Privacy Policy
Last updated: 15 May 2026
Who we are
Pivka (the “app”) is operated by the team behind pivka.app. This policy explains what data we collect, why, and what you can do about it.
What we collect
- Account: email, username, display name, password (stored hashed by our auth provider).
- Profile: optional avatar photo, optional body stats (weight, height, sex) used only to estimate your BAC for your own activities.
- Activity content: photos, captions, titles, voice notes, drink logs, timestamps, optional venue label, BAC estimates.
- Social: friends list, tags, likes, comments, blocks, reports.
- Device: push notification token, app version, OS.
- Invite codes you redeem or share.
How we use it
To operate the app: show your feed, run the leaderboard, deliver notifications, calculate your BAC estimate, and let friends interact with your activities. We do not sell your data, and we do not use it for advertising.
What is visible to other users
- Your username, display name, avatar, posted activities (photo, title, caption, drink summary, BAC estimate, voice note), and likes / comments are visible to accepted friends and to users you tag.
- Your email, push token, body stats, and blocks / reports are private to you. Other users never see them.
BAC estimate
Body stats stay on the server attached only to your account. The BAC value shown on each activity is a rough estimate computed from your drinks and stats. It is not medical advice and must not be used to decide whether you can drive or operate machinery.
Where data is stored
Data is hosted on Supabase infrastructure (EU region by default). Photos and voice notes are stored in Supabase Storage. Push tokens are delivered through Apple Push Notification service and Google Firebase Cloud Messaging when you receive notifications.
Third-party processors
- Supabase — database, authentication, file storage (EU region).
- Apple Push Notification service / Google FCM — push delivery only.
- Expo — over-the-air app updates.
How long we keep it
Until you delete your account. Deleting your account removes your profile, activities, drinks, photos, voice notes, comments, likes, friendships, body stats, blocks, and reports. Some logs may be retained for up to 30 days for security and abuse-prevention purposes.
Your rights
Under GDPR you can request access to, correction of, or deletion of your data, and you can ask us to export it. You can delete your account in-app (how to delete your account). For anything else, write to [email protected].
Children
Pivka is for adults of legal drinking age in their country. We do not knowingly collect data from anyone below that age. If you believe a minor has created an account, contact [email protected] and we will remove the account.
Changes
We may update this policy. We will note the change date at the top and notify active users in-app when changes are material.