Privacy Policy

Overview

Brickfeed, operated by Zanello Studios, outlines how it collects, uses, and protects user information in this privacy document.

1. Information We Collect

• Account Information — Username, email address, and securely stored passwords via Supabase.
• Profile Information — Display name, profile photo, and bio.
• User Content — Photos, videos, captions, comments, direct messages, group chat messages, Studs (ephemeral photo/video content), Stud Highlights, and Build Logs.
• Collection Data — LEGO set numbers, build status (owned, built, wanted), and piece counts sourced from Rebrickable. Visibility is controlled by the user's profile settings.
• Marketplace Listings — Title, description, photos, price, and general location details.
• Group Activity — Group names, descriptions, cover photos, member lists, channels, selected roles, and associated posts and messages.
• Group Form Responses — Answers a member submits to a custom form a group's moderators create, plus an optional photo. Visible only to the submitter and that group's moderators and owner, not the wider group.
• Moderation Action Records — A log of moderation actions taken within a group (mutes, bans, role changes, content removals) and who took them, kept for accountability and safety review.
• Purchase & Subscription Data — Active subscription tiers (payment processing handled by Apple or Google Play, depending on your platform; RevenueCat manages subscription history).
• Giveaway Prize Shipping Information — If you win a Giveaway, we collect a shipping name, address, and optional phone number through a dedicated in-app claim form, solely to deliver your prize. This information is stored in a restricted system that only you and the Brickfeed staff fulfilling your prize can access. It is never visible to other users and is never sold or shared beyond what is needed to ship the item (for example, with a shipping carrier).
• Push Notification Tokens — Device tokens for notification delivery.
• Usage Data — Interaction patterns like posts viewed, likes, and follows.
• Diagnostic Data — Crash reports for bug fixes and stability improvements.

2. How We Use Your Information

Data collected supports account creation and management, content display, social features (following, liking, commenting, messaging, groups), marketplace functionality, Clutch Points and Giveaway prize fulfillment, notification delivery, badge subscription processing, abuse investigation, and app performance improvement.

We do not sell your data. We do not use your data for third-party advertising.

3. Direct Messages

Direct messages between users remain private. The moderation team accesses message content only when a user or message receives a report through the app's reporting tool, and solely to evaluate that specific report.

4. Groups

Group content — posts, chat messages, announcements, and member lists — is visible to all group members by default, unless a group moderator restricts a channel to specific roles or badge tiers. Groups may include chat channels, member-selected roles, and forms built by group moderators; responses submitted to a group form are visible only to the submitter and that group's moderators and owner, not the wider membership. Group creators and administrators manage membership and content, and a record of their moderation actions (mutes, bans, role changes) is kept within the group. The moderation team may access group content when reported.

5. Third-Party Services

• Supabase — Database, authentication, and file storage.
• RevenueCat — Subscription and purchase management.
• Apple / Google Play — Payment processing for App Store and Play Store subscriptions (card details never received by Zanello Studios).
• Expo — Push notification delivery.
• Apple Sign In / Google Sign In — Optional authentication.
• Rebrickable — LEGO set search functionality.
• Zippopotam.us — Postal code geocoding for marketplace locations.
• AWS Rekognition — Automated scanning of uploaded photos to detect content that violates our policies.
• Brickognize — Identifies LEGO parts, minifigs, and sets from photos submitted through the Brick Scan feature.
• Giphy — GIF search for Stud content.

6. Data Storage and Security

Data resides on Supabase servers with industry-standard protections including encrypted HTTPS connections and secure authentication. No method of transmission over the internet is 100% secure.

7. Children's Privacy

Accounts require users to be at least 13 years old. Accounts for users between 13 and 17 default to a private profile, restricting visibility of their content and profile to approved followers. We do not knowingly collect data from anyone under 13. Anyone discovering an underage account should contact brickfeedapp@gmail.com for deletion.

8. Your Rights

Users can access or update information through profile settings, delete accounts via Settings → Delete Account, request data copies by contacting us, and manage or cancel subscriptions through iOS Settings or the Google Play app.

EEA residents have GDPR rights including data portability and complaint filing. California residents have CCPA rights regarding data collection and deletion requests.

9. Data Retention

• Messages — Content removed after 12 months of inactivity; metadata retained longer.
• Reported content — Retained up to 24 months for safety reviews.
• Marketplace listings — Retained 24 months after sale or removal.
• Account data — Permanently deleted within 30 days of account deletion.
• Subscription records — Managed by RevenueCat and Apple or Google Play, depending on your platform.
• Studs — Active for 24 hours in the feed; media files are retained on our servers but no longer surfaced after expiration. Studs saved to a Highlight remain stored until the user deletes the Highlight.
• Build Logs — Retained as long as the account is active; permanently deleted within 30 days of account deletion.
• Collection Data — Retained as long as the account is active; permanently deleted within 30 days of account deletion.
• Group Chat Messages — Retained as long as the group exists; a group moderator or owner can delete an individual message at any time.
• Group Form Responses — Retained as long as the group exists; a group moderator or owner can delete an individual response at any time.
• Moderation Action Records — Retained as long as the group exists, for accountability and safety review.
• Giveaway Prize Shipping Information — Shipping information is automatically deleted 30 days after a prize ships.

10. Content You Post

Users retain ownership of posted content but grant Zanello Studios a non-exclusive, royalty-free, worldwide license to display, reproduce, and distribute it for app use, promotional materials, and press coverage. Reasonable credit to usernames is provided when featuring external content. Users may request promotional material removal by contacting brickfeedapp@gmail.com, though previously published materials cannot be guaranteed removed.

11. Changes to This Policy

Updates occur periodically with notification through date changes. Continued app use constitutes acceptance of modifications.