Privacy Policy

1. Information We Collect

We collect information that you provide directly, information created through your use of Function, and certain technical information necessary to operate, secure, and improve the Services.

Account and Authentication Information

Function uses Sign in with Apple for account authentication.

When you sign in, we may receive and process:

• an authentication identifier associated with your account;
• your email address, which may be your actual email address or an Apple private relay address if you use Hide My Email;
• authentication credentials and tokens necessary to establish and maintain your signed-in session.

Function uses Firebase Authentication to manage account authentication.

We do not store your Apple password.

Profile Information

When creating or editing your Function profile, you may provide information including:

• name;
• username;
• profile photo;
• biography;
• age;
• gender;
• college or university information;
• college year or affiliation;
• featured group;
• other profile information you choose to provide.

Certain profile information may be visible to other signed-in Function users as part of Function’s social features.

Your email address is stored separately from your public profile and is not displayed to other users.

Age and gender are collected as account/profile information. They are not intended to be displayed publicly as part of your visible Function profile unless Function explicitly provides such a feature.

Functions and Other User-Generated Content

When you use Function, we may collect content that you create, upload, send, or otherwise submit, including:

• Functions and event information;
• titles and descriptions;
• event dates and times;
• venue and location information;
• photos and videos;
• captions;
• comments;
• reactions;
• group information and descriptions;
• invitations;
• join requests;
• RSVPs and attendance information;
• profile gallery content;
• direct messages;
• group messages;
• Function chat messages;
• reports, feedback, suggestions, and support submissions.

The visibility of this information depends on the feature and the privacy or audience settings associated with it.

For example, some Functions and profiles may be broadly visible to signed-in users, while certain galleries, chats, locations, rosters, groups, or other information may be limited to attendees, members, invited users, hosts, or other authorized users.

Photos and Videos

Function allows you to select photos and videos from your device for upload.

For photos, Function may re-encode uploaded images, which generally removes embedded metadata such as EXIF information and original photo GPS metadata.

Videos may be uploaded from the file selected by the user and may retain metadata embedded in the original video file.

Function does not currently request general camera or microphone access.

Function may request permission to save media to your photo library when you choose to save Function content to your device.

Location Information

Function uses two different types of location information.

Device Location

If you choose to enable nearby Function discovery, Function may request access to your device’s location while you are using the app.

Device location may be used to:

• identify Functions near you;
• calculate approximate distance from Functions;
• improve nearby and personalized Function recommendations.

Function requests location only while the app is in use.

Your device GPS location used for these nearby features is processed on your device and is not written by Function to our Firestore database.

You can revoke Function’s access to your device location at any time through your device’s iOS Settings.

Function and Venue Locations

Hosts may provide venue or event-location information when creating a Function.

This may include:

• venue name;
• address;
• latitude and longitude;
• city or general location information.

Function may store precise venue coordinates in our backend.

Depending on the host’s settings, exact Function location information may be available only to certain users, such as hosts or attendees, or may be revealed at a particular time.

Location searches and venue selection may use Apple Maps and MapKit.

Social Information

Function may process information about your activity and relationships within the Service, including:

• followers and accounts you follow;
• groups you follow or join;
• group membership or administration;
• Functions you host;
• Functions you attend;
• RSVPs;
• invitations;
• blocked users and groups;
• other social interactions.

We use this information to operate Function’s social, discovery, recommendation, privacy, and safety features.

Messages

Function stores direct messages, Function chats, and group chats using our Firebase backend.

Messages may include:

• message text;
• sender information;
• timestamps;
• media or attachments;
• reactions;
• invitation information;
• read-state information.

Messages are transmitted using encrypted network connections provided by our service providers, but Function messages are not end-to-end encrypted.

Authorized Function operators with administrative access to our backend may technically be able to access stored messages where necessary for security, support, moderation, legal compliance, or operation of the Service.

We do not use private message contents for advertising.

Reports, Blocking, and Safety Information

If you report a user, group, Function, media item, comment, message, or other content, we may collect:

• your account identifier;
• the account or content being reported;
• your selected or written reason;
• related Function or group identifiers;
• the date and time of the report;
• information needed to investigate the report.

If you block a user or group, we maintain information necessary to enforce the block and may create a moderation record associated with that action.

These records are used for safety, abuse prevention, moderation, and enforcement of our rules.

Notifications and Device Information

If you enable notifications, Function may process information such as:

• Firebase Cloud Messaging registration tokens;
• Apple Push Notification information;
• Live Activity push tokens;
• an installation-specific identifier;
• notification routing information;
• Function information necessary to generate relevant alerts.

Apple and Google may process information necessary to deliver notifications.

Analytics and Diagnostics

Function uses Google Firebase Analytics to understand how the Service is used.

This may include information about interactions such as:

• signing in;
• completing onboarding;
• creating or joining a Function;
• responding to an RSVP;
• sending an invitation;
• uploading gallery content;
• sending a message;
• opening a notification;
• using Live Activities.

Our custom analytics events are designed not to include message bodies or email addresses.

Firebase Analytics may also automatically process technical information associated with the app installation or device according to Google’s practices.

Function also uses Firebase Crashlytics to identify crashes, errors, and reliability problems. Crash reports may include technical information about the device, application, operating environment, and the circumstances of a crash.

Support, Bug Reports, and Suggestions

If you contact us or submit feedback, a bug report, support request, suggestion, or official-group application, we may collect information such as:

• name;
• email address;
• username;
• description of your request;
• screenshots;
• app version;
• category or subject;
• other information you choose to provide.

We use this information to respond to requests, investigate problems, review applications, and improve Function.

2. How We Use Information

We use information collected through Function to:

• create and maintain user accounts;
• authenticate users;
• provide profiles, Functions, groups, galleries, messaging, invitations, and other social features;
• personalize and rank content;
• provide nearby Function discovery;
• deliver notifications and Live Activities;
• display content to the audiences selected through Function’s features;
• operate reporting, blocking, moderation, and safety systems;
• prevent fraud, abuse, spam, and misuse;
• maintain the security of Function;
• troubleshoot errors and crashes;
• understand product usage and improve Function;
• respond to support requests and feedback;
• enforce our Terms of Use and community rules;
• comply with applicable laws, legal requests, and regulatory obligations;
• protect the rights, safety, and property of Function, our users, and others.

We do not use personal information for third-party advertising.

3. How Information Is Shared

We do not sell your personal information.

We do not use Function to track you across other companies’ applications or websites for advertising purposes.

We do not share your information with third-party advertising networks.

We may disclose or make information available in the following circumstances.

Other Function Users

Information is shared with other Function users when necessary to provide the social features you choose to use.

Depending on the feature, this may include:

• profile information;
• Functions you host;
• group information;
• attendance or RSVP information;
• gallery content;
• comments and reactions;
• messages;
• other user-generated content.

Visibility varies by feature and privacy settings.

Service Providers

We use companies that process information on our behalf to operate Function.

These currently include:

Google Firebase, including services such as:

• Firebase Authentication;
• Cloud Firestore;
• Firebase Storage;
• Cloud Functions;
• Firebase Cloud Messaging;
• Firebase Analytics;
• Firebase Crashlytics;
• Firebase App Check.

Google processes information necessary to provide these services.

Apple, including:

• Sign in with Apple;
• Apple Push Notification service;
• MapKit and Apple Maps;
• Live Activities and ActivityKit;
• App Attest;
• iOS location services.

Apple may process information necessary to provide these services.

Vercel hosts portions of the Function website and may process ordinary web-request information, such as IP address, requested URL, browser information, and similar technical information.

Our website may also request fonts from Google Fonts, which can cause the visitor’s browser to communicate with Google when loading those resources.

We require third parties handling user data on our behalf to provide protections consistent with applicable requirements and the protections described in this Privacy Policy.

Legal, Safety, and Security Reasons

We may preserve or disclose information where we reasonably believe doing so is necessary to:

• comply with law, regulation, legal process, or governmental request;
• investigate fraud, abuse, harassment, or safety concerns;
• enforce our agreements or policies;
• protect the rights, safety, or property of Function, our users, or others;
• detect or prevent security incidents.

Business Transactions

If Excalibur Innovations LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction, information may be transferred as part of that transaction subject to applicable law.

4. Advertising, Sale of Data, and Cross-App Tracking

Function currently:

• does not display third-party advertising;
• does not sell personal information;
• does not share personal information for cross-context behavioral advertising;
• does not use the Apple advertising identifier (IDFA);
• does not use App Tracking Transparency because Function does not currently engage in activity requiring tracking permission.

If these practices materially change, we will update this Privacy Policy and obtain any permissions required by applicable law or platform rules before implementing those practices.

5. Data Storage and Security

Function primarily uses Google Firebase to store and process application data.

Our production Firebase infrastructure is hosted in the United States.

We use technical and organizational safeguards designed to protect information, including:

• authenticated access;
• Firebase security rules;
• access controls;
• role and authorization checks;
• encrypted network connections;
• App Check and App Attest for supported backend operations;
• restrictions on access to certain private and moderation data.

No system can guarantee absolute security, and we cannot guarantee that unauthorized access, disclosure, loss, or misuse will never occur.

6. Data Retention

We retain information for as long as reasonably necessary to operate Function, provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce our agreements, protect users, and maintain security.

Different information may be retained for different periods.

For example:

• Activity Center records are generally pruned after approximately 30 days, subject to keeping a limited number of recent items.
• Cached media stored locally on a device may expire according to application cache settings.
• Account information and user-generated content may remain until it is deleted by the user, removed through moderation, no longer needed, or processed through account deletion.
• Moderation, safety, legal, and abuse-prevention records may be retained after account deletion when reasonably necessary for those purposes.
• Analytics, crash reports, infrastructure logs, and backups may be retained according to the applicable service provider’s retention configuration and policies.

Where we do not have a fixed retention period, we assess retention based on the nature of the information, its purpose, security considerations, applicable obligations, and whether continued retention is reasonably necessary.

7. Account and Data Deletion

You can initiate deletion of your Function account from within the Function app.

Account deletion removes or anonymizes information associated with the account, depending on the nature of the information and whether retaining some information is necessary for other users, security, legal obligations, or legitimate operational purposes.

When an account is deleted, Function generally:

• deletes the user’s Firebase Authentication account;
• attempts to revoke the user’s Sign in with Apple authorization;
• removes the user’s private account information;
• removes email and push-token records;
• removes follower and following relationships;
• removes blocking relationships;
• removes personally owned profile and gallery media;
• removes personally owned Functions where the user is the sole host;
• removes or anonymizes comments, reactions, and similar user associations where supported;
• removes the user from groups and shared relationships;
• anonymizes the user’s public profile into a deleted-account record.

Some information may remain after account deletion.

Shared Messages

Message text may remain so that other participants do not lose the history of a shared conversation.

Where retained, the deleted user’s identity is anonymized, such as by displaying the sender as “Deleted User.”

Media associated with the deleted user’s messages may be removed.

Shared or Group-Owned Content

Content that belongs to a group or another user may remain even if a deleted user previously helped create, administer, or interact with it.

Safety and Moderation Records

Reports and certain moderation records may be retained in anonymized or limited form when reasonably necessary for safety, abuse prevention, dispute handling, or legal obligations.

Operational Records

Certain technical records, logs, deletion-job records, analytics, crash information, or backup copies may remain for limited periods based on operational needs or service-provider retention practices.

We do not retain personal information merely to avoid honoring a valid deletion request.

8. Your Choices and Controls

Depending on the feature, you can control information through Function or iOS.

You may:

• edit certain profile information;
• remove certain content you created;
• control Function or group participation;
• block users or groups;
• report objectionable content or behavior;
• enable or disable notification permissions through iOS;
• enable or revoke Function’s access to your device location through iOS Settings;
• delete your Function account from within the app.

You may also contact us regarding a privacy or data request using the contact information below.

We may need to verify your identity before fulfilling certain requests.

Depending on where you live, applicable law may provide additional rights regarding access, correction, deletion, portability, restriction, objection, or other use of your personal information.

We will respond to applicable privacy requests as required by law.

9. Children’s Privacy

Function is intended for users who are 13 years of age or older.

Function is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Users under 13 are not permitted to create a Function account.

If we learn that we have collected personal information from a child under 13 in circumstances prohibited by applicable law, we will take appropriate steps to delete the information.

If you believe a child under 13 has provided personal information to Function, please contact us at contact@functionapp.social.

Users may be subject to a higher minimum age where required by applicable law or platform requirements in their country or region.

10. International Users

Function and its service providers may process and store information in the United States and other locations where our service providers operate.

If you access Function from outside the United States, your information may be transferred to and processed in countries whose data-protection laws differ from those in your jurisdiction.

Where required, we will use appropriate safeguards for international transfers of personal information.

11. Website Privacy

When you visit functionapp.social, our hosting and infrastructure providers may automatically process technical information ordinarily associated with web requests, such as:

• IP address;
• browser or user-agent information;
• requested pages and URLs;
• date and time of requests.

The Function website is hosted through Vercel.

The website may load resources such as Google Fonts from third-party providers.

Function’s current website does not intentionally use third-party advertising trackers.

If you use a support link or email-based support form, the information you enter may be sent through your email application rather than directly submitted to Function’s web server.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time as Function changes or as legal, technical, or operational requirements change.

When we make material changes, we will update the “Last Updated” date above and may provide additional notice where appropriate or required.

Your continued use of Function after an updated policy becomes effective is subject to applicable law and any additional consent requirements.

13. Contact Us

If you have questions, concerns, privacy requests, deletion requests, or complaints about this Privacy Policy or Function’s privacy practices, contact:

You may also access Function’s Support page through the Function app or website.