Privacy Policy

Effective October 21, 2026 · Phase 1 beta

Who we are

Vagabond is operated by Mongadillo Studios, a United States limited liability company. Contact: [email protected].

What we collect

• Account info: the email address or Apple ID you sign in with, and the handle you pick on first sign-in.
• Content you create: check-ins, photos, and vibe tags you post. These are tied to your account and shown on the public map to other signed-in users.
• Location, only when you post: we capture GPS coordinates at the moment you drop a check-in or photo. We do not continuously track your location, and we do not maintain a history of where you’ve been.
• Device info: standard iOS metadata (OS version, device model) via Firebase, used only for crash reporting and support.

What we don’t collect

• No advertising identifiers.
• No tracking across other apps or websites.
• No contacts, no social graph, no address book.
• No background location.
• No analytics on third-party ad networks.

Who we share it with

We share the minimum necessary data with the service providers that make the app work:

• Google Firebase (US): hosts the backend — authentication, cloud database, photo storage.
• Apple (US): processes Sign in with Apple.
• Mapbox (US): renders the map tiles. Mapbox receives IP addresses and anonymized tile-request metadata.
• PhotoDNA (Microsoft, US) or Thorn Safer: once integrated, we scan uploaded photos against industry-standard CSAM hash databases. See CSAM section below.

We don’t sell your data to anyone. We don’t share your data with advertisers.

Your rights

• Access & export: email us and we’ll send you a copy of your account data within 30 days.
• Deletion: use the “Delete account” button in the app. This cascades through our backend and permanently removes your drops, photos, drafts, profile, and sign-in. Your handle becomes available for someone else to claim immediately.
• Correction: edit your profile in the app, or email us for anything you can’t edit yourself.
• If you are in the EU/UK, you have additional rights under GDPR (object to processing, data portability, lodge a complaint with your supervisory authority).
• If you are in California, you have additional rights under the CCPA/CPRA (right to know, right to delete, right to opt out of sale — though we don’t sell data in the first place).

CSAM scanning

Vagabond complies with United States 18 U.S.C. §2258A. All user-uploaded photos are scanned against licensed hash databases (PhotoDNA and/or Thorn Safer). Positive matches are blocked from upload, reported to the National Center for Missing & Exploited Children (NCMEC) via their CyberTipline, and the offending account is terminated. We cooperate with lawful law enforcement requests.

Children

Vagabond is intended for users 17 and older. We do not knowingly collect data from children. If we learn we have an account from a user under 17, we will delete it.

Data retention

Your account data is retained for as long as your account exists. When you delete your account, everything is removed within 30 days, with the exception of records we are legally required to retain (e.g., NCMEC reports under §2258A are retained for 90 days as required by statute).

Security

We use industry-standard encryption in transit (TLS) and at rest (Firebase default encryption). No security system is perfect; if we learn of a breach affecting your data, we will notify you.

Changes

If we materially change this policy, we’ll notify active users via email and in-app notice before the change takes effect. The “effective” date at the top of this page is the authoritative version.

Contact

Privacy questions, requests, or complaints: [email protected].