earthr

Privacy Policy

Effective October 10, 2026 · applies to the earthr iOS app (currently in beta) and earthr.net

The short version

Who we are

earthr ("we", "us") makes a location-based app where people drop pins that others can unlock only by being physically nearby. Questions about this policy or your data go to privacy@earthr.net.

What we collect and why

DataWhy we use itWho can see it
Email address and password To create and sign in to your account, and to send sign-up confirmation codes. Passwords are handled by Amazon Cognito and stored only in hashed form; we never see them. Only us. Other users don't see your email.
Precise location, while the app is open To show pins near you, to check you're close enough to unlock a pin, and to place a pin where you create it. We use your location at the moment you do something; we don't store a history of your movements and the app doesn't use location in the background. Not shared with other users, except that a pin you create sits at the place you created it (see below).
Pins you create The pin's location, unlock radius, type, viewer limit and expiry, so the app can show it and enforce its rules. Public pins appear on the map for anyone nearby. Personal pins are visible only to the people you invite.
Photos, videos and captions you post To show them to people who unlock your pin. Anyone who unlocks the pin. People who collect a pin can view its content again later.
Email addresses you invite When you create a personal pin, the addresses you enter (typed or picked from your contacts) are stored so only those people can open it. We only receive the addresses you choose, not your contact list. Only us and you.
Your activity on pins Which pins you've unlocked, collected or discarded, so viewer limits work and your Collected list stays in sync. Only us. A pin's creator sees how many slots remain, not who used them.
Reports If you report a pin, we store the report and reason to moderate content. Pins reported by several people are hidden automatically. Only us. The person you report isn't told who reported them.
Server logs Standard request logs (such as IP address, time and the request made) to keep the service running and secure. Deleted after 14 days. Only us.

The app also asks for camera access, only so you can take a photo or video for a pin. Nothing is captured unless you do so.

What we don't do

Who we share data with

How long we keep it

Your choices and rights

Security

Data is encrypted in transit (HTTPS) and at rest. The database is reachable only from inside our private network, and photos and videos are served through short-lived links. No system is perfectly secure, but we limit who and what can reach your data.

Children

earthr isn't intended for children under 13, and we don't knowingly collect data from them. If you believe a child under 13 has an account, contact us and we'll delete it.

Changes to this policy

If we change this policy, we'll update the date at the top of this page. If a change materially affects how we use your data, we'll tell you in the app before it takes effect.

Contact

privacy@earthr.net