Privacy Policy.

01Who we are

Sesh App is operated by an individual developer (sole proprietor) enrolled in the Apple Developer Program.

Contact: contact@seshapp.xyz

02Information we collect

We only collect what the app needs to function.

Information you provide

• Account details: your email address, to create and authenticate your account, and a unique @username other users can search to find and friend you.
• Profile information: display name, age, biological sex, and body weight. Sex and weight are required inputs to the Widmark BAC calculation; age confirms you meet the legal drinking age. Your sex and weight are never shown to other users — shared BAC values are computed on our servers so those inputs never leave the database (see section 06).
• Optional profile photo (avatar): if you choose to add one, it is stored on our servers and shown to other users alongside your name.
• Drink and session data: drinks you log (type, volume, ABV, timestamp), live sessions and plans you start or join, groups, shared rounds, and manually added guests (name, sex, age, weight you enter for them).
• Friends and invites: friend requests you send or accept, and sesh invites between you and other users.
• Photos you choose to share (see section 05 for exactly who sees what and for how long):
  • Night schnaps — photos of your own night stay on your device unless you share them one of the ways below.
  • Squad schnaps — photos you take in the squad card are uploaded and visible to your group for the night, then deleted.
  • Live stories — photos you post to the Tonight strip are uploaded and visible to your accepted friends for 24 hours, then deleted. A story can include a caption and, if you leave them attached, your estimated BAC and current location label at the moment of posting.
  • Posted nights — recaps you explicitly post to the Nightline feed (photos, stops, stats) are uploaded and visible to your friends until you delete the post.

Information collected with your permission

• Location (while using the app): used to find nearby bars and venues, to check in, and — if you opt to mark one — to save a pre-game or between-bars spot. Exact marked-spot coordinates live in your on-device journey; when you are in a group sesh, check-ins and spots you add for the group are shared with that group so everyone's recap shows the night's route. Location is never used for background tracking and never sold.
• Camera & photo library: used to scan beverage barcodes (processed on-device, never uploaded) and to take or pick the photos described above. Photos are only ever uploaded through the explicit share features.
• Push notification token: if you enable notifications, a device token is stored so we can notify you about likes, comments, friend requests, and sesh invites.

Information shared while you're live

• Live pulse: while a live sesh of yours is running, your accepted friends can see that you're out, your estimated BAC, your drink count, the venue you're checked into, and — in a group sesh — who you're with and their estimated BAC. This presence record is deleted when your night ends.

Information collected automatically

• Basic technical data needed to operate the service (authentication tokens and timestamps).

We do not use third-party advertising or analytics/tracking SDKs, and we do not use the Apple Advertising Identifier (IDFA).

03How we use your information

• create and secure your account and sign you in;
• calculate and display your estimated BAC and time-to-sober;
• power live sessions, groups, shared rounds, the group route, leaderboards, and recaps (personal and group);
• power the social features you use: friends, invites, the live pulse, stories, squad schnaps, and the Nightline feed;
• show nearby venues and current venue deals when you grant location access;
• look up beverages you scan;
• send notifications you have opted into;
• maintain, debug, and improve the app.

We do not sell your personal information, and we do not use it for third-party advertising.

04How your information is shared

• With your accepted friends: your name, @username, avatar, live pulse (while a night is running), stories you post, and nights you post to the feed.
• With your group: during a group sesh, members see your name, avatar, estimated BAC, drink count, shared rounds, the group's route (check-ins and stops added for the group), and squad schnaps. The group recap each member keeps includes this shared night.
• Service providers: our backend (database, authentication, storage, and functions) is hosted on Supabase. Push notifications are delivered through Apple's Push Notification service. These providers process data on our behalf and are not permitted to use it for their own purposes.
• Legal: we may disclose information if required by law.

People who are not your friends and not in your group see nothing beyond what's needed to find you: your name and @username in user search.

05How long things live

Sesh is built around the night — most shared content is deliberately short-lived:

*Members can save individual squad schnaps into their own recap before the sesh ends; unsaved copies are purged by a scheduled cleanup (at most 48 hours). Expired stories and schnaps are deleted from storage, not just hidden.

06Security

• All traffic between the app, this website, and our servers is encrypted in transit (HTTPS/TLS).
• Every database table is protected by row-level security: friend-gated and group-gated reads are enforced by the database itself, not just the app.
• Shared BAC values are computed server-side so your body weight and sex are never exposed to other users' devices.
• Ephemeral media (stories, squad schnaps) is removed by automated cleanup jobs.
• On a shared device, each signed-in account's local night data is stored separately.

07Your choices & rights

• Delete content in-app: your own stories, squad schnaps, posted nights, past-night recaps, and journey photos can be deleted from inside the app.
• Permissions: location, camera, photos, and notifications are optional and controlled in iOS Settings; core drink logging works without them.
• Friends: only accepted friends ever see your pulse, stories, or posts — you control who that is.
• Account & data deletion: email contact@seshapp.xyz from your account address and we will delete your account and associated server data. Depending on where you live (e.g. EU/EEA under GDPR), you may also have rights to access, correct, or export your data — the same address handles those requests.

08Age

Sesh is intended only for people of legal drinking age in their country and is rated 17+ on the App Store. We do not knowingly collect information from anyone below the legal drinking age; if you believe we have, contact us and we will delete it.

09Changes to this policy

If we change this policy in a meaningful way, we'll update the date at the top and, for significant changes, note it in the app. Continued use of Sesh after a change means you accept the updated policy.