Pub'd privacy policy
Last updated 9 October 2026.
Pub'd is a pub check-in app for London, run by Robbie Bridges and Beth Bridges in London ("we", "us"). This is what we collect, why, who else handles it, and what you can do about it.
Pub'd is for people aged 18 or over.
What we collect
- Account. Your email address and password (stored hashed by our provider, Supabase). Used to sign you in and, if you ask, to send you a code to reset your password.
- Profile. A username, display name and optional photo. Visible to other Pub'd users.
- Check-ins. The pub, the time, your rating and review, an optional caption and photos. Visible to you and the friends you have accepted. If you tag a friend and they confirm they were there, the post also reaches their friends, so the night shows up for the people they go out with: the pub, the time, the caption, the photos and who was there. Your rating and review stay with your own friends.
- Location. While you use the app, we read your location to show the pubs near you, and once when you check in to confirm you are at the pub. We store only the distance from the pub, not where you were standing (until 7 October 2026 we also kept the coordinates; those have been deleted). We do not track you in the background.
- Tags and guests. If a friend tags you on a check-in, that link is stored. If you add someone who is not on Pub'd by name, we store the name you typed. Any text message to them is sent from your phone, by you.
- Notifications. If you allow notifications, a device token is stored so we can send them.
- Lists and crawls. The pubs on a list, their order, and any line you write about a pub. A list is private until you change who can see it. If you share its link, anyone who has the link can see the list on pubdapp.com without an account: its name, your display name as its maker, the pubs and your lines about them. Nothing about where you have checked in is on that page. Delete the list and the link stops working.
- Feedback and reports. What you send through Tell us, with a screenshot if you add one, and any post or person you report, with your reason.
- How the app is used. Which screens are opened and the steps of a check-in, linked to your account, so we can see what works and fix what doesn't. Not used for advertising and not shared.
- Crash reports. If the app crashes or hits an error, a report of what went wrong, the device model and system version, and your account ID. Used only to fix the app.
- Clipboard, once. When you tap Get Pub'd on a shared link's page, the page copies that link. The first time the app opens, if a web link is on your clipboard, iOS asks whether Pub'd may paste it; if you allow it and it is a pubdapp.com link, the app opens what you were sent. Anything else is ignored, nothing from your clipboard is stored or sent anywhere, and the app does not look again.
Why we use it
To run the app you signed up for: your account, your posts, your friends, your map. To keep it safe: reports, blocking and removing what breaks the rules. To fix and improve it: crash reports and usage. Under UK data protection law, the first is necessary to provide the service you asked for, and the others are our legitimate interest in a safe app that works.
What we do not do
We do not sell your personal data. We do not show your check-ins to anyone outside your friends and, for a post you tagged them on, your friends' friends. We do not use advertising trackers.
Who else handles it
We use these companies to run Pub'd. Each handles your data only to provide its service to us:
- Supabase. Database, photo storage and sign-in. London (AWS eu-west-2).
- Sentry. Crash reports. EU (Germany).
- Expo. Delivering notifications to your phone, and app updates. United States.
- Apple. Delivering notifications; walking times between pubs on a crawl, worked out by Apple Maps from the pubs' locations, not yours. United States.
- Resend. Sending password reset emails. EU (Ireland).
- Netlify. Hosting pubdapp.com, including shared list pages. United States.
Where data goes outside the UK, it is protected by the UK's adequacy rules or by standard contract terms with that company.
Reporting and blocking
You can report a post or a person from the ⋯ on it; reports come to us and we look at every one within a day. We may remove a post or suspend an account that breaks the rules. Blocking someone ends your friendship, hides each of you from the other's posts, replies and likes, and stops them asking again. They are not told. Settings lists who you have blocked.
Aggregate data
Pub pages show totals, such as average rating and number of visits, built from everyone's check-ins without identifying anyone. Claimed pub pages and any future advertising use only these aggregates.
How long we keep it
Everything you create stays until you delete it or delete your account. Crash reports are kept by Sentry for up to 90 days. Usage records are kept until you delete your account.
Your rights
You can ask us for a copy of your data, to correct it, or to delete it. Deleting your account (below) does the last one yourself, at once. For anything else, email us. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Deleting your account
Open the You tab, then Settings, then Delete account. Everything you have created is deleted immediately and permanently: your check-ins, ratings, replies, friendships, lists, every photo you uploaded (including a pub's front photo, if you gave it one) and your account itself.
Changes
If this policy changes in a way that matters, we'll tell you in the app first.