← pocketplur

Privacy Policy

Effective Date: July 11, 2026

This Privacy Policy describes how SJD Labs, LLC (“Pocketplur,” “we,” or “us”) collects, uses, and shares personal information when you use the Pocketplur application (the “App”).

Personal information we collect

  • Account information. When you sign up, we collect your phone number or email address, the password you choose, and the display name you provide during onboarding.
  • Festival activity. The sets you mark as must-see, your itinerary, decisions you make about overlapping sets, set reviews, and similar plan data.
  • Group activity. Groups you join or create, the polls you participate in, meetups you schedule, the custom display name you choose within a group, and presence (whether the App is open while you are in a group).
  • Location.While the App is open on the festival map screen, the App may access your device’s approximate or precise location to display your position on the map and share it with the members of groups you have joined. The App does not access your location when it is in the background.
  • Nearby friends (Rally).To help you find friends you have paired with when you are together in a crowd, the App uses Bluetooth — and Ultra-Wideband on supported devices — to detect those friends’ devices nearby and estimate their distance and direction. Pairing exchanges a Rally identity token between your two devices. The list of friends you have paired with is stored on our servers so the connection persists across festivals; the proximity signals themselves are processed on your device and are not stored on our servers. This works only with people you have explicitly paired with, and the App may use Bluetooth while it is in the background to keep an active Rally session connected when your screen is off.
  • Direct messages. Rally lets you send text and photos directly to a paired friend. These messages travel device-to-device over Bluetooth; they are not routed through or stored on our servers, and are kept only on the sending and receiving devices.
  • Diagnostics and analytics.We collect app-usage events and crash and error reports, associated with your account, to understand how features are used and to diagnose problems. See “Service providers” below for the vendors that process this data.
  • Embedded Spotify content.Artist detail screens render Spotify’s public embed iframe. Pocketplur does not link to your personal Spotify account. Spotify’s own privacy practices govern any data the embed loads when you interact with it.
  • Push notification tokens. If you grant the App permission to send push notifications, we receive an Apple-issued or Google-issued device push token. We use this token only to deliver notifications related to your account and your festival activity (for example, set-time reminders, meetup updates, and group activity). You can revoke notification permission at any time in your device settings.
  • Subscriptions and purchases. If you buy pocketplur Pro or a Festival Pass, the purchase itself is handled by the Apple App Store, and we use our subscription provider, RevenueCat, to process purchase and subscription-status data (which products you own and when they expire) so we can deliver your entitlements and help prevent fraud. We do not receive or store your payment-card number.
  • AI features.The optional AI planner and “Ask AI” Discover chat send your request — your typed question plus the relevant festival lineup or your itinerary — to Google’s Gemini service, which runs on our servers (not on your device) to generate a short summary or artist suggestions. These queries are scoped to festival planning, are private to your account, and are never shown to other users.

How we use personal information

We use the information described above to (a) operate the App and your account, (b) deliver the core festival-planning features, (c) coordinate group features — shared schedules, meetups, presence — among the members of groups you choose to join, and (d) comply with our legal obligations.

How we share personal information

  • Within your groups.Your display name, the sets you have added, your group activity, your in-app presence, and — while you have the festival map open — your approximate location are shared with the other members of any group you join. This is core to the App’s social features. You can leave a group at any time from the group screen, and you can revoke location access in your device settings.
  • Service providers. We share information with vendors that process information on our behalf: Supabase (database, authentication, realtime channels), our SMS provider for phone verification, Vercel (hosting), PostHog (product analytics), Sentry (crash and error reporting), RevenueCat (subscription and purchase management), and Google (generative-AI processing for the optional AI planner and Discover features).
  • Legal. We may disclose information if required by law, subpoena, or to protect the safety or rights of users.
  • No sale of personal information. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Your choices

  • Account deletion. You can delete your account from Settings inside the App. Deletion is permanent and removes your profile, picks, group memberships, and other account-linked content. Some information may remain in backups for a limited retention period.
  • Location.You can revoke the App’s location permission in your device settings, or turn off location sharing for a specific group from that group’s controls. The map will continue to work without showing your position.
  • Push notifications.You can revoke the App’s notification permission in your device settings at any time. Doing so will not affect any other App functionality.
  • Nearby friends & messaging.Rally only connects you with friends you have explicitly paired with. You can stop using it at any time, and you can revoke the App’s Bluetooth permission in your device settings — the rest of the App continues to work without it.

California privacy rights

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) gives you the right to:

  • Know what personal information we have collected about you in the past twelve months.
  • Request deletion of your personal information.
  • Request correction of inaccurate personal information.
  • Opt out of the sale or sharing of personal information — we do not sell or share personal information for cross-context behavioral advertising.
  • Receive non-discriminatory treatment for exercising any of these rights.

To exercise these rights, email developer@sjdlabs.com from the address associated with your account, or use the in-app account deletion flow. We may need to verify your identity before acting on your request.

Children

Pocketplur is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, email developer@sjdlabs.com and we will delete it.

Data security

We use HTTPS for all communications. Account passwords are stored as salted hashes by our authentication provider. No security measure is perfect, and we cannot guarantee that personal information will never be subject to unauthorized access.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the App after a change constitutes acceptance of the revised policy.

Contact

SJD Labs, LLC
developer@sjdlabs.com