Privacy Policy

Last updated: October 8, 2026
Effective date: October 8, 2026

IsBridgeUp ("we," "us," or "our") is operated by KarasSoft LLC, a Florida limited liability company. This Privacy Policy describes how we collect, use, and share information when you use our website at isbridgeup.com, our web application at app.isbridgeup.com, and our mobile apps for iOS and Android (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information we collect

Information you provide

Account information: When you sign in with Apple, Google, or Facebook (sign-in is handled by our authentication provider, Supabase Auth), we receive your name, email address, a user identifier from that provider, and your profile photo if the provider shares one. If you use Sign in with Apple and choose "Hide My Email," we receive an Apple relay address instead of your real email address. Your first name is shown to other users on status reports you submit; if no first name is available, you appear as "a driver." We never show your surname or email address to other users.
Age and rules confirmation: Before you create an account, you confirm that you are at least 13 years old and agree to our community rules. We record that you gave this confirmation.
Reports and activity: Bridge status reports ("raised" / "lowered"), confirmations, stream links, bids, points activity, and other actions you take within the Service.
Safety reports and blocks: If you report content or block a user, we store the report (including the reason you chose) and your block list so we can review reports and hide blocked users from you.
Notification preferences: The bridges you choose to follow and any alert schedule you set.
Messages to us: If you email us (for example at safety@isbridgeup.com or privacy@isbridgeup.com), we keep that correspondence to respond to you.
Payment information: When you buy a Pro subscription or points on our website, payment is processed by Stripe. Stripe receives your payment details; we never see or store your full card number, bank account, or other financial details. We keep a record of the purchase (for example, the product, amount, date, and a Stripe customer identifier). Stripe's privacy policy governs the data Stripe collects. Our iOS app does not offer in-app purchases in its current version.

Information collected automatically

Usage data (website and web app only): If you accept analytics cookies on our website or web app, we use Google Analytics 4 (loaded through Google Tag Manager) to collect pages viewed, features used, timestamps, and device type. Analytics does not run until you give consent, and it does not run inside our mobile apps.
View counts: We count page loads to display how many people have viewed a bridge status. This count is anonymous and not tied to individual users.
Ad statistics: We count how many times each local business ad is shown and clicked, in aggregate, so we can report totals to advertisers.
Push notification tokens: If you turn on notifications, we store the technical token needed to deliver them: a web push subscription in browsers, or, in our mobile apps, a device token issued through Firebase Cloud Messaging (a Google service).
Technical logs: Our servers record standard technical information (such as IP address, request time, and error details) to operate the Service, keep it secure, and fix problems.
Location: Only if you grant permission ("while using the app") in your browser or device settings. Your location is used once, on your device, to sort bridges by distance. Your coordinates are never sent to our servers, and we do not track or store your location history.

Information we do NOT collect

We do not show or use your surname; only your first name appears on your reports.
We do not collect your precise location on our servers.
We do not collect your device's advertising identifier (IDFA or Google advertising ID), and our mobile apps do not track you across other companies' apps or websites.
We do not use advertising SDKs, advertising cookies, or third-party tracking pixels. In our mobile apps, the Facebook SDK is used only to let you sign in with Facebook; advertiser ID collection and automatic event logging are turned off.
We do not sell or rent your personal information to anyone.

2. How we use your information

We use collected information to:

Provide and maintain the Service (bridge status, points, Pro features, stream links).
Display your first name on status reports you submit.
Process Pro subscriptions and point purchases made on our website via Stripe.
Send push notifications you have opted into (status changes for bridges you follow, confirmation requests about your own reports, and reminders you opted into), following the bridges and schedule you chose.
Review reported content, enforce our community rules, and hide content from users you have blocked.
Improve the Service through aggregated analytics.
Prevent abuse (cooldowns, daily caps, fraud detection, and preventing repeated free trials).
Comply with legal obligations.

3. How we share your information

We share information only with service providers that help us run the Service:

Supabase (database and authentication provider) — stores account and app data in the US East region.
Apple, Google, and Facebook (sign-in providers) — only when you choose to sign in with them. When you delete an account created with Sign in with Apple, we also contact Apple to revoke the app's access to your Apple account.
Stripe (payment processor) — processes Pro subscriptions and point purchases made on our website.
Google Firebase Cloud Messaging — delivers push notifications to our mobile apps.
Google Analytics (analytics) — collects usage data on our website and web app, only after you consent.
Cloudflare (hosting and CDN) — serves the website and web application.
DigitalOcean (cloud hosting) — runs our application servers in the United States.

Other users can see your first name and the content you post (status reports and stream links), as described above.

We do not sell, rent, or share your personal information with advertisers. Ads in the Service are first-party placements from local businesses that we manage ourselves. They are not targeted to you based on your personal data, and we do not share your data with those businesses. If you use "Report ad," your device opens an email to safety@isbridgeup.com, and we receive what you choose to send.

We may disclose information if required by law, court order, or government request, or to protect the safety of our users or the public.

4. Data retention

Account data: Retained as long as your account is active. Deleted within 30 days of account deletion.
Reports and activity: Retained in anonymized form for historical bridge statistics. Your name and other identifying details are removed from your reports when you delete your account.
Deleted-account record: When you delete your account, we keep a minimal record — your email address (or Apple relay address), your former account identifier, whether you already used a free trial, and your Stripe customer identifier, if any. We keep it to prevent abuse of free trials and to match past payments for accounting and tax purposes, and use it for no other purpose.
Payment records: Retained for 7 years as required by tax law. Managed by Stripe.
Push tokens: Deleted when you turn off notifications, when the token stops working, or when you delete your account.
Safety reports: Retained as long as needed to review them and to enforce our community rules.
Analytics data: Google Analytics retains data for 14 months by default.

5. Your rights

You have the right to:

Access your personal data (available in your profile).
Delete your account and associated personal data, in the app or on the web: Profile → Delete account. If you signed in with Apple, we also revoke the app's Apple sign-in authorization (tokens) with Apple. You can additionally remove IsBridgeUp in your Apple ID settings under "Sign in with Apple." The limited deleted-account record described in Section 4 is kept.
Export your data upon request (email us).
Opt out of push notifications (in-app notification preferences, or your browser or device settings).
Withdraw location access at any time in your browser or device settings.
Opt out of Google Analytics on our website and web app by declining analytics cookies or by installing the Google Analytics Opt-out Browser Add-on.

To exercise any of these rights, contact us at privacy@isbridgeup.com.

6. Children's privacy

The Service is not intended for children under 13. You must confirm that you are at least 13 years old before creating an account. We do not knowingly collect information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication via OAuth 2.0 / OpenID Connect providers, and database-level Row Level Security. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. International users

The Service is hosted in the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US. By using the Service, you consent to this transfer.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the Service or sending a push notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact us

KarasSoft LLC
State of Florida, United States
Email: privacy@isbridgeup.com