Privacy Policy
Last updated September 10, 2026
Draft for review. This describes what the app actually does today, but it hasn't been reviewed by a lawyer. Have it checked before a wide public launch, and update the contact address below.
PullUp helps people find car meets, see who's going, and connect with drivers nearby. This page explains what we collect, why, and what control you have. The short version: we collect what the app needs to work, we never sell it, and you can delete everything at any time.
What we collect
- Account details — your email address, username, display name and a password. We never see or store your password in readable form; it's handled by our authentication provider.
- Profile content — anything you add: bio, city, link, profile and banner photos, and the cars in your garage.
- What you post — photos, captions, comments, likes, meets you host and RSVPs.
- Messages — the contents of group chats, meet chats and direct messages, so they can be delivered.
- Who you follow and block.
- Approximate location, only when you turn it on — see below.
- Error reports — if the app crashes, a short technical description of the error, the page it happened on and your browser type, so we can fix it.
Location, specifically
Location sharing is off by default and only turns on when you choose it. When it's on:
- Your position is rounded to about 1 kilometre before it is stored. Our database refuses to store anything more precise, even if the app sent it. That's accurate enough to show "2.4 mi away" and too vague to locate a home.
- Other people see your approximate distance, never an exact point.
- Turning sharing off deletes your stored location — it isn't just hidden.
Meet locations are different: when you host a meet, its location is shown to everyone, because the point of a meet is for people to find it.
What we don't do
- We don't sell your information to anyone.
- We don't show you advertising or share your data with advertisers.
- We don't use third-party tracking scripts.
Who can see what
- Everyone signed in can see your profile, garage, public posts, followers and the meets you host.
- Only you can see posts you've archived.
- Only chat members can read a chat's messages.
- If you block someone, our server stops showing them your profile, posts, meets, messages and location, and stops showing you theirs.
- Our moderators can review content that's been reported, including a reported message, to decide whether it breaks the rules.
Services we rely on
- Supabase stores the database, photos and handles sign-in.
- Netlify hosts the app.
- OpenFreeMap / OpenStreetMap provide the map. Loading map tiles means your browser requests them from their servers.
Deleting your data
You can delete your account from Profile → Edit profile → Delete my account. This permanently removes your profile, photos (including the image files themselves), posts, meets, messages, follows and location. It cannot be undone. You can also delete individual posts and messages at any time.
Age
PullUp is not for children under 13, and you must confirm you're 13 or older to create an account. If you believe a child under 13 has an account, contact us and we'll remove it.
Security
Access to data is enforced by the database itself on every request, not just by the app, so a fault in the app can't expose information you haven't shared. No system is perfectly secure, and we'll tell affected users promptly if something goes wrong.
Changes
If this policy changes in a way that matters, we'll say so in the app before it takes effect.
Contact
Questions or deletion requests: [add a contact email before launch]