This page explains what data porpor keeps, why, for how long and who can see it. We keep it short and honest. This policy covers the porpor app for iPhone and the website porpor.be.
In short
- porpor asks for no email, no password, no phone number and no real name. You pick a nickname and an emoji.
- Only people who have your code can become your bestie and por you.
- A message or location on a por is deleted from our server as soon as your bestie has seen the por.
- We only use location, Bluetooth, the camera and notifications when you turn them on. You can turn them off again at any time.
- There are no ads and no trackers, and we sell your data to nobody.
- Nicknames and emoji of duos appear on the top lists. So pick a nickname nobody recognises you by, if you prefer that.
- You can delete your account at any time, right in the app.
Who is responsible
porpor is made by GeNx BV, Bredestraat 161, 2620 Hemiksem, Belgium (VAT BE0675.675.373). GeNx BV is the data controller for your data. Questions about privacy? Email help@porpor.be.
What data we keep
Your profile
| What | Why | How long |
|---|---|---|
| Your nickname (max 24 characters) and your emoji avatar | So your besties recognise you, and so you can appear on the top lists | Until you delete your account |
| Your language | To show the app and the notifications in your language | Until you delete your account |
| Your country | For the top list per country. We take it from the region setting of your iPhone, not from GPS. You can change it in the settings | Until you delete your account |
| Your time zone | For streaks and badges that depend on the time of day | Until you delete your account |
| Your porpor code (for example K7QX-M2PA) | To add besties. You can get a fresh code at any time | Until you get a new one or delete your account |
| Your choices in the settings (mute, streak reminder) | To remember them | Until you delete your account |
When you create your profile, your phone gets an anonymous account with a random number. So we do not know your email address, phone number, Apple ID, contacts or advertising ID.
Your besties and your pors
| What | Why | How long |
|---|---|---|
| Who you are friends with, and since when | The app cannot work without it | Until one of you unfriends, blocks or deletes their account |
| Counters per duo: number of pors, streak, best streak, rally, number of SUPERPORS, who porred last and when | For streaks, turns, badges and top lists | As long as you are besties |
| Every por: who sent it, to whom, when, with which emoji, and when it was viewed | To deliver the por | Until 7 days after the por was viewed |
| The message on a por (max 140 characters) | To show it to your bestie | Deleted as soon as your bestie has seen the por |
| The location on a por (exact coordinates) | Only when you switch on "Add location" for that one por. Your bestie sees it on a map | Deleted as soon as your bestie has seen the por |
| Your badges and when you earned them | For your collection and the GOATs top list | Until you delete your account |
| Who you blocked | So that person cannot add you again | Until you unblock them or delete your account |
Good to know: if your bestie never opens a por, the message or location stays on our server until the por is viewed, until you stop being besties or until one of you deletes their account. Some badges say something about when or how you por, like "Night Owl" or "Long Distance". The person who sent a por can technically find out whether it was opened.
POR GAMES
For a game we keep what is needed to play: the question or hint, the secret number or word, the drawing and the guesses. That is deleted once the game is over and its last por has been viewed. Which game it was, who played, when and how it ended is kept for the badges, until you delete your account.
Location
porpor uses your location at two moments, and each time only when you choose to:
- On a por. If you switch on "Add location", we send along your exact location at that moment. It is deleted as soon as your bestie has seen the por.
- For the top list of your area. If you turn that on, your phone calculates a rough square of about 5 by 5 km and only sends that square, never your exact spot. For the top list we group by a larger square (roughly 20 to 40 km wide). That square is also stored with your friendships, so the top list adds up. If you turn the neighbourhood list off, we delete it.
porpor never tracks your location in the background.
Notifications
If you allow notifications, we keep the push token of your phone. That is a code that tells Apple which device a notification should go to. A notification contains the nickname of whoever porred you, the emoji and whether a message is attached. The message itself, your location and the content of a game are never in it. The 8 pm streak reminder contains the nicknames of the besties waiting for you. You can turn it off in the settings.
SUPERPOR over Bluetooth
If you turn on SUPERPOR, your phone sends out an 8 character code over Bluetooth while the app is open. That code changes every five minutes and contains no name. When your phone hears such a code from another porpor phone, it asks our server whether it belongs to a bestie. The server only answers for besties and does not keep what your phone heard. So strangers learn nothing about you. When you give each other a SUPERPOR, we keep the fact that you were together that day (not where).
Camera
The camera is only used to scan a QR code. No photo or video is taken, kept or sent.
Reporting
If you report someone, we keep who reported, who was reported (with nickname and avatar), the reason you picked and a copy of the por or game it is about, even if it already disappeared for you. Only we read reports. Every report also arrives in our mailbox by email, so we see it quickly. The reported person does not find out who the report came from. We keep a report for as long as needed to handle it and to protect others.
On your phone itself
On your iPhone, porpor keeps the key of your anonymous account (in the iOS keychain), your language choice and whether SUPERPOR is on. Your pors, messages and besties are not stored on your phone.
Technical data
Like any online service, our server sees the IP address of your phone when the app connects. Our hosting partner may keep it briefly in log files together with the time, for the security of the service.
Why we are allowed to
- To make the app work (performance of the contract): your profile, your besties, your pors, games, badges and top lists.
- Because you gave consent: location, Bluetooth, camera and notifications. You withdraw that consent by turning the feature off in the app or in the settings of your iPhone.
- Because we have to keep the service safe (legitimate interest): preventing abuse, handling reports and technical log files.
- Because we want to know whether the website gets found (legitimate interest): the anonymous visitor numbers of porpor.be.
We make no decisions about you through automated profiling and we do not use your data for advertising.
Who sees what
- Your besties see your nickname, your avatar and its decoration, your shared counters and streaks, whether you already porred today and what you send them.
- Anyone who has your code can add you as a bestie right away and then sees your nickname and avatar. If your code ended up with the wrong person, get a fresh one in the settings and unfriend or block that person.
- Everyone can look at the top lists. They show both nicknames, both avatars and the score of each duo. The lists per country and per area show duos of which one of the two belongs there.
- Strangers nearby only see, over Bluetooth, a code that changes every five minutes.
Who we share data with
We sell nothing and we share nothing for advertising. We work with these parties, who only process data to keep porpor running:
| Party | What for | Where |
|---|---|---|
| Supabase | The database and the servers of porpor | European Union (Frankfurt, Germany) |
| Postmark | Sending a report about another user to our mailbox | United States |
| Umami | Anonymous visitor numbers of the website porpor.be | United States and European Union |
| Apple | Delivering notifications (Apple Push Notification service), the map on a por with a location (Apple Maps) and distributing the app through the App Store and TestFlight | Worldwide |
Supabase, Postmark, Umami and Apple are American companies. If data ends up outside the European Economic Area because of that, it happens with the safeguards European rules require, such as standard contractual clauses or the EU-US Data Privacy Framework. Beyond that we only pass on data when the law obliges us to.
The app contains no analytics, no ads and no third party software that tracks you. Only the website counts visits, see "The website porpor.be".
Deleting your account
In the app, go to Settings and choose "Delete my account". Gone right away: your profile, your push tokens, all your friendships, all pors from and to you, your games, your badges and your codes. What remains is no longer linked to you: badges your besties earned together with you stay theirs, and reports about you are kept for as long as needed (see "Reporting").
If you move your account to a new phone, the old phone is signed out and its push tokens are deleted.
Your rights
You may see your data, have it corrected, have it erased or take it with you, and you may ask us to restrict the processing or object to it. You can do a lot yourself in the app: change your nickname and avatar, turn features off or delete your account. For everything else, email help@porpor.be. Because porpor does not know your email address, we need your porpor code (Settings, "My code") to find your account. We reply within one month.
Not happy with our answer? You can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, dataprotectionauthority.be, or with the authority of the country you live in.
Young people
porpor is made for young people and adults. If you are younger than 13, only use porpor if a parent or guardian is fine with it. We do not ask your age, precisely because we want to know as little about you as possible. Are you a parent or guardian and do you want us to delete your child's account? Email us, or delete it together in the app.
A few tips: use a nickname instead of your real name, only share your code with people you know and only add your location to a por for someone you trust.
Security
All connections between the app and our server are encrypted. Every device has its own anonymous account and can only read its own data. Counters, streaks and badges are calculated on the server, so nobody can fake them.
The website porpor.be
This website sets no cookies and stores nothing on your device. The fonts and the video are on our own server. As with any website, the hosting partner may briefly keep your IP address and the time of your visit in log files.
To know how many people visit the site, we use Umami, a service for anonymous statistics. Umami counts which pages are viewed and sees which website you came from, your browser, your operating system, the kind of device, your screen size, your language and roughly where you are (country, region and city). To count visits, Umami turns your IP address and your browser into an anonymous code, and it works out that rough place from your IP address. The IP address itself is not kept. No name and no porpor account is linked to a visit, Umami does not follow you to other websites and we do not use the numbers for ads. If there is a porpor code in the address (as in porpor.be/connect/...), we take it out before anything goes to Umami.
Changes
When something changes in what porpor keeps, we update this page and put the new date at the top.