Privacy Policy

Cabana is a curated content network where people share and discover great places, products, and experiences through trusted circles. This policy explains what we collect, why, and the control you have over it. We keep it plain because the app is built on trust, and that starts here.

This policy applies to the Cabana mobile app and the joincabana.app website (together, “Cabana,” “we,” “us”).

What we collect

Information you give us

• Account details — your name, email, and profile photo, provided when you sign in with Apple or Google.
• Content you create — the Picks you save, the notes and photos you attach to them, the Cabanas (boards) you curate, and the Vouches you give. Public and invite-only content is visible to others per your settings; private content is visible only to you.

Information you allow us to access

The app asks permission before accessing any of the following. You can decline, and you can change your mind later in your device settings.

• Contacts — if you allow it, we match your contacts against Cabana accounts to help you find friends already on the app. We use this only for matching and do not sell your contacts or use them to advertise.
• Photos & camera — used only when you choose to add an image to a Pick. We do not scan your photo library.
• Face ID — used only to unlock your saved session on your device. Face ID data never leaves your device and is handled by Apple, not us.
• Notifications — if you allow them, we store a push token to send you notifications. You can turn these off anytime.

Information collected automatically

• Usage & device data — basic analytics about how the app is used (screens viewed, features used, device type, app version) to understand and improve Cabana.
• Diagnostics — crash and error reports so we can fix problems.

How we use your information

• To provide the core service — saving Picks, curating Cabanas, and returning trusted results when you search.
• To scope discovery to your Trust Radius, so you only see content from people you're connected to and one degree beyond.
• To help you find friends and send notifications you've opted into.
• To keep you securely signed in.
• To understand usage, fix bugs, and improve the app.
• To protect Cabana and its users from abuse, and to comply with the law.

We do not sell your personal data, and we do not run ads. Cabana's entire premise is that discovery is trust-gated, not driven by advertising or an engagement algorithm.

Service providers we rely on

We use a small set of trusted providers to run Cabana. They process data on our behalf under their own security and privacy commitments:

• Convex — our backend database and authentication, which stores your account and content.
• Apple & Google — sign-in providers, when you choose to sign in with them.
• PostHog — product analytics, to understand how Cabana is used.
• Sentry — crash and error reporting, to keep the app reliable.
• Expo — app delivery and push notification routing.

Data sharing

The content you make public or share to an invite-only Cabana is visible to the people you share it with — that's the point of the app. Beyond that, we share personal data only with the service providers above, when required by law, or to protect the rights and safety of Cabana and its users. We never sell it.

Your choices & rights

• Permissions — grant or revoke contacts, photos, camera, Face ID, and notifications anytime in your device settings.
• Access & deletion — you can request a copy of your data or delete your account and associated personal data by emailing us at hello@joincabana.app.
• Regional rights — depending on where you live (for example the EU/EEA or California), you may have additional rights to access, correct, port, or delete your data, and to object to certain processing. Contact us to exercise them.

Data retention

We keep your information for as long as your account is active. When you delete your account, we delete your personal data within a reasonable period, except where we must retain some of it to comply with legal obligations or resolve disputes.

Security

Data is encrypted in transit, and your session token is stored in your device's secure keychain, protected by Face ID where you enable it. No system is perfectly secure, but we take reasonable measures to protect your information.

Children

Cabana is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will remove it.

Changes to this policy

We may update this policy as Cabana evolves. When we make material changes, we'll update the date above and, where appropriate, notify you in the app.

Contact

Questions about privacy? Email us at hello@joincabana.app. Cabana is the data controller for the information described here.