Privacy Policy

Last Updated: May 13, 2026 · Docent Mobile App & Web (docentofficial.com)

Introduction

Docent ("we," "us," or "our") operates the Docent mobile application and website at docentofficial.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information. This policy applies to California residents under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Categories of Personal Information We Collect

Identifiers

Email address (account creation and authentication)
Display name and username (public profile)
Phone number (optional, for account recovery)
Profile photo (optional)

Commercial Information

Tour purchases and transaction history (when paid tours launch)
Reimbursement submissions (DCP participants only)

Internet or Network Activity

Pages and screens viewed, features used, search queries
Device type, operating system, browser type
Firebase Analytics and Google Analytics (GA4) usage data

Geolocation Data

Coarse location (~1 km accuracy) to sort nearby venues — processed on-device only, not stored on our servers

User-Generated Content

Reviews, ratings, photos, and videos you submit
Tour content created by curators
Profile location text (optional, user-entered)
Notes and reflections (stored locally on your device)

Sensitive Personal Information

We do not collect sensitive personal information as defined by the CPRA.

Sources of Personal Information

Directly from you when you create an account, write reviews, or submit content
Automatically through Firebase Analytics and Google Analytics when you use our services
From Firebase Authentication when you sign in

How We Use Your Information

Provide, maintain, and improve the Docent service
Authenticate your account and secure your data
Display your public profile, reviews, and tours to other users
Show nearby museums and galleries using coarse location
Send push notifications you have opted into (exhibit reminders, friend activity)
Process reimbursements for program participants
Analyze usage patterns to improve features
Respond to your inquiries and support requests

Data Sharing and Disclosure

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

We disclose personal information to the following categories of service providers:

Google Firebase — authentication, data storage, file storage, analytics, cloud functions
Google Analytics (GA4) — web usage analytics
Netlify — web hosting

We may also disclose information if required by law, to protect our rights, or in connection with a merger or acquisition.

Data Retention

Account data: Retained while your account is active. Deleted within 30 days of account deletion.
Reviews and content: Retained while your account is active. Deleted with account deletion.
Analytics data: Retained for 14 months (Firebase/GA4 default), then automatically deleted.
Reimbursement records: Retained for 3 years for tax and accounting purposes.

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights:

Right to Know: Request the categories and specific pieces of personal information we have collected about you.
Right to Delete: Request deletion of your personal information. You can delete your account in app settings, or contact us.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for advertising. No opt-out is necessary.
Right to Limit Use of Sensitive Information: We do not collect sensitive personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, email contact@docentofficial.com. We will verify your identity and respond within 45 days.

Do Not Sell or Share My Personal Information

Docent does not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising. Because we do not engage in these practices, no opt-out mechanism is required.

Data Storage and Security

Your data is stored using Google Firebase services (Authentication, Firestore, and Storage). Data is encrypted in transit (TLS) and at rest. Access to production data is restricted to authorized personnel. We implement reasonable security measures but cannot guarantee absolute security.

Third-Party Services

Firebase Authentication — secure user sign-in (Google Privacy Policy)
Firebase Firestore & Storage — data and file storage
Firebase Analytics & GA4 — usage analytics
Firebase Cloud Messaging — push notifications
Netlify — web hosting (Netlify Privacy Policy)

Cookies and Tracking

Our website uses essential cookies for authentication and session management. Google Analytics (GA4) uses cookies to collect usage data. You can disable cookies in your browser settings, though some features may not function properly.

Children's Privacy

Docent is suitable for general audiences. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have collected information from a child under 13, contact us immediately and we will delete it.

User-Generated Content License

By uploading photos, reviews, or other content to Docent, you grant Docent a non-exclusive, royalty-free, worldwide license to use, display, and distribute your content within the service. You retain ownership of your content and may delete it at any time.

Copyright & DMCA

Docent respects intellectual property rights. If you believe content on Docent infringes your copyright, contact contact@docentofficial.com with a description of the copyrighted work, the location of the infringing content, and your contact information. We respond to valid takedown requests under the Digital Millennium Copyright Act (DMCA).

Content Attribution

Keyword descriptions in Docent are adapted from Wikipedia under the Creative Commons Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) license.

Changes to This Policy

We may update this Privacy Policy periodically. Changes are effective when posted. We will update the "Last Updated" date and, for material changes, notify you via email or in-app notification.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at contact@docentofficial.com.

Docent
San Francisco, CA
contact@docentofficial.com