Gistspot uses Google sign-in through Firebase Authentication. Your account identifier and email are held internally for sign-in, abuse prevention, and account support; they are not shown with your posts.

We keep your selected communities and use location permission, when you grant it, to match your position to a known local community. Exact coordinates are not saved to your account.

We use an installation identifier, moderation records, and limited service logs to protect the community. Notification tokens are saved only if you enable notifications.

Posts and replies use conversation-specific aliases. Other users do not see your email or a public profile, but Gistspot can connect activity to an account to investigate reports and enforce rules.

Posts, comments, messages, reports, and media are stored to deliver the features you use. Only share information you are comfortable posting or sending.

Service analytics events are scheduled for deletion after 90 days and hashed-IP abuse events after 30 days. Deleted post and comment bodies are purged after 180 days; moderation evidence may be retained longer.

You can delete your signed-in account in settings. If you cannot sign in, submit a request at gistspot.app/delete-account; staff must verify ownership before acting on a public request.

For privacy, access, or safety requests, contact Gistspot support on WhatsApp at +233 55 127 3151. Do not include passwords or identity documents in a first message.