The short version
- We collect the minimum we need to run a marketplace: an email, a name, your location while you're using the app, and the photos people take on requests.
- Delivery photos are deleted 24 hours after they're taken. We don't build an archive of what places looked like or who was standing outside them.
- We never show your last name, your email, or your phone number to another user.
- We never sell your data. There is no advertising on ByrdsEye.
What we collect
Account information. Your email address, first name, last name, and a username you choose. You give us these when you sign up.
Location. With your permission, we use your device's location to show you requests near you and to show how far away they are. When you complete a request, we record the location where the photo was taken. That location is shown to the person who asked, because knowing the photo was taken at the place is the entire point of the service.
Photos. Taken inside the app only. ByrdsEye does not accept uploads from your camera roll, which means every delivery is something someone actually went and saw. We record when each one was taken.
The requests you make and complete, including the category, the place, any note you add, ratings you give and receive, and reports you file.
Payment information is handled by Stripe. We never see or store your card number. Stripe collects payment and identity information directly, under Stripe's own privacy policy. If you receive payments through ByrdsEye, Stripe collects the identity and bank details required by law to pay you, and files any tax forms you're owed.
Device information. If you enable notifications, we store a push token so we can tell you when something happens on a request. We do not use it for anything else.
People who appear in photos
This is the part that matters most, and the part most apps don't address.
A photo of a line outside a bakery may contain people who never opened ByrdsEye and never agreed to anything. We take that seriously, and we've built around it rather than written around it:
- No person is ever the subject of a request. ByrdsEye has a fixed list of things you can ask about — how long a line is, whether parking is available, whether a place is open. There is no free-text request, and no category that asks about a person. Requests that appear to be about a specific person are automatically held and reviewed by a person before anyone can see or accept them, and the accounts involved are removed.
- Photos are deleted after 24 hours (see Retention below). No long-term record exists of who was where.
- Delivery photos cannot be screenshotted or screen-recorded inside the app, because they contain people who didn't choose to be in them.
- Photos are only ever visible to two people — the person who asked and the person who went — plus ByrdsEye staff reviewing a report or a dispute. They are never public, never searchable, and never shown in a feed.
If you believe a ByrdsEye photo contains you and you want it removed, email support@byrdseye.io. We will remove it, and if it hasn't yet been automatically deleted we will delete it manually.
How we use what we collect
To show you nearby requests and let you post your own. To connect the two sides of a request and let them see what they need to see. To take payment and pay people. To send you notifications about your own requests. To investigate reports and disputes, and to enforce our rules. To meet our legal obligations.
We do not use your information for advertising, and we do not sell it. There is no third party paying us for access to anything here.
Who we share it with
Only the companies we need to run the service:
- Stripe — payments, payouts, identity verification, tax forms
- Supabase — our database and file storage
- Expo — push notification delivery
- Google Maps Platform — searching for places when you create a request
Each processes data on our behalf under its own terms. We don't share your information with anyone else, except where the law requires it.
Between users, we share as little as possible. The other person on a request sees your first name (and your last initial, only if you turn that on), your username, and your rating. They never see your last name, your email address, or your phone number. ByrdsEye does not pass contact details between users at any point.
Law enforcement
We will disclose information where we are legally required to. We'll tell you if that happens unless we're prohibited from doing so. Note that because delivery photos are deleted after 24 hours, in most cases there is simply nothing to hand over.
How long we keep things
Delivery photos: 24 hours after they're taken, then permanently deleted from storage. The record that a delivery happened remains — who, when, where, and whether it was approved — because that's what ratings and payment history are built on. The image itself is gone.
This runs automatically on a schedule, and it also sweeps up any file that has become detached from its request, so nothing survives by falling through a gap.
Four exceptions, where a photo is kept until the matter is resolved:
- The delivery is disputed
- The request was held for review
- Someone has reported it
- We have flagged it
In those cases the photo is the evidence, and deleting it on a timer would make it impossible to resolve fairly.
Account information is kept while your account is open. Request history, ratings and payment records are kept after an account is deleted, in anonymised form — we're required to keep financial records, and a delivery you completed is also part of someone else's history.
Your choices and rights
Location — you can refuse or revoke it in your device settings. Without it, ByrdsEye can't show you what's nearby, which is most of what it does.
Notifications — off is fine; you'll just have to open the app to see what's happened.
Last name — never shown. You can optionally show a last initial, and turn it off again whenever you like.
Access and correction — you can see and edit your name and username in the app. Email us for anything else.
Deletion — you can delete your account from within the app. When you do, we remove your name, email, username and notification tokens, and your past requests stop being connected to an identifiable person. We keep the anonymised transaction record, because we're legally required to retain financial records and because those deliveries are part of other people's history too. Money you have already earned is still paid out to you through Stripe.
Depending on where you live, you may have additional rights — including under New Jersey's data privacy law and the California Consumer Privacy Act — to know what we hold, to have it deleted, to correct it, and not to be discriminated against for asking. Email support@byrdseye.io and we'll action it. We don't sell personal information or share it for cross-context behavioural advertising, so there's nothing to opt out of on that front.
Security
Data is encrypted in transit and at rest. Delivery photos are accessible only through short-lived signed links issued to the two people on the request. Access to our systems is limited to those who need it. No system is perfect, and we won't claim otherwise — but the 24-hour deletion policy means that even in the worst case, there is very little to lose.
Changes
This policy carries a version number and an effective date, shown at the top of this page. The version in force at the time governs what we did with your information at that time.
If we change it in a way that materially affects you, we'll tell you in the app before it takes effect. We keep every superseded version; email support@byrdseye.io if you need a copy.
Contact
support@byrdseye.io
Dox Technologies LLC 971 US Highway 202N #6143 Branchburg, New Jersey 08876