Privacy Policy

Last updated: 29 July 2026

This Privacy Policy explains how the Community OS app ("we", "us", "our") collects, uses, shares, and protects your personal and device data. By using the app, you agree to the practices described below.

1. Data We Collect

Account information: Your name, email address, and password (encrypted) when you register.
Profile information: Address and postcode you voluntarily add to receive location-based community digests.
Location data: Approximate device location used for local content, density classification, and ad targeting — only when you explicitly grant location consent.
Content you create: Posts, comments, events, reports, and business listings you submit.
Device and usage data: IP address, device type, and interaction logs for security and analytics.

2. How We Use Your Data

To create and manage your account and group memberships.
To generate daily community intelligence digests tailored to your postcode.
To show you relevant local businesses, safety alerts, and events.
To process payments for subscriptions and business boosts via Base44 Payments.
To improve our services through aggregated, anonymised analytics.

3. How We Share Your Data

We do not sell your personal data. We share data only with service providers that help us operate the app:

Anthropic (Claude): Receives anonymised location and content context to generate your daily digest. No personal identifiers are sent.
Base44 Payments (Wix): Processes checkout transactions. Card details never touch our servers.
Hosting infrastructure: Encrypted data storage and processing on our backend provider.

Group posts, events, and business listings you create are visible to other members of your community groups.

4. Location Data & Ad Targeting

Real-time GPS location is used for density classification (urban / suburban / rural) and to deliver relevant local business advertising within a geographic radius. This is a sensitive permission and is governed by granular consent:

Location sharing is opt-in and can be revoked at any time.
If revoked, we fall back to the static address on your profile.
Granular consents for location-based ads and automated profiling are managed separately in Settings → Privacy.

5. Marketing Communications

You can opt in to marketing emails and sponsored content within daily digests. Marketing consent is separate from essential processing and can be withdrawn at any time from the Privacy settings page. We never send marketing emails to users who have not opted in.

6. Your Rights & Data Erasure

Under UK GDPR you have the right to:

Access a copy of your personal data.
Rectify inaccurate information.
Request complete erasure of your data ("right to be forgotten").
Withdraw any consent at any time without affecting prior processing.

Use the Erase my data button in Settings → Privacy to trigger permanent deletion of your account and associated records.

7. Data Retention

Daily digests: Automatically deleted 7 days after creation.
Community content: Retained for the lifetime of the group, unless deleted by you or an admin.
Business analytics logs: Retained for 12 months, then aggregated and anonymised.
Consent records: Kept as evidence of your consent choices for the lifetime of your account.

8. Security

We use industry-standard measures to protect your data:

Encryption in transit (TLS) and at rest.
Row-level security so users can only access their own data and data within their groups.
Regular security reviews and least-privilege access controls.

No method of transmission or storage is 100% secure, but we work hard to safeguard your information.

9. Children's Privacy

This app is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it immediately.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be announced in-app and the "Last updated" date above will reflect the revision. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact Base44 support through the in-app Help & Report page.