Privacy during testing.

Potch Party Planner is operated by Bernard Judels, an individual trading as Bermonkel Development, in South Africa and is intended for adults aged 18 and over. Contact bermonkel.development@gmail.com with privacy questions, correction requests or deletion requests.

Accounts and plans

Supabase provides sign-in and database services. PPP uses your email and authentication identifier to manage your account, and saves your party alias, selected avatar, personal venue plans and arrival times. The app also stores settings and sign-in session information on your device so you can stay signed in.

Map totals and “probably there” counts are derived from planned visits and times. They are estimates, not live location tracking or confirmed attendance. They do not display an individual planner’s identity.

Why we process information

We process account information to provide and secure sign-in; profile and plan information to deliver the features you choose; friend information to manage connections and blocks; and support correspondence to answer enquiries and handle requests. Email and sign-in details are needed for account access. Optional camera access is needed only for scanning QR codes; denying it does not prevent other app use.

Friends and camera access

The updated test build includes friend QR invitations. The scanner uses camera access when you open it; PPP does not save or upload camera images. The server processes a random invitation token, its owner, expiry, friend connections and blocks. Invitation tokens expire after ten minutes and are consumed when accepted. Expiry prevents use but does not itself delete the stored code row; it is replaced by a new code or removed when the account is deleted. A valid scan previews the inviter’s alias and avatar, and the scanner confirms before connecting. Friends can see each other’s alias and avatar, but friendship does not grant access to private night plans. A QR can be photographed or forwarded; it does not prove physical proximity. Blocking removes the friendship and prevents a new connection while the block remains, without automatically removing either person from shared groups. End-to-end phone verification of this feature is still pending.

Authentication emails

Supabase uses Resend to deliver account confirmation and recovery emails. This involves your email address, message contents and delivery-related information. These are account-service messages. Resend publishes a 30-day email/log retention period for its Free, Pro and Scale plans; the PPP account plan and any overrides still need to be verified. This is separate from support emails retained in our inbox. See Resend’s security and retention information.

Maps and external apps

The app fetches map tiles from OpenStreetMap’s servers. Such requests expose network information such as your IP address and the map area requested. Transport and direction buttons can open external services such as Uber, Bolt and map applications, which have their own privacy practices.

Ads and purchases

The test app includes Google Mobile Ads and consent tooling. Google may process IP addresses (including to estimate general location), device/account identifiers, ad and app interactions and diagnostics for advertising, measurement, fraud prevention and related purposes described in its disclosures. See Google Mobile Ads data disclosures and Google’s privacy policy. Test builds use test ad units. The app provides ad privacy choices where available through Google’s consent system.

The optional Supporter purchase is not yet enabled in the default test build. When enabled, Google Play will process payment and PPP will verify purchase information to grant benefits. The server implementation stores purchase-token hashes and account-linked entitlements; full card details are not needed by PPP.

This website and support email

Our website code does not set cookies or include advertising, analytics scripts, account forms or camera access. The invitation page processes a token from the link fragment in your browser to open PPP; our page code does not send it to a server or save it. Hosting/security services may process network information separately. Cloudflare provides hosting and processes network requests under its service practices. If you email support, your email address and message are processed through our email provider so we can respond. Do not include passwords or sign-in codes.

Deletion and retention

You can use in-app account deletion or request deletion by email without the app. Deletion removes the active account and associated records described on that page, including shared nights you created. Provider backups, security logs and records independently held by Google may have separate retention; those settings are still under review. Support correspondence is currently retained in the support inbox without an established automatic deletion schedule. A fixed post-resolution retention period has not yet been adopted; this remains a release-policy decision. Personal plans and account-linked data remain in the active database until replaced, removed through supported features or deleted with the account. The current backend does not establish a verified universal timed cleanup of old plans. Friendships remain until removal, blocking or account deletion; blocks remain until unblocked or an associated account is deleted. Authentication audit logs may remain separately from the deleted account. Exact log and backup retention settings still require verification.

Providers and international processing

PPP uses Supabase for authentication and storage of application records, Resend for account emails, Cloudflare for website hosting, Google services for support email, advertising and Play distribution/purchases, and OpenStreetMap for map tiles. These providers may process information outside South Africa. The project hosting region, applicable processor arrangements and safeguards are still being verified before public release. No claim is made that all data stays in South Africa. See Supabase, Resend, Cloudflare and OpenStreetMap Foundation privacy information.

Your choices and requests

You may contact us to request access to or correction of personal information, request deletion, or object to processing where applicable under POPIA. We may need to verify ownership before handling a request. You can edit your alias/avatar in the app, remove friends, manage blocks and use available ad privacy choices. You can withdraw camera permission in device settings. You may also raise a complaint with South Africa’s Information Regulator.

Adults and security

PPP is intended for people aged 18 or older. The present build does not verify age or student status using identity documents. If you believe a child has supplied information, contact us so we can investigate. We use authentication and database access controls to restrict access, but cannot guarantee absolute security.

Changes and questions

We will update this notice as features and provider settings are confirmed. Contact bermonkel.development@gmail.com for questions about your information.