OutsidePrivacy Policy
This policy explains how Outside handles your personal data, in line with Brazil's General Data Protection Law (Law 13,709/2018, "LGPD") and other applicable laws. The data controller is Lucas Campos, an individual based in Brazil who operates Outside. Data protection contact: suporte@gooutside.click.
1. Data we collect
- Account: email, password (stored only as an irreversible hash) or your Sign in with Apple or Google identifier; name, @handle, bio and profile photo.
- Precise location: with your permission, your device position while the app is open (on launch, when returning and every 5 minutes while in use) and when you post or interact. Outside does not collect location in the background.
- Content you create: posts, photos, comments, likes, meetups and RSVPs, tagged people, places you create and favorite.
- Social connections: who you follow, your followers and follow requests.
- Technical data: IP address, access date and time and request type, kept in server logs.
We do not collect address book contacts, health or financial data, or advertising identifiers. We use no third-party analytics or advertising SDKs and do not track you across other apps or websites.
2. How we use it and legal bases
- Create and run your account and sign you in: performance of contract.
- Show where each post happened, suggest places and show nearby people and stories: performance of contract, and consent for device location.
- Show your content to the people you allow: performance of contract.
- Security, fraud and abuse prevention and handling reports: legitimate interest.
- Keep access logs for 6 months: legal obligation (Brazilian Internet Civil Framework, art. 15).
3. What other people see
Your name, @handle, photo and bio are public inside the app. Posts and connections are visible to everyone or, with a private profile, only to approved followers. Each post shows the place where it was made. Your current position follows your "Who sees your location" choice: nobody, followers (approximate position of about 110 m, for up to 24 hours) or everyone (people who don't follow you only see the area, about 1 km). Your exact position is never shown to other users.
4. Sharing
We do not sell or rent your data. We only share it with processors needed to run the service:
- Amazon Web Services (USA): server, database and photo hosting.
- Apple and Google: only to verify sign-in when you choose those options.
- Photon/OpenStreetMap (Komoot, Germany): approximate search coordinates are sent, without identifying you, to suggest places and addresses.
- Authorities, when required by court order or law.
5. Retention
- Location history: 30 days, or sooner if you delete it.
- Last known position: until you update or hide it, or delete your account.
- Account and content: while your account exists. When you delete your account, everything is erased and backups are overwritten within 30 days.
- Access logs: 6 months.
6. Security
We use encrypted connections (HTTPS/TLS), hashed passwords and short-lived session tokens. On your device, the cache is encrypted and credentials are kept in the iOS Keychain. No system is completely secure. If a significant incident happens, we will notify you and the authorities.
7. Your rights
You can confirm processing, access, correct, port and delete your data, withdraw consent and object to processing. Much of this is in the app itself: edit profile, location privacy, delete location history and delete account. For anything else, email suporte@gooutside.click. We reply within 15 days. You may also complain to your data protection authority (in Brazil, the ANPD).
8. Minimum age
Outside is for people aged 18 and over. We do not knowingly collect data from minors and will delete any account found to belong to one.
9. Changes
If this policy changes materially, we will let you know in the app before the change takes effect. The date at the top shows the current version.