PopOut

PopOut Privacy Policy

Last updated: October 7, 2026

PopOut ("we," "us") is a social venue-discovery app: you swipe to vote on where to go out, see live leaderboards, and connect with friends. This policy explains what we collect, why, and your choices. By using PopOut you agree to this policy.

Information we collect

  • Account & profile: your sign-in identifier, username, display name, gender, and date of birth (used to confirm you are 18+ and to power age/gender leaderboards), and an optional profile photo and university.
  • Location: your approximate device location, used to build the venue deck for your area. We do not continuously track you in the background.
  • Safety and venue content: accounts you block, reports you file and their reason or details, and events or venue-card content you submit as a venue partner. We also keep records of event operations to handle retries and prevent deleted events from being recreated.
  • Activity: your swipes/votes, saved venues ("Pop-Out List"), streaks, and friend connections.
  • College verification: the .edu address you submit is used to deliver a verification email. Verification codes and address claims are stored as hashes, together with your verified college. A hash is still an identifier used to prevent duplicate claims.
  • Premium: subscription status, App Store transaction identifiers, the account that claimed a purchase, and refund or revocation information. We do not receive your payment-card details.
  • Device & diagnostics: app, device, browser, network, crash, and analytics information used for reliability and abuse prevention. Firebase App Check uses attestation signals; the partner website uses Google's reCAPTCHA Enterprise, which can process browser/device signals and network identifiers such as your IP address.

How you sign in

Firebase Authentication handles email/password, Sign in with Apple, and Google Sign-In. Apple or Google may provide an account identifier, name, and email address. Apple's Hide My Email can provide a relay address. We receive provider credentials used to authenticate you, not your Apple or Google password. A provider may also supply profile information to Firebase Authentication; your PopOut profile photo is one you upload.

How we use it

  • Provide and personalize the app — decks, leaderboards (overall, and gender/age/college for eligible users), streaks, and friends.
  • Verify school affiliation for college leaderboards.
  • Maintain safety, prevent abuse, and enforce eligibility (e.g., 18+).
  • Operate premium features and process related entitlements.
  • Diagnose problems and improve the product.

How we share it

We do not sell your personal information. We share data only with service providers that operate the app on our behalf:

  • Google Firebase and Google Cloud — authentication, database, storage, functions, hosting, analytics/crash reporting, and security and operational logs. Google's reCAPTCHA Enterprise supports abuse detection on the partner website.
  • Google Places — venue information used to build decks.
  • Resend — delivering your college-verification email.
  • Apple and Google — authenticate you when you choose their sign-in method. Apple also processes premium purchases and subscription changes.

Leaderboards display aggregated venue vote counts, not your individual votes. Friends can see venues you have swiped on within the app's friend features.

Website analytics

This website uses Firebase Analytics (Google Analytics 4), which loads Google's measurement scripts and uses browser cookies and identifiers. Google receives network information when those requests are made. Our event payloads measure page views, waitlist actions, the city supplied, and the number of venues suggested; they do not include the waitlist email field or the venue names. There is currently no in-page analytics opt-out. You can block analytics in your browser; waitlist submission still works when analytics is blocked.

Deleting your account

Start deletion from Profile → Settings → Delete Account. You will be asked to confirm your identity using your sign-in method. When deletion completes, your account is closed and the app removes the account records listed below. A failure is shown so you can retry. Deletion does not remove every record or historical provider log; the retained categories are explained under "Data retention."

Account deletion removes:

  • Your profile, including your display name, date of birth, gender, university and profile photo.
  • Your username, which is released and may be claimed by someone else.
  • Your friends, friend requests, and your entry in your friends' lists.
  • Your swipes and votes, saved venues ("Pop-Out List"), streaks and session records.
  • Your college verification and the .edu claim associated with it.
  • Your premium entitlement, notification tokens and preferences. Deleting your account or the app does not cancel an App Store subscription; manage cancellation in your Apple Account subscription settings.
  • Your sign-in credentials — the account itself, not just its contents.

If you would rather not use the in-app flow, you can also email support@popouttonight.com from your account address to request help with deletion. We may need to verify your identity before acting on the request.

Data retention

We keep account data while your account is active. Verification codes have a limited validity period; transient records use expiration fields and scheduled database cleanup. Expiration does not mean the stored record is deleted at that exact moment.

Some records remain after account deletion for safety, reliable retries, purchase ownership, and venue operations:

  • Deletion and purchase safeguards. We retain an internal account identifier and deletion timestamp to reject delayed writes. App Store ownership records retain the purchase-to-account link, deletion marker, and refund/order information to prevent a purchase being reassigned or revoked access being restored. These records grant no premium access. They currently have no automatic expiry while replay and ownership protection remain necessary.
  • Other accounts' blocks and moderation reports. Another account's own block can remain after you leave. Reports you filed can remain as moderation evidence with the reporter identifier replaced by a deleted-account marker; reason, context, details, and status can remain. Free text or context may still identify people. These records currently have no automatic expiry. Reports about your deleted account are removed from the active report collection.
  • Venue content and retry records. Venue events and card edits remain after a partner account is deleted, with direct authorship fields removed or replaced. Event-operation results and deletion receipts can retain venue content and associations so a retry cannot repeat an edit or recreate a deleted event. They currently have no automatic expiry; removing them requires a replacement that still rejects unsafe replays.
  • Aggregated venue activity. Nightly venue totals can remain when individual account activity is removed. These are aggregate counts, but small groups or other context can still make activity identifiable; we do not promise that all retained data is anonymous.
  • Logs and provider records. Account deletion does not retrospectively erase operational/audit logs or all analytics and crash records. Our Google Cloud default log bucket currently retains logs for 30 days; the required audit-log bucket retains them for 400 days under Google's fixed retention setting. Other provider data follows its configured retention. Contact us about access or deletion requests for these records.

We retain the minimum protective records until their safety, ownership, or replay purpose can end without weakening those protections. Before removing or reducing those records, we review the remaining replay paths and the effect on other accounts and venues.

Your choices & rights

  • Edit your profile in the app, or manage location permission in your device settings.
  • Delete your account and its data from Profile → Settings → Delete Account — see "Deleting your account" above.
  • Request access to or correction of your data by emailing us.
  • Your free-text "university" field is display-only; your leaderboard college comes solely from .edu verification.

Children

PopOut is not intended for anyone under 18. We require a date of birth at sign-up and block accounts that do not meet the minimum age.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Contact

Questions or requests: support@popouttonight.com.