Privacy Policy
Effective Date: March 22, 2026
Tater ("we", "our", or "us") operates the Tater mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use our App.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Display name and username
- Email address (via Firebase Authentication)
- Authentication credentials managed by Google Firebase (we do not store your password directly)
- Profile photo (if you choose to upload one)
1.2 Device Information
- Push notification tokens (Expo Push Tokens) to deliver notifications about your potatoes
- Device type and operating system version for compatibility and debugging
1.3 User-Generated Content
- Potato names and cover photos
- Chain link stories, photos, and captions
- Comments and votes on chain links
- Friend requests and social connections
1.4 Optional Location Data
If you choose to enable location features, we collect city-level location data to show where potatoes have traveled. This data is approximate (city-level only) and is never precise GPS coordinates. Location sharing is entirely optional and can be disabled at any time.
1.5 Usage Data
- App interactions and feature usage (for improving the App)
- Error and crash reports (via Sentry) to fix bugs and improve stability
- In-app purchase history for sprout transactions
2. How We Use Your Information
We use your information to:
- Provide game functionality: Create and pass potatoes, manage chains, track scores and leaderboards, process sprout transactions and revivals
- Send notifications: Alert you when potatoes are about to expire, when you receive a pass, when friends interact with your content, and when revival events are happening
- Moderate content: Review uploaded images and text for compliance with community guidelines using automated tools (AWS Rekognition) and manual review
- Improve the App: Analyze usage patterns, fix bugs, and develop new features
- Prevent abuse: Enforce rate limits, detect fraudulent activity, and maintain fair gameplay
3. Data Retention
- Activity feed data: Automatically deleted after 90 days (TTL-based expiration)
- Potato chains and user content: Retained indefinitely as long as your account is active, as chain history is a core part of the game experience
- Idempotency records: Automatically deleted after 1 hour
- Account data: Retained until you request account deletion
- Permanently dead potatoes: Retained as memorials (viewable but not interactive) for 72 hours after expiry, then archived
4. Third-Party Services
We use the following third-party services that may process your data:
- Google Firebase (Authentication, Cloud Messaging) — Firebase Privacy Policy
- Expo / React Native (Push Notifications, App Updates) — Expo Privacy Policy
- Amazon Web Services (Data Storage, Image Moderation, Content Delivery) — AWS Privacy Policy
- Sentry (Error Monitoring and Crash Reporting) — Sentry Privacy Policy
- RevenueCat (In-App Purchase Management) — RevenueCat Privacy Policy
5. Data Sharing
We do not sell your personal information. We share data only in the following circumstances:
- With other users as part of normal gameplay (e.g., your display name and content appear in chains you participate in)
- With third-party service providers listed above, solely to operate the App
- When required by law or to protect our rights
6. Your Rights
You have the right to:
- Access your data: Request a copy of the personal data we hold about you
- Delete your account: Request complete deletion of your account and associated data by contacting us at the email below. Account deletion is processed within 30 days.
- Export your data: Request a machine-readable export of your data
- Opt out of notifications: Disable push notifications through your device settings at any time
- Withdraw location consent: Disable location features in the App settings
7. Data Security
We protect your data using industry-standard measures including encrypted data transmission (TLS), secure cloud infrastructure (AWS), and access controls. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
8. Children's Privacy (COPPA Compliance)
Tater is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete that information promptly. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at the email below.
9. International Data Transfers
Your data is processed and stored in the United States using Amazon Web Services. By using the App, you consent to the transfer of your data to the United States.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email. Continued use of the App after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:
Email: taterappxyz@gmail.com