Privacy Policy
Last updated: April 2, 2026
Manhole Notebook ("we", "our", or "the app") is committed to protecting your privacy. This policy explains what data we collect and how we use it.
Data We Collect
Account Information: When you create an account, we collect:
- Email address (for authentication and account recovery)
- Username (required, public)
- Display name (optional)
- Profile avatar preference (which collected card to display as your avatar)
Collection Data: We store your manhole card collection, including which cards you've collected, favorited, wishlisted, and any notes you add.
Saved Pins: Distribution locations you save for trip planning are stored locally on your device.
Card News Alerts: If you subscribe to alerts for specific cards (Pro feature), we store your alert preferences and track which notifications have been sent to avoid duplicates.
Social Features: If you use social features, we store:
- Posts you create (including captions and card references)
- Location data you attach to posts (optional)
- Friend connections and requests
- Likes on posts
Reports: If you submit a report about card information, we store the report content to help improve data accuracy.
Device Information: We store push notification tokens to send you notifications (if enabled).
Location Data: With your permission, we access your location to show nearby cards. Location is processed on your device and not stored on our servers, unless you choose to attach it to a post.
Subscription Data: If you subscribe to Pro, Apple processes your payment. We receive confirmation of your subscription status but do not have access to your payment details.
How We Use Your Data
- To provide and improve the app experience
- To sync your collection across devices
- To send verification and account-related emails
- To enable social features (posts, friends, likes)
- To send push notifications (new cards, friend requests, card news alerts, etc.)
- To manage your Pro subscription status
Data Storage
Your data is stored securely on servers with encryption at rest and in transit. Card images and public data are served via Cloudflare's global CDN.
Third-Party Services
- Apple Sign-In / Google Sign-In: For authentication (optional)
- Apple (APNs) / Google (FCM): For push notifications
- Apple App Store: For subscription management and payment processing
- RevenueCat: For subscription status management
- Cloudflare: For content delivery
Your Rights
You can:
- Access and export your collection data
- Delete your account and all associated data from Settings
- Control who sees your posts (friends only or public)
- Disable push notifications at any time
- Sell your personal data
- Share data with advertisers
- Track you across other apps or websites
- Use analytics or tracking SDKs
Data Retention
We retain your data as long as your account is active. When you delete your account, all your data is permanently deleted within 30 days.
Children's Privacy
The app is not intended for children under 13. We do not knowingly collect data from children under 13.
Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.
Questions? Contact us at gabriel@barandiaran.co