time)
• Someone likes your photo
• Someone comments on your photo
• Someone follows you
• You receive a new sticky message
• Reminders to send messages to friends you haven't messaged in a while

You can customize which notifications you receive in the App's notification settings.

3.3 To Improve and Maintain the App

• Ensure technical functionality
• Prevent abuse, spam, and harmful content
• Provide customer support
• Improve user experience

3.4 To Comply with Legal Obligations

• Respond to legal requests from law enforcement
• Enforce our Terms of Service
• Protect the rights and safety of our users

4. How We Share Your Information

4.1 What's Public

The following information is publicly visible to all Rewind users:

• Your username, display name, and bio
• Your profile picture
• Photos you post and their captions
• Comments you make on photos
• Likes you give to photos
• Your list of followers and who you follow

4.2 What's Private

The following information is private and never shared publicly:

• Your email address
• Your password (encrypted and never visible to us)
• Your sticky notes (only visible to you)
• Your sticky messages (only visible to you and the recipient)
• Your push notification token
• Your notification preferences
• Your preferred posting time

4.3 Third-Party Service Providers

We use the following trusted third-party services to operate Rewind:

These service providers are contractually obligated to protect your data and may only use it to provide services to us.

4.4 Legal Requirements

We may disclose your information if required by law, such as:

• In response to a valid subpoena or court order
• To protect our rights, property, or safety
• To prevent illegal activity or violations of our Terms of Service

4.5 What We Do NOT Do

We do not:

• Sell your personal information to third parties
• Share your data with advertisers
• Use your data for marketing purposes unrelated to Rewind
• Share your private messages or sticky notes with anyone

5. Data Security

We take the security of your data seriously and implement the following measures:

• Encrypted Passwords - Your password is encrypted and never stored in plain text
• Secure Connections - All data transmission uses HTTPS encryption
• Row Level Security (RLS) - Database policies ensure you can only access your own data
• Access Controls - Only you can delete your own photos, comments, and sticky notes
• Mutual Follow Protection - You can only send sticky messages to mutual followers
• Regular Security Updates - We keep our systems up to date with security patches

Important: While we implement strong security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

6.1 While Your Account is Active

We retain your information for as long as your account is active and as necessary to provide you with the App's features.

6.2 When You Delete Your Account

If you delete your account, we will:

• Permanently delete your profile information
• Delete all photos you've posted
• Remove all your comments and likes
• Delete your sticky notes and sticky messages
• Remove all follow relationships

Note: Some data may remain in backups for up to 90 days before being permanently deleted.

6.3 When You Delete Individual Content

• Photos: Deleted immediately from our servers
• Comments: Deleted immediately
• Sticky Messages: Deleted for both you and the recipient
• Sticky Notes: Deleted immediately

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access

You can access all your personal information by viewing your profile in the App.

7.2 Update

You can update your username, display name, bio, and profile picture at any time through the App's settings.

7.3 Delete

You can delete:

• Individual photos, comments, or sticky notes at any time
• Your entire account by contacting us at Bstudenc@gmail.com

7.4 Control Notifications

You can customize which push notifications you receive in the App's notification settings.

7.5 Export Your Data

To request a copy of your data, contact us at Bstudenc@gmail.com. We will provide your data in a machine-readable format within 30 days.

8. Children's Privacy (COPPA Compliance)

Rewind is intended for users 13 years of age or older. We do not knowingly collect personal information from children under 13.

If you are under 13, you may not create an account or use Rewind.

If we discover that we have inadvertently collected information from a child under 13, we will delete that information immediately. If you believe we have collected information from a child under 13, please contact us at Bstudenc@gmail.com.

By using Rewind, you confirm that you are at least 13 years old.

9. International Users and Data Transfers

9.1 Data Storage Location

Your data is stored on servers in the United States (via Supabase). By using Rewind, you consent to the transfer of your information to the United States.

9.2 For European Economic Area (EEA) Users (GDPR)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing:

• Contractual Necessity - To provide you with the App's features
• Legitimate Interest - To improve and secure the App
• Consent - For push notifications (you can opt out at any time)

Your GDPR Rights:

• Right to Access - Request a copy of your personal data
• Right to Rectification - Correct inaccurate personal data
• Right to Erasure ("Right to be Forgotten") - Request deletion of your data
• Right to Restrict Processing - Limit how we use your data
• Right to Data Portability - Receive your data in a portable format
• Right to Object - Object to our processing of your data
• Right to Withdraw Consent - Withdraw consent for processing at any time

To Exercise Your GDPR Rights:
Contact us at Bstudenc@gmail.com. We will respond within 30 days.

Supervisory Authority:
You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

10. California Residents (CCPA/CPRA Compliance)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

10.1 Categories of Personal Information We Collect

• Identifiers - Email address, username
• Personal Information - Display name, bio
• Visual Information - Profile picture, photos you post
• User-Generated Content - Comments, captions, sticky notes, sticky messages
• Internet or Network Activity - Usage data, interaction timestamps
• Device Information - Push notification tokens

10.2 How We Use Personal Information

We use your information to:

• Provide the App's features
• Send push notifications
• Improve and secure the App
• Comply with legal obligations

10.3 We Do Not Sell Your Personal Information

We do not sell your personal information to third parties. We have not sold personal information in the past 12 months.

10.4 Your CCPA/CPRA Rights

California residents have the right to:

• Right to Know - Request disclosure of personal information we've collected
• Right to Delete - Request deletion of your personal information
• Right to Correct - Request correction of inaccurate information
• Right to Opt-Out - Opt out of the sale of personal information (N/A - we don't sell data)
• Right to Non-Discrimination - We will not discriminate against you for exercising your rights

To Exercise Your CCPA Rights:
Email us at Bstudenc@gmail.com with "California Privacy Rights" in the subject line. We will respond within 45 days.

Verification:
To protect your privacy, we will verify your identity before fulfilling requests. You may be asked to provide your email address and username.

10.5 California Online Privacy Protection Act (CalOPPA)

We comply with CalOPPA by:

• Making this Privacy Policy easily accessible
• Including a "Do Not Track" disclosure (see below)
• Allowing users to review and update their information

Do Not Track Signals:
Rewind does not track users across third-party websites and therefore does not respond to Do Not Track (DNT) signals.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our data practices
• Legal requirements
• App features

11.1 How We Notify You

When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via push notification or in-app message
• Post the new policy in the App

11.2 Your Acceptance

Continued use of Rewind after changes are posted constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you must stop using the App and delete your account.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

13. Consent

By using Rewind, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and sharing of your information as described herein.