Privacy Policy

1. Scope

This policy is provided by Bridgetown App Studio, LLC ("Bridgetown App Studio," "we," "us," or "our") and applies to Dove, including its Apple-platform app and Share extension. Dove helps you find and save places, organize them with tags, import places shared from Apple Maps, and create plans that invited participants can vote on and rank.

This policy does not control Apple, our analytics service provider, restaurant websites, or other third-party services you choose to open. Their own policies apply to their services.

2. Data Dove handles

Dove handles the following information when you use the related feature:

• Saved places and tags Place and tag names; addresses; coordinates for the place; category; phone number; website, Apple Maps, image, and Instagram links; hours; summaries; and the tags or collections you assign. Dove may also save public menu and event metadata used to enrich a saved place.
• Plans, votes, rankings, and sharing Plan titles, notes, dates and times, candidate places, selected winners, archive status, participant display names, yes/maybe/no votes, ordered rankings, participant roles, and Apple sharing state.
• Optional profile information and settings A display name you choose for shared plans, plus local settings such as appearance. Your Dove display name is not your Apple Account name.
• Location, when authorized Your current device location for nearby results, map centering, and distance-based place discovery. See Location for details.
• Apple Maps shared-place imports When you share a place to Dove, the Share extension can read the shared MapKit item, Apple Maps URL, or supported text. This can include a place name, address, coordinates, category, phone number, website, Apple Maps identifiers, and time zone.
• Restaurant website and menu metadata Dove may fetch publicly available restaurant pages, related menu pages, PDFs, and images to find hours, menus, events, summaries, and images. This happens for place-detail and enrichment features.
• Support communications If you email us, we receive your email address and the message and files you choose to send. Support email is separate from Dove’s in-app and CloudKit data.

3. How Dove uses data

Dove uses this information to:

• provide place search, maps, saved-place, tag, menu, and planning features;
• sync supported app data across your Apple devices through iCloud;
• share a list or plan with the people you choose;
• show votes, rankings, and plan results to authorized participants;
• complete Apple Maps imports and continue work from the Share extension;
• maintain app reliability and respond to support requests; and
• understand aggregate feature use through the limited analytics described in Limited product analytics, when that analytics-enabled version and configuration are in use.

4. iCloud, CloudKit, and Apple services

Private data

Dove syncs saved-place core details, tags and tag membership, and your optional Dove display name through the private database in Dove’s CloudKit container. Plans start in the owner’s private CloudKit database. Apple describes a private CloudKit database as accessible only to its user by default and not visible in the developer portal.

Some enrichment and cache data remains on your device instead of syncing. For example, Dove keeps certain downloaded menu or event details and map search caches in local app storage.

Shared data

Dove uses Apple’s CKShare system for shared lists and plans. Public access is disabled. A recipient can access shared records only after the owner shares them and the recipient accepts through Apple’s sharing flow. Access is then controlled by the share’s participant role and permissions.

Shared plan participants can see the plan content and participant activity needed for collaboration, including display names, places, votes, rankings, and the selected winner. A shared saved list can include the list name and selected place details such as addresses and coordinates.

What Bridgetown App Studio can access

Dove does not operate a separate Bridgetown App Studio server that copies your private CloudKit records. Under the app’s current architecture, we do not browse your private CloudKit database through a developer dashboard. Dove code running for your signed-in iCloud account reads and writes the records needed for the features you use. Apple operates iCloud, CloudKit, MapKit, and Apple Maps under Apple’s privacy policy.

iCloud availability, sync behavior, account permissions, and sharing are also controlled by your Apple Account and device settings.

5. Location

Dove asks for When In Use location permission when a feature needs your location. If you allow it, Dove uses the current coordinate to center the map, find nearby places, and provide distance-based behavior. Dove and MapKit may hold the current coordinate in memory, and Dove may keep it in local map or search caches that support those results.

Your current device location is not stored as part of your Dove profile, is not added to CloudKit as a location history, and is not sent to the analytics service provider. Coordinates belonging to a restaurant or other place are different: Dove stores those when you save that place or add it to a plan.

You can deny location permission and still use features that do not need it. You can review or change permission at any time in Apple Settings.

6. Limited product analytics

When you use an analytics-enabled Dove version, Dove sends limited product-usage and technical analytics to an analytics service provider to understand feature use, improve the product, and monitor reliability. This information is not associated with a Dove account or used to identify you. Versions without analytics or a valid configuration send no analytics events.

What Dove sends

Dove sends only a small set of successful product actions, such as creating a saved place, opening an Explore place detail, creating or archiving a plan, submitting a vote or ranking, selecting a winner, preparing a plan share, or completing a shared-place import. Properties are limited to fixed categories and count ranges, such as the feature source, vote choice, import outcome, or a broad number-of-choices bucket.

The analytics service also receives limited technical context, such as Dove’s app and build version, operating system version, Apple device model, screen dimensions, SDK version, connection type, and distribution channel. The analytics SDK uses a new random identifier each app launch. Dove does not associate that identifier with your Dove profile, Apple Account, CloudKit data, or identifiers from another launch.

What Dove deliberately excludes

Analytics does not include:

• your name, email address, account identifiers, or participant names;
• search text, place names or IDs, list or tag names, plan names, or notes;
• addresses, device or place coordinates, precise location, or location history;
• URLs, sharing links, restaurant website content, or menu content;
• CloudKit record identifiers, receipts, or Apple Account details;
• raw errors, stack traces, or other free-form diagnostic text; or
• the advertising identifier or another cross-app advertising ID.

Automatic event capture, persistent Dove user or device identity, analytics user profiles, aliases, IP-based geolocation, attribution, advertising integrations, feature flags, and session replay are disabled. The Share extension does not include the analytics SDK or send analytics.

Processing and retention

The analytics service provider stores and processes these limited analytics in the United States for up to two years, after which they expire under the service’s retention settings. The provider receives this information only to provide analytics services on our behalf and must apply privacy and security protections equivalent to those described in this policy.

Because the random analytics identifier changes every launch and is not associated with a Dove account or used to identify you, we generally cannot locate all of one person’s analytics events in response to an individual access or deletion request. This separation is intentional and reduces the ability to profile a person across app launches.

Dove uses this limited information for its own product analytics. It does not use the information to track you across other companies’ apps or websites, and Dove does not request App Tracking Transparency (ATT) permission for this analytics. This paragraph describes Dove’s technical configuration; it is not a legal determination or guarantee about every jurisdiction.

7. Service providers and outside sites

• Apple Provides the operating system, iCloud, CloudKit, MapKit, Apple Maps, Apple’s share flow, and related account and permission controls. Apple processes data needed to provide those services.
• Analytics service provider Processes the limited analytics described in Limited product analytics on our behalf and must apply equivalent privacy and security protections.
• Restaurant and related websites When Dove opens or fetches a public webpage, menu, PDF, or image, that site and its hosting providers receive a network request. As with a normal web request, they may receive the requesting IP address, Dove’s user-agent string, the requested URL, and other standard connection information under their own policies.
• Email provider Our email provider processes messages you send to the privacy or support address so that we can receive and respond to them.

8. Sharing and disclosures

Dove shares plan or saved-list content only when you use Apple’s sharing controls. The owner chooses or approves participants, and CloudKit enforces the share permissions. Dove does not make these shares public. Participants may still copy or redistribute information they can see, so invite only people you trust.

We do not sell personal information. We do not use Dove information for targeted advertising, and we do not share it with data brokers. We may disclose information when you direct us to, when needed for the service providers described in this policy, or when required to comply with a valid legal obligation or protect the security and rights of users and the service.

9. Retention, deletion, and your controls

• Saved places and tags: Dove provides controls to remove saved places and delete tags or lists. CloudKit propagates supported synced-data changes across your devices.
• Sharing: A saved-list owner can stop sharing. Apple’s share controls govern participant access. A participant may retain copies they made outside Dove.
• Plans: Dove currently provides an archive control rather than complete plan deletion. Archiving hides a plan from active use but does not erase its CloudKit records.
• Profile: You can edit your Dove display name. The current app does not provide a separate delete-profile button.
• Location: You can deny or revoke location permission in Apple Settings.
• Usage analytics: See Processing and retention for the retention period and the limits of individual access or deletion.
• Support email: You can ask us to delete support correspondence associated with your email address, subject to records we need to retain for security or legal obligations.

Removing Dove from a device does not necessarily delete records stored in iCloud. Your Apple Account and iCloud settings also affect storage and access. Because private CloudKit records are not visible to us through the developer portal, we may not be able to locate or delete those records for you from our side. Contact us if you need help understanding the controls available for your situation.

10. Security

Dove relies on Apple’s platform protections for app storage, permissions, iCloud, and CloudKit sharing. Network requests use the security available from Apple’s networking stack and the destination service. We limit analytics fields by design and separate analytics from Dove profile and CloudKit identifiers. No storage or transmission method can be guaranteed completely secure, so we continue to review the app’s data flows and dependencies as Dove changes.

11. International processing

Apple determines the locations and systems used for Apple services under its policies. The limited analytics described in Processing and retention are stored and processed in the United States. If you use Dove elsewhere, those analytics may be transferred to and processed in the United States.

12. Policy changes and contact

We may update this policy when Dove’s features, service providers, or data practices change. We will update the date at the top of this page. If a change materially affects how Dove handles information, we will provide additional notice when appropriate.