Privacy Policy

1. Information we collect

• Account information: name, email address, optional username, Sign in with Apple or Google identifier, language, time zone, country, and city.
• Gender and date of birth, and your answers when you start: why you use Sorit, who you share moments with, your preferred mission time, and where you heard about Sorit.
• The photos you take in Sorit, any caption you add, the mission they answer, and the visibility you choose for each one.
• Location: only when you allow it while using the app, we receive precise GPS coordinates and their accuracy when you open the app and when you take a photo.
• Context of the moment as determined by your device: the type of place nearby (for example a café or an airport), your motion (still, walking, or driving), and how long you have been there.
• The communities you join, the circles you create or join, invites, missions you skip, reports, and blocks.
• Technical information: app installation identifier, push notification token, and error and performance logs.

2. How we use information

• Choose missions that fit your moment, such as a coffee mission when you are at a café or a rain mission when it rains in your city.
• Unlock other people’s answers after you answer, and build your memories, streaks, and weekly and monthly recaps.
• Learn what you like to photograph from your answers and skips, so missions fit you better over time.
• Address you in the right grammatical form in Arabic, check your age, apply extra protections for people under 18, and remind you of your birthday memory.
• Keep people safe: review reports, hide content that breaks the rules, prevent abuse, and fix problems.
• Operate and secure the service and meet legal obligations.

3. Your location: what we keep and who sees it

• We store your precise location on our servers with the context of each app open and with each photo you take, to choose better missions and to show it to you alone in your memories.
• We keep two cities on your account: your home city, which you choose, and the city you are in now, which follows your location while you use the app, with when it was last confirmed. We use the city you are in to send sunset and rain reminders only where you are, and we do not keep a history of the cities you visit.
• From your own app opens, we work out roughly where your home and your work are (where you usually open Sorit in the evening, and on weekday daytime), so a shop next door isn’t mistaken for where you are. We use this only to choose missions, never show it to anyone, and work it out again every night from the last 30 days of history, so it disappears with that history or when you delete your account.
• No other user ever sees your precise location. Photos you share with a community or a circle show only your country or city, based on your setting, or nothing if you choose.
• We remove location and other metadata (EXIF) from photo files before storing them, because anyone who can view a photo could save its file.
• Our team can see precise locations when needed to operate the service or to review reports and safety issues.
• We never use your location in the background. You can turn off location access at any time in your device settings; the app keeps working with general and community missions.

4. Who sees your photos

• Only me: nobody else.
• Circle: only members of the circles you choose, with your name.
• Community: people who answered the same mission. Your name appears only if you turn that on; the photo shows your country or city and the local time it was taken.
• Invites: if you send an invite for a photo, the person who opens it can see that photo after they answer the same mission.
• You can change the visibility of any photo or delete it at any time. Reported photos are reviewed by our team.

5. Artificial intelligence and service providers

To rank missions we use a decision model (Jev by TypeSafe, through OpenRouter). It receives only general context: your city, the time of day, the type of place, your motion, and your interests. It never receives your precise coordinates, your photos, your gender, or your date of birth. We may use the same model to check captions you share with others for harassment, sexual content, or spam.

Before a photo you share with a community is shown to anyone else, we send a small copy of it to an AI vision model (through OpenRouter) to check it for sexual content, violence, hate symbols, or a child as the main subject. The model does not receive your name or location, and we use the result only for this check. Private and circle photos are not checked this way.

We get weather for each city from Open-Meteo using the city center’s coordinates, not yours. We host the service on servers in the European Union, store photos in Cloudflare R2, send email through Cloudflare, use Apple for sign-in and notifications, and Google for sign-in when you choose it. Each provider receives only what it needs to do its job.

6. Google user data

If you choose Continue with Google, Google shares only your name, email address, and Google account identifier with us (the basic openid, email, and profile permissions). We do not ask for access to your Gmail, contacts, Drive, Google Photos, or any other data in your Google Account.

• Use: we use this data only to create your Sorit account or sign you in to it, to link it to an existing account with the same email address, and to contact you about your account. Your name is shown to others only as described in “Who sees your photos”.
• Storage and protection: we store the name, email address, and Google identifier with your account on our servers in the European Union, and they travel only over encrypted connections (HTTPS). We do not store Google access or refresh tokens: the one-time code from Google is exchanged on our server and then discarded, and access to the data is limited to people who need it to run the service.
• Sharing: we do not sell, share, or transfer Google user data to anyone, and we do not use it for advertising, to train AI models, or for anything other than signing you in and running your account. It is never sent to the AI models described above.
• Retention and deletion: we keep it while your account exists, and deleting your account from inside the app deletes it immediately. You can also remove Sorit’s access at any time in your Google Account’s security settings (myaccount.google.com/permissions), or email us to delete it.
• Sorit’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Retention

• We keep your account information while your account is active.
• We delete context history and mission-ranking records, including coordinates, after 30 days.
• We keep each photo and its location until you delete the photo or your account. When you delete a photo, we delete its files from storage.
• When you delete your account, we delete your information, your photos, and every stored coordinate, except where the law requires us to keep something.

8. Sharing and sale

We do not sell your personal information and do not show ads based on it. We may share information with service providers acting on our behalf, in response to a valid legal request, or to protect our users and the service.

9. Your choices and rights

• Choose the visibility of each photo and change it later, choose whether others see your country, your city, or nothing, and whether they see your name.
• Control location, motion, and notification permissions in your device settings.
• Delete any photo, or delete your whole account from inside the app.
• Email [email protected] to request a copy of your data, correct or delete it, or exercise any right you have under applicable law.

10. Children and security

Sorit is not intended for children under 13, and we do not knowingly collect their information: if a date of birth shows someone is under 13, sign-up does not finish and nothing is stored. People aged 13 to 17 cannot share with public communities, never show their name publicly, and are not offered adults-only missions. No other user ever sees your gender or date of birth. We recommend keeping photos of children private or in your circles. We use reasonable technical and organizational measures to protect information, but no method of transmission or storage is completely secure.

11. Changes and contact

We may update this policy as the app evolves or the law changes, and will post the new version here with its effective date. Sorit is operated by Kanary Labs. For any privacy question or request, email [email protected].