Privacy Policy

Last updated: 14 July 2026

Caper ("we", "us") is a spontaneous micro-adventure app operated by an independent developer. This policy explains what data Caper collects, why we collect it, where it is stored, and the choices you have. If you have any questions, email support@caper.today.

What we collect

Account — your email address and password. Passwords are handled by our authentication provider (Supabase) and stored in hashed form; we never see them.

Profile — who you usually caper with (partner or friends).

Location — with your permission, Caper reads your device's approximate location (reduced to roughly 1 km precision) when you open the app, so it can include quests relevant to where you are. Your coordinates are processed and cached on your device only — they are never sent to or stored on our servers. Location is optional: you can decline the permission, and Caper will simply show quests that work anywhere. Caper accesses your location only while the app is open, never in the background.

Quest activity — which quests you draw, start, complete, or abandon, with timestamps.

Memories — photos you attach and recap text you write when completing a quest. Memories are private and visible only to you.

Share links — when you share a caper, we create a random link token that references the quest. The public share page shows the quest card only; it never shows your photos, notes, or identity.

Analytics and crash data — app usage events (for example, that a quest was drawn or completed), device model, operating system version, and crash reports, collected via PostHog and stored on servers in the European Union. We use this only to understand how the app is used and to fix problems.

What we do not do

We do not show ads. We do not track you across other apps or websites. We do not sell or rent your data to anyone. We do not track your location in the background and we do not keep a history of where you have been.

How we use your data

We use your data to provide the service (sign you in, save your quests and memories, restore an active quest), to improve the app, and to diagnose and fix crashes. Under the GDPR, our legal bases are performance of a contract (your account and content) and legitimate interest (analytics and crash reporting).

Where your data lives

Your data is processed by the following providers, each acting on our behalf:

Supabase — database, authentication, and photo storage (hosted on Amazon Web Services).
Vercel — hosting for the caper.today website and share pages.
PostHog — analytics and crash reporting (EU region).
Resend — transactional email, such as password-reset messages.
Apple — app distribution via the App Store.

Retention and deletion

We keep your data for as long as your account exists. You can delete your account at any time in the app (Account → Delete Account). Deletion is permanent and removes your sign-in record, profile, quest history, memories, photos, and share links. You can also request deletion by emailing support@caper.today.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing based on legitimate interest. To exercise any of these rights, email support@caper.today. You also have the right to lodge a complaint with your local data protection authority.

Children

Caper is not directed at children. You must be at least 16 years old to create an account.

Changes

If we change this policy, we will update this page and the "last updated" date. For material changes we will let you know in the app.