Privacy Policy

Last Updated: August 8, 2026

1. Introduction

Welcome to Entrepath. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

2.1 Account Information (Required)

• Email Address: Used to sign you in and to identify your account. You either type it and receive a six-digit code, or Sign in with Apple releases it to us.
• Name: The display name shown on the updates you post, so other members of your organisation know who posted what.
• User ID: An identifier generated by InstantDB when your account is created, used to associate your data with your account.
• Authentication Tokens: Used to keep you signed in securely.

2.2 Content You Post

• Photo Updates: The photograph you take or pick, and the caption you write with it. Both are visible to the other members of your organisation.
• Profile Picture: An optional photo of you, shown alongside your name.
• Organisation Membership: Which organisation you belong to, and which group inside it, if your administrator assigned you one.

2.3 Event Check-Ins

• Attendance: When you scan an event's QR code, we record that you attended that event, with your name and the time. Your organisation's administrators can see it.

2.4 Reports and Blocks

• Reports: If you report a photo, we record which photo, why, and that you were the one who reported it. Your organisation's administrators see the report so they can act on it.
• Blocks: If you block a member, we record that privately. The member you blocked is never told, and no administrator sees it.

2.5 What We Do Not Collect

The app contains no analytics SDK, no crash-reporting SDK and no advertising SDK. We do not collect your location, your contacts, your browsing history, usage statistics, device advertising identifiers, or any payment information.

3. How We Use Your Information

• Authenticate you and keep you signed in
• Show your photo updates to the other members of your organisation, and theirs to you
• Record your attendance when you scan an event QR code
• Let your organisation's administrators review reported content and act on it
• Hide content from members you have blocked
• Fix technical problems with the app

We do not use your information for advertising, profiling, or automated decision-making, and we do not train machine-learning models on your content.

4. Data Sharing and Third Parties

4.1 InstantDB

Entrepath runs on InstantDB, which provides our authentication, database and file storage. Everything described in section 2 is stored there on our behalf. InstantDB processes this data only to provide that service to us.

InstantDB's Privacy Policy: https://www.instantdb.com/docs/privacy

4.2 Sign in with Apple

If you choose Sign in with Apple, Apple confirms your identity to us and passes on your name and an email address — which may be a private relay address that forwards to you without revealing your real one. We receive nothing else from Apple.

Apple's Privacy Policy: https://www.apple.com/legal/privacy/

4.3 Who Can See Your Content

Your photo updates, captions, name and profile picture are visible to the other members of your organisation, and to that organisation's administrators. They are not public: someone who is not a member of your organisation cannot see them. Do not post sensitive personal information.

4.4 No Data Selling

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Your Privacy Controls

5.1 Essential Cookies and Data

Some data collection is essential for the app to function and cannot be disabled:

• Authentication and session management
• Core database operations
• Security and fraud prevention
• Error logging for app stability

5.2 Tracking

Entrepath does not track you across apps or websites owned by other companies.

5.3 Profile Visibility

You control what profile information you share. Only your name is visible to other users when you interact publicly (posting ideas, applying to startups).

6. Data Retention

6.1 Active Accounts

We retain your data for as long as your account is active and as necessary to provide you services.

6.2 Deleted Accounts

When you delete your account:

• Your personal information is immediately removed
• Your user-generated content is deleted
• Your uploaded files are permanently deleted from storage
• Publicly posted content may remain visible to maintain thread integrity but will be anonymized (e.g., "Deleted User")

6.3 Inactive Accounts

Accounts inactive for more than 3 years may be deleted after email notification.

7. Your Data Rights

7.1 Access and Portability

You have the right to:

• Access all data we hold about you
• Request a copy of your data in a portable format
• View and edit your profile information in Settings

7.2 Correction

You can update your profile information at any time in the Settings screen.

7.3 Deletion

You have the right to delete your account and all associated data at any time:

• Go to Settings > Account
• Select "Delete Account"
• Confirm deletion (this action is permanent and cannot be undone)

7.4 Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with your local data protection authority.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• All data transmission is encrypted using HTTPS/TLS
• Authentication is handled by InstantDB using industry-standard protocols; the app never stores a password, because it has none
• Access to user data is restricted to authorized systems only
• Regular security audits and updates
• Secure cloud infrastructure provided by Google Cloud Platform

Note: No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Entrepath is not intended for use by individuals under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States, where InstantDB's servers are located. These countries may have data protection laws different from your country. By using Entrepath, you consent to such transfers.

11. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights:

• Right to Know: Request disclosure of personal information collected
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us using the information below.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have specific rights:

• Right to Access: Obtain confirmation and access to your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for optional data collection

Our legal basis for processing your data:

• Contract Performance: Essential data needed to provide services
• Legitimate Interest: Keeping the app secure, and reviewing reported content so members are not exposed to abuse

13. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting a notification in the app
• Sending an email to your registered email address for material changes

Your continued use of the app after changes constitutes acceptance of the updated policy.

14. Contact Us

15. App Store Compliance

For the most current privacy information and controls, please visit Settings > Privacy within the app.