Privacy Policy

barrio.social is an invite-only community app. We collect only what we need to make it work, and we never sell your data to anyone.

1. Who we are

barrio.social is operated as an independent app. If you have any questions about this policy, contact us at hello@barrio.social.

2. What we collect

When you use barrio.social, we collect the following:

Email address — used to sign you in via magic link. We do not send marketing emails.
Profile photo — the picture you upload during onboarding. Stored securely and displayed only to other users in your network.
Handle and 5 words — your public identity in the app.
Connection data — who you are connected to and the stories you write about how you met. Stories are only visible to the two people in the connection.
Events — events you create or RSVP to.
Invite codes — codes you generate and send to others.
Push notification token — if you grant permission, your device token is stored to send you notifications about connection requests, acceptances, and events.

We do not collect your location, contacts, browsing history, or any data beyond what is listed above.

3. How we use your data

To provide and operate the app
To connect you with other users in your barrio
To send push notifications (only if you grant permission)
To enforce community safety (block and report features)

We do not use your data for advertising, profiling, or any purpose other than operating the app.

4. Who we share data with

We use the following third-party services to run barrio.social:

Supabase (supabase.com) — our database, authentication, and file storage provider. Your data is stored on Supabase servers. See their privacy policy.
Expo (expo.dev) — our mobile app infrastructure and push notification delivery service. See their privacy policy.

We do not sell, rent, or share your personal data with any other third parties.

5. Data storage and security

All data is stored on Supabase infrastructure with row-level security enabled. This means your data is only accessible to you and the people you choose to connect with. Profile photos are stored in a secured storage bucket.

We use magic link authentication — we never store your password because we never ask for one.

6. Your rights

You have the right to:

Access your data — everything you've added is visible in the app.
Correct your data — edit your handle, words, and photo in the Profile screen at any time.
Delete your data — go to Profile → "Delete account." This permanently removes your profile, connections, events, and all associated data. It cannot be undone.
Withdraw consent — you can revoke push notification permission in your device settings at any time.

If you are in the European Union, you also have rights under the GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority. Contact us at hello@barrio.social for any data requests.

7. Data retention

We keep your data for as long as your account is active. When you delete your account, all your data is permanently deleted from our systems within 30 days. Backup copies may persist for up to 30 days before being purged.

8. Children's privacy

barrio.social is not intended for anyone under the age of 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, contact us at hello@barrio.social.

9. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date at the top. Continued use of the app after changes constitutes acceptance of the new policy.

10. Contact

Questions, requests, or concerns about your privacy: hello@barrio.social