1. Controller and contact
Controller: Alan Dlin. Address: Ciudad Autónoma de Buenos Aires, Argentina. Privacy and support contact: dropapp.ok@gmail.com. Effective from 14 de noviembre de 2026.
2. Summary
Text is interpreted locally using DROP rules. Images use Apple Vision on iPhone and bundled Google ML Kit text recognition on Android. Confirmed events and reminders are stored on the device or its calendar and reminder services.
An account is required to enter the app. Identity and profile data support account access and social features. Sharing inside DROP sends the selected content to the server and recipients. Account organizer groups, polls, balances and card schedules synchronize with owner-based permissions.
DROP includes no advertising or proprietary analytics. We do not sell data or use it to train AI models. Providers may process the technical information disclosed in this policy.
3. Device data and permissions
Text and images are processed on the device. Images are selected with the system photo picker, rather than unrestricted photo library or integrated camera access. Calendar and Reminders access is used to read and manage commitments with permission; your Apple or other configured accounts may sync them.
Contacts are used locally for recipient suggestions; the address book is not uploaded to DROP servers. History and preferences have local copies. Account organizer groups, polls, balances and card schedules also synchronize through Supabase. In a DROP group, polls and each member's answer are visible to that group's members. Sessions are protected by Keychain on Apple or Android Keystore encryption. On iPhone, notifications are local. On Android, DROP uses Firebase Cloud Messaging to alert you promptly when something is shared with you (see «Providers»).
4. Speech, Watch, widgets and Shortcuts
Apple Speech is required to run on-device when supported. Otherwise Apple may process speech under its policies. Watch audio is recorded temporarily and transferred to the paired iPhone using WatchConnectivity for transcription and a proposed commitment. The iPhone transcription job cleans its temporary copy.
The Watch bridge synchronizes selected items, invitations, theme and Pro status. A minimal local widget snapshot contains titles, dates, all-day flags, symbols, emoji, details and theme, shared with the signed extension using Keychain.
The Write DROP Shortcut can save one validated commitment without opening the app preview. It requires existing permissions and local authentication, checks duplicates and asks for AM/PM when needed.
5. Account and social information
Supabase provides authentication and database services. Data includes email, password hash when used, sessions and refresh tokens, display name, username, time zone, discoverability and timestamps. DROP does not receive payment card details. It reports Pro status, product, expiry, whether you are in a free trial and lifetime purchase status.
Social data can include friendship requests, friendships, private nicknames, blocks, reports, invite links, groups and membership. In-app sharing transmits the selected title, type, date, time, place, notes, recurrence and recipients.
The content of a shared DROP is deleted from the server once all its recipients have responded, or after 7 days if nobody responded. Only a record without content remains (who sent it, to whom and when) so that changes or cancellations can be announced. For a shared event, your answer (“Going”, “Maybe” or “Not going”) is visible to the person who shared it. Lists in a DROP group (their name, what is added and who marked it as done) are stored on the server and are visible to that group's members.
If you use the family plan, the server stores who invited whom, the status of each invitation (pending, accepted, declined or ended) and its dates, and whether the holder's plan is in its free trial. The holder and invited people see each other's display name and @username; they do not see each other's events, reminders or what they share with other people.
Row-level policies restrict access based on identity, profile visibility, participation and recipients. They do not mean users can only see their own data.
5a. Crash and reading reports
If DROP closes unexpectedly on your phone, the system (Apple MetricKit on iPhone; Android itself on Android) creates a technical report: phone model and OS, DROP version and the place in the code where it failed. When you are signed in, DROP sends it to its server so it can be fixed. It does not include your events, reminders, contacts or texts.
If you tap “Was this read wrong?” in the preview of an image and agree, DROP sends the text read from that image (with the position of each line) and what it proposed, to improve its reading rules. The image itself is never sent. That text may contain information that appeared in the screenshot.
Only the DROP controller can see these reports. They are not used for advertising or to train artificial intelligence models, and they are deleted automatically after 90 days.
6. Google information
Google sign-in identifies you to DROP. Separately, you may optionally connect Google Calendar and Google Tasks to keep your own DROP items available across iPhone and Android. You may continue signing into DROP with Apple or email.
Connecting Calendar and Tasks grants DROP permission to read, create, edit and delete events in calendars you own and your tasks. DROP uses this access to synchronize items identified as DROP, including edits, completion and deletion. It does not indiscriminately copy all calendar or task content to the DROP server. The integration uses your primary owned calendar and default Tasks list.
Google descriptions contain versioned DROP metadata with the logical item identifier, owning DROP account, dates, times, recurrence and alert configuration. This restores custom times and multiple alerts on both platforms because the Tasks due field preserves the day but not a DROP alert time.
This personal synchronization content travels between Google and your devices and is not stored in Supabase Database or Storage. The authorization server exchanges codes and refreshes credentials transiently. Devices protect access and refresh tokens with Apple Keychain or Android Keystore encryption, excluded from backup. DROP does not log these tokens.
The account device register contains a random installation identifier, platform and last activity to recommend connecting multiple devices. It does not contain events, tasks, device names or hardware identifiers.
Disconnect Google under your DROP account Connections to delete the authorization stored on that device. Revoke DROP access for your Google account at https://myaccount.google.com/connections Disconnecting does not delete items already stored on your device or in Google; manage them in those applications.
DROP uses Google API data only for authorized features and complies with the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy This data is not used for advertising or sold.
7. Providers and international transfers
Supabase: authentication and database. DROP's servers are in the São Paulo, Brazil region. Google: Google sign-in and delivery of code and confirmation emails, processing recipient addresses and email contents. Codes have six digits and expire after one hour.
Apple: App Store purchases, Speech, Calendar, Reminders and Watch communication. Website host: Vercel Inc. (Estados Unidos), which may process access logs.
Because DROP uses these providers, your data may be stored or processed in Brazil, the United States and other countries where they operate, under the safeguards they provide.
Android uses bundled ML Kit on-device text recognition. The SDK may contact Google for compatibility, maintenance and technical usage or performance metrics; DROP adds no proprietary analytics and does not send selected photos to its server. Android purchases, when available, use Google Play Billing. Google Calendar and Tasks process the content you authorize when connecting those services.
Firebase Cloud Messaging (Google), Android only: your phone receives a notification identifier that DROP stores on its server, linked to your account, so it can wake the phone when a DROP, friend request, invitation, group poll or answer arrives. The message that goes through Google carries no content (no titles, names or dates): it only signals that there is something new; the phone fetches it from DROP and shows the notification. DROP does not use Firebase Analytics or any other analytics. The identifier is deleted when you sign out, delete your account or Google expires it.
8. Purposes and legal basis
Processing supports the commitments you request, account authentication, subscription limits, chosen recipients, security and support. Device permissions and optional Google connection choices require your authorization. We do not use your data for other purposes without telling you first.
9. Retention and security
Account data is kept while the account exists and removed through account deletion and schema cascades. Apple calendar data, local app data and copies saved by other recipients follow different lifecycles.
Providers may keep technical authentication, security and access records (such as IP address and client information) and backups for a limited time, under their own policies.
Implemented measures include HTTPS/TLS connections, hashed passwords, row-level access policies and Keychain sessions. No claim of end-to-end encryption, complete anonymity or certification is made.
10. Your rights and deletion
You can request access, correction, updating and deletion under articles 14–16 of Argentine Law 25.326, through the app or dropapp.ok@gmail.com. Free access can be exercised every six months, or earlier with a legitimate interest. Applicable statutory deadlines prevail over provisional operational estimates.
The Argentine Access to Public Information Agency (AAIP) is the supervisory authority for Law 25.326 and receives personal data complaints. Visit https://www.argentina.gob.ar/aaip/datospersonales
Delete the account in Settings → Your account → Delete account. Apple subscriptions must be cancelled separately. Calendar items, local storage and copies already saved by others are not removed by account deletion.
11. Children
Minimum age to create an account: 13. If you are younger, you can use DROP without an account: your schedule stays on your device.
12. Website and changes
This site shows the app with demos and fictional data: it does not connect to your account or your calendars. It has no analytics, cookies, remote fonts or third-party scripts. The host (Vercel Inc., United States) may keep technical access logs.
Updates and their effective date will be published here. Contact: dropapp.ok@gmail.com.