PRIVACY POLICY

Last updated: March 15, 2026

1. Information We Collect

We collect information you provide directly: email address and display name when you create an account, profile photos you upload, and content you share (photos, descriptions, artist names). We also collect location data (GPS coordinates) when you use location features, and basic usage data (pages visited, features used).

2. How We Use Your Information

We use your information to: provide and improve the Service; display street art on maps with location data; show your profile and content to other users; send important account-related notifications; and analyze usage patterns to improve the platform.

3. Location Data

Location data is used to show nearby art and place uploaded art on the map. GPS coordinates are stored with art uploads to enable map features. You can deny location permissions and manually enter addresses instead. We do not track your location in the background.

4. Third-Party Services

We use the following third-party services: Firebase (Google) for authentication, database, and file storage; Google Maps for map display, geocoding, and place search. These services have their own privacy policies. We do not sell your data to third parties.

5. Data Storage & Security

Your data is stored on Firebase (Google Cloud) servers with industry-standard encryption. Profile photos and art images are stored in Firebase Cloud Storage. We use secure authentication and follow best practices to protect your information, but no system is 100% secure.

6. Your Rights

You have the right to: access your personal data through your profile; update or correct your information at any time; delete your account and associated data from your profile settings; request a copy of your data by contacting us. Account deletion removes your profile, but shared art may remain visible.

7. Cookies & Local Storage

We use localStorage (not cookies) to store your theme preference, language selection, and cached geocoding results. Firebase may set its own cookies for authentication. We do not use advertising cookies or tracking pixels.

8. Children's Privacy

Graffitour is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or in-app notification. Continued use after changes constitutes acceptance of the updated policy.

10. Brazilian Data Protection (LGPD)

If you are located in Brazil, you have additional rights under the Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018).

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at suporte@graffitour.art.