U.S. State Privacy Notice
Additional disclosures and rights for residents of California and other U.S. states.
This U.S. State Privacy Notice supplements our Privacy Policy and provides additional disclosures for residents of California (under the CCPA, as amended by the CPRA) and of other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others as they take effect). If you are such a resident, you have the rights described below.
1. Categories of personal information we collect
In the past 12 months we have collected the following categories (see our Privacy Policy for details):
| Category (CCPA) | Examples | Collected? |
|---|---|---|
| Identifiers | Email, account ID, device identifier, IP address | Yes |
| Customer records | Display name, profile photo | Yes |
| Protected classifications | Optional self-declared gender; age confirmation (18+) | Yes (optional) |
| Commercial information | Records of features used; purchases (if any are ever offered) | Limited |
| Internet/network activity | App interactions, aggregate usage counts, diagnostics | Yes |
| Geolocation data | Approximate location while discoverable (short-lived, fuzzed, foreground only) | Yes |
| Sensory data | Profile photo you upload (never used for facial recognition) | Yes |
| Professional/education, biometric, etc. | Not collected. We never collect biometric identifiers. | No |
| Inferences | We do not build advertising or personality profiles about you. | No |
2. Sensitive personal information
Some data may be considered "sensitive" under state law — for example precise geolocation and account login credentials. We use sensitive personal information only to provide and secure the Service (for example to compute proximity and keep your account safe), and not to infer characteristics about you. We do not sell or share sensitive personal information. Because we already limit its use to these permitted, service-providing purposes, there is no additional "limit the use of my sensitive information" election needed — but you may still contact us with any request.
3. Sources and purposes
We collect this information from you, from your device as you use the Service, and from login providers you choose (Google/Facebook). We use it for the purposes described in Section 6 of our Privacy Policy: to provide, secure, and improve the Service, to communicate with you, and to comply with law.
4. Disclosures — and no sale or sharing
We disclose personal information only to service providers/processors who help us run the Service under contract, and for the legal and business-transfer reasons described in our Privacy Policy. We do not sell your personal information, and we do not share it for cross-context behavioral advertising (as "sell" and "share" are defined under California and other state laws). We have not sold or shared personal information, including that of any consumer under 16, in the preceding 12 months. See our Do Not Sell or Share page.
5. Your rights
Depending on your state, you may have the right to:
- Know / access the categories and specific pieces of personal information we have collected about you.
- Delete personal information we collected from you.
- Correct inaccurate personal information.
- Opt out of any sale or sharing of personal information, or of targeted advertising (note: we do not do these).
- Limit the use of sensitive personal information (we already limit it as described above).
- Non-discrimination — we will not deny you service, charge a different price, or provide a different quality of service for exercising your rights.
- Where applicable, to appeal a decision on your request, and to opt out of certain profiling.
6. How to exercise your rights
- Many rights can be exercised directly in the app: you can view and edit your profile, and you can delete your account and data yourself from Settings.
- You can also email privacy@connectirl.app with your request. We will verify your identity by confirming control of the email associated with your account (and may ask for additional information to match you to your data). We will respond within the timeframe required by your state's law (generally 45 days, extendable where permitted).
- Authorized agents may submit requests on your behalf with proof of authorization; we may still verify your identity directly.
- Appeals: if we deny your request and your state provides an appeal right, you may appeal by replying to our decision or emailing privacy@connectirl.app with "Appeal" in the subject line.
7. Opt-out preference signals
Where required, we recognize opt-out preference signals such as Global Privacy Control. Since we do not sell or share personal information, such signals do not change what we do, but we honor them as a valid opt-out request.
8. California "Shine the Light"
We do not disclose personal information to third parties for their own direct-marketing purposes, so there is nothing to request under California's "Shine the Light" law. You may still contact us with questions.
9. Retention
We keep personal information only as long as needed for the purposes described in Section 8 of our Privacy Policy, then delete or de-identify it.
10. Contact
For any state-privacy request or question: privacy@connectirl.app or ConnectIRL, United States.