Join a Story – Privacy Policy
Effective Date: [set before release]

Portfolio Software Limited (“Portfolio Software”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights.

This Privacy Policy applies to the Join a Story mobile applications, website (https://joinastory.com), and related services (the “Service”).

Who We Are

Portfolio Software Limited
Company No. 4461613
Unit 21 Kingspark Business Centre
New Malden, KT3 3ST
United Kingdom

We are the data controller for personal data processed via the Service.

Data We Collect

Account Data

Display name (pseudonymous)

Email address

Login credentials

Profile information you choose to provide (e.g. avatar, optional descriptions)

User Content

Messages you add to bottles

Bottle content you create

Metadata associated with contributions (timestamps, authorship, interactions)

Important: Content you contribute may be visible to other users of the Service.

Location Data

We collect your device location to enable core app functionality (finding and contributing to bottles)

Your precise location is:

Never shared with other users

Never displayed publicly

Instead:

Location is converted into a coarse geographic area (e.g. geohash region)

Any displayed location is randomised within that area

This ensures your exact position cannot be identified.

Usage Data

Bottles found, followed, and interacted with

App interactions and feature usage

Subscription status and limits

Device Data

Device type

Operating system

App version

Log data and crash reports

Billing & Payments

We do not collect or store payment details

Purchases are processed by Apple App Store and Google Play

Subscription status is managed via third-party services (e.g. RevenueCat)

How We Use Data

We use your data to:

Provide and operate the Service

Enable location-based bottle discovery

Display and manage user-generated content

Manage subscriptions and entitlements

Maintain safety, moderation, and abuse prevention

Respond to reports and enforce community rules

Improve and develop features

Communicate essential service updates

We do not use your data for targeted advertising or direct marketing.

Legal Bases for Processing (UK/EU GDPR)

We process personal data under:

Performance of Contract – to provide the Service

Legitimate Interests – to improve, secure, and moderate the Service

Legal Obligation – where required by law

Consent – where explicitly required (e.g. permissions such as location access)

Data Storage & Location

Data is stored using Google Firebase (EU West 2 – London region)

We do not transfer personal data outside the UK/EU unless appropriate safeguards are in place (e.g. Standard Contractual Clauses)

Data Retention

We retain data only as long as necessary:

Active account data: retained while your account is active

Messages and bottle content: retained while associated bottles exist

Expired bottles: retained according to system lifecycle and moderation requirements

Deleted accounts: personal data is deleted or anonymised following account deletion

Where technically required, some data may be retained briefly for:

Abuse prevention

Legal compliance

System integrity

Sharing of Data

We share data only with:

Apple App Store and Google Play for billing

RevenueCat for subscription management

Google Firebase for hosting and infrastructure

We do not:

Sell your data

Share your data with advertisers

Safety, Moderation & Reporting

To maintain a safe and family-friendly environment:

Users can report content or bottles

Reported content may be restricted or removed pending review

We may review content manually or using automated tools

We may take action including:

Content removal

Warnings

Account suspension or permanent bans

Security

We implement appropriate technical and organisational safeguards to protect your data.

However, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

Your Rights (UK & EU GDPR)

You have the right to:

Access your personal data

Correct inaccurate data

Request deletion of your data

Restrict processing

Receive your data in a machine-readable format (portability)

Object to certain processing

You can download your data and delete your account via the in-app Settings.

You may also contact:
support@joinastory.com

You have the right to complain to the UK Information Commissioner’s Office (ICO).

Children

The Service is intended for users aged 18 and over.
We do not knowingly collect data from children.

External Links

The Service may contain links or user-generated content that references external sites.
We are not responsible for third-party privacy practices.

Changes to this Policy

We may update this Privacy Policy from time to time.

Material changes will be notified in-app or by email.

Continued use of the Service after updates means acceptance of the revised Policy.

Contact

Portfolio Software Limited
Unit 21 Kingspark Business Centre
New Malden, KT3 3ST
United Kingdom

Email: support@joinastory.com
Website: https://joinastory.com