Privacy Policy
Scrub Social ("the app", "we", "us") is operated by Salt Life Tech. This policy explains what we collect, why, and what control you have. We wrote it to be read, not skimmed past.
What we collect
- Account details. Your email address and password (stored hashed), or your Apple ID token if you sign in with Apple. If you use Sign in with Apple, we receive your name and email (or Apple's private relay address) only once, at first sign-in.
- Profile. Your name, username, role, specialty, current city, home city, next assignment city and dates, bio, interests, and profile photo. Everything on your profile is visible to other signed-in Scrub Social users unless you turn off Discoverable in Settings › Privacy.
- Content you create. Direct and group messages, including photos you send in them (photos are stored privately and can only be opened by the people in that conversation), community board posts, events, RSVPs, crew connections, blocks, and reports. Groups you create or join show your name to the other members.
- Location. Only if you turn on Live Location or tap "Use my current location". We convert your GPS position to a city name on your phone and store only the city. We never store or share your precise coordinates.
- Push token. If you enable notifications, a device token so we can deliver them. Turning notifications off deletes it.
- Support messages. When you use Contact Support or Send Feedback in the app, we receive your message and, so we don't have to ask, basic app and device information: app version and build, phone model and system version, whether notifications and location are allowed, your Show Activity setting, your current and next city, time zone, language, and whether you're on Wi-Fi or cellular. You can see exactly what's included before you send. A screenshot is sent only if you add one. Emails you send to any scrubsocialapp.com address are kept the same way so we can reply.
- Crash reports and app usage. If the app crashes or hits an error, we receive a report of what went wrong, your app version, device type and system version, linked to your account ID. We also record basic activity inside the app, linked to your account: when it's opened, when you sign in, post, RSVP, create an event or send a message (never what you wrote), your app version, and how long screens take to load. We use this to fix problems, improve Scrub Social, and tell whether an account is still in use (see Inactive accounts below), never for ads or tracking.
- Technical data. Standard server logs (IP address, device type, timestamps) kept by our hosting provider for security and debugging.
What we do not do
- We do not sell your data. Ever.
- We do not show ads or share your data with advertisers.
- We do not track you across other apps or websites.
- We do not read your direct or group messages, or look at the photos in them, except when a message is reported, and then only the reported messages, to enforce our Community Guidelines.
Why we use it
To run the app: showing you travelers, events, and boards in your city; delivering messages and notifications; keeping the community safe by acting on reports and blocks; and fixing bugs.
Who can see what
- Other users see your profile, your board posts, events you create, and that you are attending an event. They see your city, never your exact location. Anyone you block can no longer see your profile or contact you.
- Service providers. Data is stored with Supabase (database, authentication, file storage) and notifications are delivered through Expo's push service. Crash and error reports go to Sentry. Emails we send (sign-in links and replies from our team) are delivered by Resend, and our website and email are handled by Cloudflare. When you search for an event venue, the text you type is sent to Google Maps Platform to return matching places; no account details go with it. These providers process data on our behalf under their own privacy commitments and do not use it for their own purposes.
- Legal. We will disclose information if required by law or to protect someone's safety.
Your choices and rights
- Edit anything on your profile at any time from the Profile tab.
- Hide yourself from Discover with the Discoverable switch in Settings › Privacy.
- Block or report any user, message, post, event, or board from the "…" menu.
- Turn off Live Location and notifications in Settings.
- Delete your account from Settings › Delete Account. This permanently removes your profile, photos, messages, posts, connections, and login within minutes. It cannot be undone.
- Request a copy of your data or ask a question by emailing support@scrubsocialapp.com. We respond within 30 days.
Retention
We keep your data while your account exists. When you delete your account, it is removed immediately from our live database; backups roll off within 30 days. Reports you submitted are deleted with your account. Details of what is removed and what stays are on our account deletion page.
Support messages. Conversations with our team (emails and in-app Contact Support or Send Feedback, with the app and device info attached) are kept while they are open and for up to 2 years after they are resolved, counted from the last message, so we can follow up; screenshots and attachments are removed after 1 year. Messages marked as spam are deleted within 30 days. Deleting your account deletes the support conversations linked to your account and your screenshots too.
Inactive accounts. If you haven't used Scrub Social for 12 months we'll email you to check in. If it reaches 18 months with no activity, we'll email again to let you know your account will be deleted 30 days later, and how to keep it (opening the app or tapping the link in that email is enough). After that notice period the account and everything in it is deleted the same way as when you delete it yourself. Sign-ups that never confirmed their email address are removed after 30 days.
Children
Scrub Social is for working healthcare professionals and is not directed to anyone under 18. We do not knowingly collect data from minors; if you believe a minor has an account, email us and we will remove it.
Security
Data is encrypted in transit and at rest. Access to the database is restricted by row-level security so each user can only read what they are allowed to see. No system is perfectly secure, and we will notify you if a breach affects your data.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect. The date at the top always reflects the current version.
Contact
Salt Life Tech · support@scrubsocialapp.com