Privacy
Last updated [DATE]. Applies to the TownEye app and this website.
TownEye is a local incident reporting app for residents of Failsworth. It handles personal data — your email address, the reports you post and roughly where you are — so this page sets out exactly what we hold, why, and how to get rid of it.
Short version: we keep the minimum needed to run a local reporting app, we never sell it, reports delete themselves after twelve months, and deleting your account deletes everything immediately and for real.
Who we are
TownEye is operated by Flagrant AI [REGISTERED COMPANY NAME AND NUMBER], [REGISTERED ADDRESS], which is the data controller for the personal data described here. For anything on this page, contact privacy@flagrantai.com.
What we collect
- Your account. Email address and password. The password is hashed by our authentication provider; we never see it.
- Your profile. The display name and street or area you give us when you sign up. Both are shown to other residents on your reports.
- Your reports. The category, description, optional photo, the location of the pin, a street label for it, and the time you posted.
- Your comments on reports, and any content you flag for a moderator.
- An approximate home location, rounded on your device to around 100 metres, and only if you allow location access. It exists solely to work out whether a new report is close enough to notify you about. It is never shown to anyone.
- A notification token for your device, and your category and distance preferences — only if you turn notifications on.
We do not use analytics or advertising trackers, and there is no face recognition or automatic identification of people anywhere in TownEye.
Why we hold it, and our lawful basis
We process this data to run a local incident feed for residents of one area: to show reports to neighbours, place them on a map, let people search past reports, and moderate content that shouldn't be public.
Our lawful basis is legitimate interests — keeping neighbours informed about safety in the place they live. We have balanced that against your privacy, which is why location is coarse, reports expire, and nothing is shared outside the app. You can object at any time by deleting your account.
Who can see what
- Other signed-in residents see published reports: the category, description, photo, map pin, time, and the display name and area of whoever posted it.
- Moderators — residents who volunteer to review flagged content — additionally see reports held for review and the reasons people gave for flagging something.
- Nobody sees your email address, your notification settings, or your approximate home location.
Photographs are stored privately and can only be loaded through short-lived links generated for signed-in residents. They are not publicly addressable on the internet.
Photographs of people
Please don't photograph identifiable people. When you attach a photo you are asked whether anyone in it is recognisable; if you say yes, the report is held and a moderator reviews it before anyone else can see it. Any resident can flag a report or comment, which sends it to the same queue.
How long we keep it
- Reports and their photos are deleted automatically twelve months after posting, unless a moderator has marked the report as an active case. This runs as a scheduled job, not a manual clear-out.
- Your account and everything attached to it is kept until you delete it.
Deleting everything
In the app: Profile → Delete account and all my data. It removes your account, your reports, their photographs, your comments, your notification settings and your device token. Immediately and permanently — nothing is archived, hidden or soft-deleted, and we cannot recover it afterwards. Alternatively, email privacy@flagrantai.com and we will do it for you.
Where it's stored, and who processes it
- Supabase hosts the database, the authentication and the photo storage. Data is held in [CONFIRM REGION — check your Supabase project's region and state it here].
- Expo delivers push notifications, which means a device token and the notification text pass through their service.
- OpenStreetMap supplies map tiles and street lookups. Your browser or app requests these directly, so they see the map area you are looking at.
We do not sell personal data, and we do not share it with advertisers.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything inaccurate — your name and area are editable in the app;
- delete your data, which you can do yourself at any time;
- restrict or object to how we use it;
- provide it in a portable format.
Email privacy@flagrantai.com and we will respond within one month. If you are unhappy with how we've handled it, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
TownEye is not intended for under-16s and we don't knowingly create accounts for them. If you believe a child has an account, tell us and we'll remove it.
Changes
If we change how TownEye handles personal data we'll update this page and change the date at the top. Significant changes will be announced in the app.