Privacy Policy

Effective October 8, 2026 · operated by Platform Thirteen, LLC

The LBI App ("the app," "we") is a guide to Long Beach Island — a summer passport, community rankings, and island information. We built it to collect as little about you as possible. This policy explains exactly what the app does and does not collect.

What we collect

• A random device identifier. On first launch the app generates a random ID (a UUID) and stores it in your device's secure keychain. It exists so your passport progress and votes stay tied to your phone. It is anonymous until you choose to sign in (below).
• Your in-app activity. Passport places you complete and the date and time you enter, ratings and reviews you publish, votes you cast, reports and blocks you make, and invitation responses.
• Your account. Browsing works without an account, but adding or editing Passport visits, inviting friends, responding to an invitation, and publishing feedback require sign-in. We collect your email address, your name only if Apple or Google provides it (or you share it), the sign-in identifier Apple or Google issues for the app, and the profile you choose during setup — a display name, a username, and (optionally) your home beach town.
• Friend invitation addresses. If you invite friends to a Passport visit, we store the email addresses you enter long enough to deliver and manage those invitations. Recipients must sign in with the invited address to accept.

What we do not collect

• No passwords. Sign-in uses a one-time email code, or Sign in with Apple / Google. We never see or store a password.
• No location. The app does not request or collect your device location.
• No photos or camera access. The current app release does not request camera access.
• No contacts, health, financial, or advertising data.

This website

The sections above describe the app. The website lbi.app collects the following:

• Page counts and load times, without cookies. The site uses Cloudflare Web Analytics to count visits and measure how fast pages load. Cloudflare Web Analytics sets no cookies and stores nothing in your browser. We see totals only: which pages were viewed and how quickly they loaded, the site a visit came from, and the browser, operating system, device type and country, never a record of one visitor.
• Sign-up forms. If you ask for season updates we store the email address you enter, the part of the page you signed up from, the time, your browser's user-agent string and your country. We use the address only to send the updates the form describes. A business listing request stores the business name, the kind of business, the contact you give and any link, with the same time, user-agent and country, and we may email those details to ourselves so we can reply. These forms do not store your IP address. Sign-ups are kept with Cloudflare, which hosts this site, until you ask us to remove them at hello@lbi.app.
• QR check-in. While a Passport season is open, the page behind a counter QR code offers a "Check in here" button. If you tap it, the page creates a random ID, keeps it in this browser's storage, and sends it with the stop's code to api.lbi.app. We record the stop, the date and time, and that random ID. Your IP address is used for a rate-limit counter that expires within about two minutes and is not saved with the visit. Outside a season the page offers no check-in and stores nothing.
• Links to the App Store and Google Play. Links to Google Play carry a label for the page they are on, such as the home page or a QR code, so Google can tell us how many installs each one led to. Links to the App Store carry no label. When you follow either link, your browser may tell the store that you came from lbi.app. The stores report totals, not who installed.
• Fonts. Most pages load typefaces from Google Fonts, so your browser contacts Google to fetch them.

How your data is used

The app uses your data only to operate its features — saving Passport visits, tracking progress, publishing ratings and reviews, delivering friend invitations, moderating community content, and tallying community votes. Your email is used for sign-in, account identity, and Passport invitations sent by you or to you. Invitation messages are transactional, not marketing. We do not use your data for advertising or tracking across other apps or websites.

Sharing

We do not sell or share your data with third parties for their own purposes. Your username, rating, written review, and visit date are public when you publish a review; your email address is never displayed. Accepted companions can see one another as part of the shared visit. App data is sent to our backend (api.lbi.app), hosted on Cloudflare; this website and its sign-up forms are hosted on Cloudflare too. Emails we send (sign-in codes, invitations, and the notice we send ourselves about a business listing request) are delivered through Amazon Web Services (Amazon SES). If you use Sign in with Apple or Google, those providers handle that sign-in under their own privacy policies.

Security & retention

Data is encrypted in transit (HTTPS). Your device identifier and signed-in session are held in the device's secure keychain. Account-owned Passport visits and reviews remain on our servers until you remove them or delete the account. Pending invitations expire with their Passport edition. Historical QR activity from an earlier release may remain associated only with an anonymous device identifier.

Your choices

You can browse without signing in and can edit or remove your own Passport visits and reviews at any time. Every public review includes report and block controls. To delete your account, use You → Delete account in the app; this removes your account-owned Passport visits, reviews, reports, blocks, pending invitations, email, and sign-in methods. Accepted friends keep their own independent Passport credit. Full details, including how to request deletion without the app: account deletion. To request deletion of historical anonymous-device records, contact us at hello@lbi.app.

Children

The app is not directed to children under 13 and we do not knowingly collect data from them.

Changes

We may update this policy; material changes will be reflected by a new effective date on this page.

Contact

Questions about privacy: hello@lbi.app.