Privacy Policy

Overview

Brickfeed, operated by Zanello Studios, outlines how it collects, uses, and protects user information in this privacy document. It applies to the Brickfeed app and the brickfeed.app website.

1. Information We Collect

• Account Information — Username, email address, and securely stored passwords via Supabase.
• Date of Birth — Collected at signup to confirm you meet the minimum age and to apply under-18 privacy defaults. It is not shown on your profile. If the date entered is under the minimum age, the account is locked and the date is kept as a record of that decision.
• Profile Information — Display name, profile photo, and bio.
• User Content — Photos, videos, captions, comments, direct messages, group chat messages, Studs (ephemeral photo/video content), Stud Highlights, and Build Logs.
• Collection Data — LEGO set numbers, build status (owned, built, wanted), and piece counts sourced from Rebrickable. Visibility is controlled by the user's profile settings.
• Marketplace Data — Listing titles, descriptions, photos, prices, and general location details; listings you have bought, liked, or saved; and reviews you leave or receive. Reviews are public and show the reviewer's username.
• Group Activity — Group names, descriptions, cover photos, member lists, channels, selected roles, and associated posts and messages.
• Group Form Responses — Answers a member submits to a custom form a group's moderators create, plus an optional photo. Visible only to the submitter and that group's moderators and owner, not the wider group.
• Moderation Action Records — A log of moderation actions taken within a group (mutes, bans, role changes, content removals) and who took them, kept for accountability and safety review.
• Clutch Points & Giveaway Entries — Your Clutch Points balance, the activity that earned or spent points, your Giveaway entries, and Giveaway results.
• Giveaway Prize Shipping Information — If you win a Giveaway, we collect a shipping name, address, and optional phone number through a dedicated in-app claim form, solely to deliver your prize. This information is stored in a restricted system that only you and the Brickfeed staff fulfilling your prize can access. It is never visible to other users and is never sold or shared beyond what is needed to ship the item (for example, with a shipping carrier).
• Purchase & Subscription Data — Active subscription tiers (payment processing handled by Apple or Google Play, depending on your platform; RevenueCat manages subscription history).
• Support Requests — The messages and contact details you send when you contact support or submit a report.
• Push Notification Tokens — Device tokens for notification delivery.
• Usage Data — Interaction patterns like posts viewed, likes, and follows; when you were last active; and a daily record of whether you used the app, which only Brickfeed staff can see. Creators see the total number of views and saves on their own posts, not who viewed them.
• Diagnostic Data — Crash reports for bug fixes and stability improvements.

2. How We Use Your Information

Data collected supports account creation and management, age verification, content display, social features (following, liking, commenting, messaging, groups), marketplace functionality, Clutch Points and Giveaway prize fulfillment, post insights for creators, notification delivery, badge subscription processing, support, abuse investigation, and app performance improvement.

Where the law requires a legal basis (for example, in the EEA or UK), we process your information to perform our contract with you (providing Brickfeed), for our legitimate interests (keeping the platform safe, preventing fraud and abuse, and improving the service), to comply with legal obligations, and with your consent where we ask for it (such as push notifications and device permissions).

We do not sell your data. We do not use your data for third-party advertising.

3. Direct Messages

Direct messages between users are private to the participants and are not visible to other users. They are encrypted in transit but are not end-to-end encrypted. The moderation team accesses message content only when a user or message receives a report through the app's reporting tool, and solely to evaluate that specific report, or where required by law.

4. Groups

Group content — posts, chat messages, announcements, and member lists — is visible to all group members by default, unless a group moderator restricts a channel to specific roles or badge tiers. Groups may include chat channels, member-selected roles, and forms built by group moderators; responses submitted to a group form are visible only to the submitter and that group's moderators and owner, not the wider membership. Group creators and administrators manage membership and content, and a record of their moderation actions (mutes, bans, role changes) is kept within the group. The moderation team may access group content when reported.

5. Automated Moderation

To keep Brickfeed safe, uploaded photos are automatically scanned for content that violates our policies, and text in posts, comments, and chat is automatically checked against a list of prohibited words. Content flagged by these systems may be blocked or held for review by our moderation team.

6. Third-Party Services

• Supabase — Database, authentication, and file storage.
• Vercel — Hosting and privacy-friendly visitor analytics for the brickfeed.app website.
• RevenueCat — Subscription and purchase management.
• Apple / Google Play — Payment processing for App Store and Play Store subscriptions (card details never received by Zanello Studios).
• Expo — Push notification delivery.
• Apple Sign In / Google Sign In — Optional authentication.
• Rebrickable — LEGO set search functionality.
• Zippopotam.us — Postal code geocoding for marketplace locations.
• AWS Rekognition — Automated scanning of uploaded photos to detect content that violates our policies.
• Brickognize — Identifies LEGO parts, minifigs, and sets from photos submitted through the Brick Scan feature.
• Giphy — GIF search for Stud content.
• Shipping carriers — Receive a Giveaway winner's shipping name, address, and (if provided) phone number to deliver the prize.
• Linked websites — When you post a link, our servers fetch that page to build a preview card. News feeds shown in group channels are fetched from the publishers' public feeds. These requests come from Brickfeed's servers, not your device.

7. Website, Cookies & Analytics

The brickfeed.app website uses essential cookies to keep you signed in. We use Vercel Web Analytics to count page views and visits; it does not use cookies or track you across other websites. We do not use advertising cookies.

8. Device Permissions

With your permission, the app accesses your camera, microphone, and photo library only when you use features that need them, such as creating a post, recording a video, or using Brick Scan, and sends you push notifications if you allow them. You can change these permissions at any time in your device settings.

9. Data Storage and Security

Data resides on Supabase servers in the United States with industry-standard protections including encrypted HTTPS connections and secure authentication. If you use Brickfeed from outside the United States, your information is transferred to and processed in the United States. No method of transmission over the internet is 100% secure.

10. Children's Privacy

Accounts require users to be at least 13 years old. Accounts for users between 13 and 17 default to a private profile, restricting visibility of their content and profile to approved followers. We do not knowingly collect data from anyone under 13. Anyone discovering an underage account should contact brickfeedapp@gmail.com for deletion.

11. Your Rights

Users can access or update information through profile settings, delete accounts via Settings → Delete Account, request data copies by contacting us, and manage or cancel subscriptions through iOS Settings or the Google Play app.

EEA and UK residents have GDPR rights to access, correct, delete, restrict, or object to processing of their data, to data portability, to withdraw consent, and to file a complaint with their local data protection authority. California residents have CCPA rights regarding data collection and deletion requests. To exercise any of these rights, contact brickfeedapp@gmail.com.

12. Data Retention

• Messages — Content removed after 12 months of inactivity; metadata retained longer.
• Reported content — Retained up to 24 months for safety reviews.
• Marketplace listings — Retained 24 months after sale or removal.
• Account data — Permanently deleted within 30 days of account deletion.
• Subscription records — Managed by RevenueCat and Apple or Google Play, depending on your platform.
• Studs — Active for 24 hours in the feed; media files are retained on our servers but no longer surfaced after expiration. Studs saved to a Highlight remain stored until the user deletes the Highlight.
• Build Logs — Retained as long as the account is active; permanently deleted within 30 days of account deletion.
• Collection Data — Retained as long as the account is active; permanently deleted within 30 days of account deletion.
• Group Chat Messages — Retained as long as the group exists; a group moderator or owner can delete an individual message at any time.
• Group Form Responses — Retained as long as the group exists; a group moderator or owner can delete an individual response at any time.
• Moderation Action Records — Retained as long as the group exists, for accountability and safety review.
• Giveaway Prize Shipping Information — Shipping information is automatically deleted 30 days after a prize ships.
• Daily Activity Records — Automatically deleted after 7 days.
• Clutch Points, Giveaway Entries & Marketplace Reviews — Retained as long as the account is active; permanently deleted within 30 days of account deletion.
• Support Requests — Retained as long as needed to resolve the request and keep a record of it.

13. Content You Post

Users retain ownership of posted content but grant Zanello Studios a non-exclusive, royalty-free, worldwide license to display, reproduce, and distribute it for app use, promotional materials, and press coverage, as described in our Terms. Reasonable credit to usernames is provided when featuring external content. Users may request promotional material removal by contacting brickfeedapp@gmail.com, though previously published materials cannot be guaranteed removed.

14. Changes to This Policy

Updates occur periodically with notification through date changes. Continued app use constitutes acceptance of modifications.