1. Who We Are

BridgeNet is operated by BERETH AI LLC, a Texas Limited Liability Company.

• Website: getbridgenet.netlify.app
• Privacy contact: [email protected]
• Jurisdiction: Texas, United States

2. Information We Collect

2.1 Information You Provide

2.2 Information Collected Automatically

2.3 What We Do Not Collect

• We do not track your location continuously or in the background.
• We do not collect payment card information. Gift card fulfillment is handled through third-party providers.
• We do not use facial recognition on submitted photos.
• We do not collect immigration status, citizenship, or travel documentation.
• We do not sell your personal information to advertisers or data brokers.

3. Location Data — Detailed Disclosure

BridgeNet requires access to your device GPS to verify that you are physically present at the border crossing you are reporting. This is core to the integrity of our community data.

• When location is accessed: Only when you actively tap "Go Live" to start a crossing report, and when you tap "Complete" to end it.
• What is stored: Your latitude and longitude at the start and end of each trip.
• Who can see it: Only BridgeNet's internal moderation team. Location coordinates are never shown to other users.
• Background tracking: We do not track your location when the app is in the background or closed.
• If you deny permission: The Go Live feature will be unavailable. You may still browse reports from other users.
• Retention: Stored as part of your crossing report history. Deleted when you delete your account.

4. How We Use Your Information

• Account management: To create, maintain, and secure your account.
• Core functionality: To display crossing reports, calculate per-lane wait time averages, and show live updates to the community.
• Report verification: To verify that crossing reports are authentic by reviewing GPS coordinates, photos, and crossing duration.
• Rewards program: To track points, process gift card redemptions, and manage reward eligibility.
• Fraud prevention: To detect duplicate accounts, fake reports, and abuse of the rewards system.
• Safety and moderation: To enforce our Terms of Service and maintain a safe community.
• Communication: To send email confirmations, account notifications, and reward delivery confirmations.
• Push notifications: With your permission, to notify you of activity at your favorite bridges and reward milestones.
• Service improvement: To analyze usage patterns and improve the BridgeNet experience.

5. Data Sharing and Disclosure

We do not sell or rent your personal information. We share data only in the following circumstances:

• Infrastructure providers: We use Supabase for database hosting and authentication, and Netlify for web hosting. These providers process data on our behalf and are contractually required to protect it.
• Gift card fulfillment: When you redeem a reward, we share your email address with the relevant gift card provider to deliver your reward.
• Push notifications: Expo (our notification infrastructure) processes push tokens to deliver notifications. No personal content is shared.
• Legal requirements: We may disclose information if required by law, court order, or valid government request.
• Safety: We may share information when necessary to protect the safety of users or the public.
• Business transfer: If BERETH AI LLC is acquired or merged, your data may transfer. We will notify you beforehand.

6. User-Generated Content

Photos and comments you submit as part of crossing reports are visible to all BridgeNet users within the app. Please do not submit photos that include sensitive personal information, identifiable individuals without consent, or minors.

Submitted photos are stored securely on our infrastructure, reviewed by our moderation team, and are not used for advertising or sold to third parties.

7. Data Retention

• Account data: Retained until you delete your account.
• Crossing reports and photos: Retained until you delete your account or we remove them under our moderation policy.
• Points and rewards history: Retained until account deletion.
• Deleted account emails: Retained indefinitely to prevent re-registration fraud.
• Device identifiers: Retained to enforce the one-account-per-device policy.
• Legal holds: Some data may be retained longer if required by applicable law.

8. Security

We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS) for all API requests.
• Hashed password storage — passwords are never stored in plaintext.
• Row-level security on our database, restricting data access per user.
• JWT-based authentication for all server-side operations.
• Admin actions require elevated permissions and are fully logged.

No system is entirely secure. If you believe your account has been compromised, contact us immediately at [email protected].

9. Children's Privacy

BridgeNet is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has created an account, we will delete their data immediately. If you believe a child under 13 has used our service, contact us at [email protected].

10. Your Rights and Choices

• Access: Request a summary of the personal data we hold about you.
• Correction: Update your name, username, or avatar through your Profile settings.
• Deletion: Delete your account and all associated data at any time via Settings → Delete Account Forever. Deletion is permanent and irreversible.
• Location: Revoke location permissions in your device settings at any time.
• Notifications: Disable push notifications in your device settings at any time.
• Data portability: Request a copy of your data by emailing us.

To exercise any of these rights, contact [email protected]. We will respond within 30 days.

11. California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To submit a CCPA request, email [email protected] with the subject line "CCPA Request."

12. International Users

BridgeNet is operated from the United States. If you access the app from outside the United States, including from Mexico, your information may be transferred to, stored, and processed in the US. By using BridgeNet, you consent to this transfer.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and may notify you through the app. Continued use of Bri