Your crew data stays purposeful.
This Privacy Policy explains how Suffly handles information when you use the Suffly mobile application and the public website at suffly.5in24.com.
Information you provide
- Account and profile information, including a Firebase Account ID, display name, optional phone number, Google-linked email, and optional profile image.
- Shared crew content, including crew names, membership, expenses, split amounts, notes, plans, selected places and coordinates, Suffs results, settlement records, and invite codes.
- Privacy or account-deletion request information submitted through this website.
Information processed automatically
Suffly and its service providers may process technical information needed to operate the app, such as authentication state, Firebase Cloud Messaging registration tokens, app diagnostics, network information, and advertising/device identifiers where available. Google Mobile Ads may process IP address, approximate location signals, device identifiers, interactions, and diagnostics for advertising, analytics, and fraud prevention, subject to regional consent choices.
How information is used
We use information to authenticate users, synchronize crew activity, calculate balances, display plans and Suffs history, deliver notifications, provide optional account recovery and Google Drive backup, show and measure advertisements, protect the service, respond to privacy requests, and support account deletion.
Location and maps
Suffly does not require continuous device-location tracking. When you deliberately choose a plan location, the place name and coordinates can be saved with the plan and shared with members of that crew. Place searches are sent to OpenStreetMap Nominatim, and map tiles are loaded from OpenStreetMap services.
Service providers
Suffly uses Firebase Authentication, Realtime Database, Cloud Firestore, Firebase Cloud Messaging, Google Sign-In, optional Google Drive app-data backup, Google Mobile Ads and User Messaging Platform, OpenStreetMap/Nominatim, and a Heroku-hosted backend. These providers process information under their own terms and privacy policies as needed to provide their services.
Sharing
Crew content is visible to authenticated members of that crew. Service providers receive information only as needed for their functions. We do not sell personal information. We may disclose information where legally required or necessary to protect users, the service, or others.
Retention and deletion
Account and operational data is retained while needed to provide Suffly, comply with legal obligations, resolve disputes, and protect the service. The in-app Delete Account flow removes the user profile, memberships, custom avatar, registered device data, and Firebase Authentication account after crew-ownership checks. Shared crew records can remain when they form part of other members’ shared history. Open privacy/deletion requests are retained until processed and then removed or minimized when no longer needed.
Your choices
You can edit profile information, export local Suffly data, manage advertising privacy choices where required, leave crews you do not own, transfer or delete owned crews, and delete your account in the app. You can also use the public account-deletion page after uninstalling the app.
Security and international processing
We use authenticated access rules, encrypted network connections, restricted administrative credentials, and service-specific security controls. No system can guarantee absolute security. Service providers may process information in countries other than your own.
Children
Suffly is not directed to children under 13. We do not knowingly collect personal information from children under 13. A parent or guardian who believes a child provided information can submit a privacy inquiry below.
Changes to this policy
We may update this policy as Suffly or applicable requirements change. The effective date above will be updated when material changes are published.
Contact and privacy inquiries
Use this form for access, correction, privacy, or data-handling questions. Do not include passwords or highly sensitive financial information.