Vestige (the vestige.to website and the Vestige app) is a place to keep your photos and share them with people you choose. It's run by HitSmart Inc.("we"). This page explains what we collect, who can see it, and how to delete it. Questions: support@hitsmart.app.
What we collect
- Your account: your email address and password. Passwords are stored securely by our sign-in provider; we never see them.
- Your profile: your handle, display name and profile picture.
- Your photos: the photos you upload, the date each was taken, and its location - a place name and map coordinates. When you upload, we read the GPS location saved in the photo (if it has one) to name the place; otherwise it's whatever you type. You can change or remove a photo's location at any time.
- Where you're at: if you add it, the city you're in and where you're heading next (and when). You type it in; we never track your device's location.
- Your connections: who you're connected with, requests you send and receive, photos you like, people you block, and reports you file.
- Basic technical logs kept by our hosting providers to run and secure the service.
Who can see what
- Anyone can see your handle, display name and profile picture, plus how many photos you have, how many countries they were taken in, and the year of your first photo.
- Your photos are visible only to you and people you've accepted as connections.
- Your map, including the places your photos were taken and when, is visible only to you and your connections.
- Where you're at is visible only to you and your connections.
- Your friends list is visible only to you and your connections. Someone you're not connected with can see which of their own friends you're connected with, but not the rest of your list.
- Your likes: when you like a photo, only you and the person who posted it can see that. We don't show like counts to anyone.
- People you block can't connect with you or see your map.
What we don't do
No ads, no selling or renting your data, and no third-party tracking or analytics. Your data is used only to run Vestige.
Services we use
These companies process data on our behalf to run Vestige:
- Supabase - database, photo storage and sign-in.
- Vercel - hosting the website and resizing photos for display.
- Resend - sending account emails, like password resets.
- OpenStreetMap (Nominatim) - turning place names you type into map coordinates; it receives the place name.
- OpenFreeMap - the map tiles drawn on the globe.
- Photon by komoot - suggesting city names as you type where you're at, and on the website naming the place from a photo's GPS location; it receives what you type or those coordinates.
- Apple - in the iPhone app, naming the place from a photo's GPS location, using Apple's location services.
Keeping and deleting your data
We keep your data while your account exists. You can delete your account at any time in the app (tap your profile picture, then Delete account), which permanently removes your profile, photos and connections. You can also email us to have your account deleted, or to ask for a copy of your data or a correction.
Children
Vestige isn't meant for anyone under 13, and we don't knowingly collect their data.
Changes
If this policy changes, we'll update this page and the date at the top. Significant changes will be announced in the app.