Privacy Policy

Dignity Access is built so your medical needs stay on your device and your position is never tracked. This is not a policy promise — it is how the app is architected. The exceptions are deliberate actions you take: submitting a new restroom sends the map point you chose for it, and downloading map data tells our content server roughly which area you are looking at. Both are described below.

What we do not collect

• Passive location tracking — the app never transmits your position in the background, and distance sorting runs entirely on your phone. Moving a pin to your current position is stored only on your own device. The one time a coordinate does leave your phone is when you deliberately submit a new restroom location: that submission contains the map point you are adding, which defaults to your current position and which you can move before submitting. See “What reaches our servers”.
• Dignity Profile data — medical, accessibility, and privacy preferences are stored in local device storage only and are never synced to the cloud.
• Accounts or email addresses — the app uses anonymous sign-in with no personal identity attached.
• Location history or tracking logs — we do not write code to record where you go.

What the app stores locally

Your Dignity Profile, offline map cache, pin vote cooldown timestamps, any pin positions you have corrected, and your subscription entitlement cache are kept on your device using standard local storage APIs.

What reaches our servers

• Public restroom map data — coordinates, facility metrics, and access notes for published points of interest. This data is the same for every user.
• Community submissions — when you add a new restroom, we receive the map coordinate you chose for it (defaulting to your current position, editable before you submit) plus the facility details you entered. Community votes contain only the pin, which detail you voted on, and up/down. Neither contains your Dignity Profile.
• Anonymous auth tokens — used to enforce fair-use limits on community actions. These tokens are not linked to your name, email, or medical information.
• Device-level integrity signals — App Check and installation identifiers verify that requests come from the genuine app and prevent abuse. These are device-level identifiers only, never linked to your name, email, or medical information.

Community submissions and votes are tied only to an anonymous token — never to your name, email, or medical information. We do not store information about who submitted a suggestion or a vote.

Background refresh

The app does not refresh on a timer. Map data is downloaded as small fixed tiles covering the area you are looking at, fetched when the map stops moving. Because a tile covers a fixed patch of the world, our content server necessarily sees which tiles your app requested, and therefore roughly which area of the map you are viewing — to about a few kilometres, together with the IP address any web request carries. We do not build profiles from these requests, and they are never joined to your Dignity Profile, your votes, or an account, because there is no account. We are describing this precisely rather than claiming the server learns nothing.

Subscriptions

Dignity Pass purchases are processed by Apple App Store or Google Play through RevenueCat. Payment information is handled entirely by those platforms — Bennett Apps LLC does not receive or store your card details.

Third-party services

• Google Firebase (Cloud Firestore, App Check, anonymous authentication) — powers the community restroom database, anti-abuse enforcement, and anonymous sign-in. It processes anonymous tokens and device/installation identifiers only, never linked to your personal identity. App Check verifies the app itself using Apple App Attest / DeviceCheck on iPhone and iPad and Google Play Integrity on Android — device-level attestation only, with no profile or location data attached. The app ships no analytics, advertising, or attribution SDK, and requests no advertising identifier.
• Apple App Store, Google Play Billing & RevenueCat — process Dignity Pass subscription purchase history, tied only to an anonymous identifier.
• Background map imagery is served by OpenStreetMap contributors via standard tile servers. The restroom pin data itself is served from our own content delivery network at dignityaccess.app.
• Turn-by-turn navigation opens your device's maps application; we do not receive routing data back.
• Our website may use contact form and chat widgets that collect information you voluntarily submit.

Children

Dignity Access is intended for users age 13 and older. We do not knowingly collect personal information from children under 13.

Changes

We may update this policy as the app evolves. Material changes will be reflected on this page with an updated effective date.

Contact

Questions about privacy: joseph@bennettappsllc.dev