PRIVACY POLICY

Last updated: July 4, 2026

This page is maintained by the operator of It Ain't Working ("we", "us") to answer common questions about how personal data is handled. It describes app-visible controls and current practices, and is not independent verification of any certification.

WHAT WE COLLECT

Account: email, display name, avatar, sign-in provider (Google, Apple, or email).
Reports: business, issue type, description, optional photos, optional coarse location, timestamp.
Activity: verifications, comments, favorites, follows, redemptions, points, streaks.
Device: user agent, approximate IP-derived region, push notification token if you opt in.
Search history: anonymized queries used to compute trending searches.

HOW WE USE IT

Show relevant reports, alerts, and businesses near you.
Verify report accuracy through community consensus.
Send push and email notifications you have enabled.
Detect abuse, spam, and rate-limit malicious activity.
Improve product quality with aggregate, non-identifying analytics.

LEGAL BASIS

Contract performance (to run the service), legitimate interest (to prevent abuse and improve quality), and your consent (for push notifications and precise location). You can withdraw consent at any time in Settings.

SHARING

Public content you post (reports, verifications, comments, display name, avatar) is visible to everyone. We do NOT sell personal data. We use these categories of service providers under written agreements: hosting and database (Lovable Cloud / Supabase), authentication providers (Google, Apple), push delivery (browser vendors' push services), and error/analytics tooling described below.

RETENTION

Account data is kept while your account is active. Reports remain published for community reference even after account deletion, but are anonymized (reporter name and avatar are removed). Backups roll off within 30 days.

YOUR RIGHTS

Access & export: download a copy of your account data at any time.
Correction: update your display name, avatar, and preferences in Settings.
Deletion: delete your account and associated personal data.
Objection & restriction: disable push, disable location, or restrict processing.
Complaint: file with your local data protection authority.

Export or delete my data Cookie policy

CHILDREN

The service is not intended for anyone under 13 years of age. If we learn that a user under 13 has created an account, we will delete it.

INTERNATIONAL TRANSFERS

Data may be processed on infrastructure located outside your country of residence. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

CONTACT

Reach us at admin@iawtechnologies.com for any privacy question or request.

This policy may be updated. Material changes will be announced in-app before they take effect.