Privacy Policy

1. Introduction

Welcome to Bloody Likely ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our true crime discussion platform, including our website (bloodylike.ly) and mobile applications for iOS and Android (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information when you use our Service:

• Account Information: Email address, username, full name, and profile picture when you create an account or sign in through OAuth providers (Google, Discord)
• Profile Information: Bio, avatar URL, and other profile details you choose to provide
• Authentication Data: Login credentials, authentication tokens, and session information
• User Content: Comments, posts, case discussions, and other content you submit to the platform
• Media Files: Images you upload in comments or discussions
• Activity Data: Your interactions with cases, bookmarks, watchlist items, and voting history

2.2 Automatically Collected Information

We automatically collect certain information when you use our Service:

• Device Information: Device type, operating system, browser type, and device identifiers
• Usage Data: Pages visited, features used, time spent on the Service, and navigation patterns
• Log Data: IP address, access times, pages viewed, and error logs
• Location Data: General location information (city/country level) based on IP address
• Analytics Data: Performance metrics, user behavior patterns, service usage statistics, and error tracking information

2.3 Third-Party Information

When you sign in through OAuth providers, we may receive additional information from these services based on your privacy settings and the permissions you grant.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our true crime discussion platform
• User Authentication: To verify your identity and manage your account
• Content Management: To display your comments, posts, and other user-generated content
• Personalization: To customize your experience and show relevant content
• Communication: To send you important updates, security alerts, and support messages
• Analytics: To analyze usage patterns and improve our Service
• Error Monitoring: To identify and fix technical issues and improve app stability
• Security: To protect against fraud, abuse, and security threats
• Legal Compliance: To comply with applicable laws and regulations

4. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

4.1 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Service:

• Supabase: For authentication, database storage, and backend services
• Vercel: For web hosting, analytics, and performance monitoring
• Google Analytics: For website usage analytics (with user consent)
• Sentry: For error monitoring and application performance tracking
• Amplitude: For mobile app usage analytics and user behavior tracking
• Expo: For mobile app development and distribution
• OAuth Providers: Google and Discord for authentication
• Image Storage Services: For storing and serving user-uploaded images

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as subpoenas or court orders.

4.3 Safety and Security

We may share information to protect the safety and security of our users, prevent fraud, or address technical issues.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

5. Data Storage and Security

5.1 Data Storage

Your information is stored on secure servers operated by our service providers. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

5.2 Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy. You may request deletion of your account and associated data at any time.

5.3 International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws.

6. Your Rights and Choices

6.1 Access and Control

You have the right to:

• Access and review your personal information
• Update or correct your account information
• Delete your account and associated data
• Export your data in a portable format
• Opt out of certain communications

6.2 Account Settings

You can manage your privacy preferences through your account settings on our website or mobile app.

6.3 Cookies and Tracking

We use cookies and similar technologies to enhance your experience. Our consent management system appears for users in privacy-regulated regions (EU, UK, California, etc.). We provide granular consent options for different types of analytics and tracking services.

7. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

8. Third-Party Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

9. Analytics and Tracking

We use analytics services to understand how users interact with our Service and improve our platform. All analytics services are subject to user consent where required by law:

• Google Analytics: For website usage analytics, user behavior tracking, and performance insights (requires user consent in privacy-regulated regions)
• Vercel Analytics: For website performance monitoring and usage analytics (requires user consent in privacy-regulated regions)
• Vercel Speed Insights: For website performance optimization and monitoring (requires user consent in privacy-regulated regions)
• Amplitude: For mobile app usage analytics, user behavior tracking, and feature usage analysis
• Sentry: For error monitoring, crash reporting, and application performance tracking

These services may collect information about your device, usage patterns, interactions with our Service, and technical performance data. For users in privacy-regulated regions, we provide consent management tools to control which analytics services can collect your data.

10. Mobile App Specific Information

Our mobile applications may request additional permissions:

• Camera and Photo Library: To allow you to take and upload photos in comments
• Network Access: To connect to our servers and load content
• Storage: To cache content and improve app performance

You can manage these permissions through your device settings.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• Email: privacy@bloodylike.ly
• Website: https://www.bloodylike.ly

13. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about what personal information we collect, how we use it, and who we share it with
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt out of the sale of personal information (note: we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
• Right to Correct: You can request correction of inaccurate personal information

To exercise these rights, contact us at privacy@bloodylike.ly with your request.

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can request copies of your personal data
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data
• Right to Restrict Processing: You can request limitation of how we process your data
• Right to Data Portability: You can request transfer of your data to another service
• Right to Object: You can object to processing of your personal data
• Rights Related to Automated Decision Making: You have rights regarding automated profiling

To exercise these rights, contact us at privacy@bloodylike.ly. You also have the right to lodge a complaint with your local data protection authority.

15. Consent Management

We use a consent management system (Klaro) to ensure compliance with privacy regulations. This system:

• Automatically detects if you are in a privacy-regulated region
• Presents consent options only when required by law
• Allows granular control over different types of data collection
• Remembers your preferences across visits

16. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the jurisdiction in which we operate, without regard to its conflict of law provisions.