Points (“Points,” “we,” “us,” or “our”) is a social scoring application operated by Gavin Palm under the GP Lights name. Points allows users to create private, invite-only groups with friends, create scoring categories, award or deduct points, and view group scoreboards and activity.
This Privacy Policy explains how information is collected, used, shared, retained, and protected when you use the Points mobile application, Siri Shortcuts, widgets, APIs, and related services that reference this Privacy Policy (collectively, the “Services”).
Points is operated by:
Gavin Palm / GP Lights
Email: privacy@gp-lights.com
Support: support@gp-lights.com
Questions or requests regarding this Privacy Policy or your personal information may be submitted using the contact information above.
We collect information reasonably necessary to provide, secure, moderate, and improve Points.
When you create a Points account, we may collect:
Points uses Firebase Authentication, provided by Google, for phone-number authentication. Information necessary to authenticate your account, including your phone number, may therefore be processed by Google/Firebase for authentication, security, fraud prevention, and abuse prevention.
Points allows users to create and join private, invite-only groups. Information associated with groups may include:
Groups are shared spaces and are stored independently from an individual user's account. Information belonging to a group may therefore continue to exist if an individual member leaves a group or deletes their account, as further described below.
When users award or deduct points, Points may store:
Points and related group activity form part of a group's shared history.
Users may provide content including display names, group names, custom category names, and optional notes or reasons associated with point activity.
You should not submit sensitive personal information or information about another person that you do not have permission to share.
Points may use automated rules, filters, user reports, group administration tools, and manual review to identify or respond to abusive, threatening, discriminatory, unlawful, or otherwise prohibited content.
Ordinary profanity is not necessarily prohibited. Content is evaluated based on its nature and context, including whether it constitutes harassment, threats, hateful or discriminatory abuse, exploitation, or other prohibited conduct.
Points groups are private and invite-only; however, information submitted within a group is intended to be shared with other members of that group. Depending on the features being used, group members may be able to see:
Users should only join groups with people with whom they are comfortable sharing this information.
If you report another user or content, we may collect your account identifier, the account identifier of the reported user, the group and activity involved, the reason for the report, the reported content, and information regarding our review or response.
Points may also maintain information necessary to honor user blocks and enforce restrictions against abusive users.
Reports and moderation records may be retained for a reasonable period for safety, abuse prevention, dispute resolution, and enforcement purposes.
Points may provide optional Siri Shortcuts or Apple Shortcuts integrations that allow users to perform actions such as awarding or deducting points.
When you use a Shortcut, information necessary to perform the requested action may be transmitted to Points, such as the selected group, member, category, point amount, and optional note or reason.
Siri, Shortcuts, and related Apple functionality are also subject to Apple's applicable privacy policies and terms.
Points may provide iOS widgets that display information such as point totals or group information. Information necessary to provide these widgets may be stored or processed on your device or through the Points Services. Information displayed in a widget may be visible to other people who can view your device.
Points may send optional push notifications regarding group activity, points, account information, or other relevant activity. If notifications are enabled, Points and its service providers may process device or push-notification tokens necessary to deliver them. You may disable or modify notification permissions through your device settings.
Points and its service providers may automatically process limited technical information necessary to operate, secure, and troubleshoot the Services, including device/application identifiers, IP address/network information, application version, OS information, auth security info, push tokens, error/diagnostic info, and timestamps.
We may use information to:
We do not sell your personal information.
We do not use your personal information for cross-app advertising or tracking.
We may disclose or make information available in the following circumstances:
Points provides an option to permanently delete your account directly within app settings. When requested, Points deletes your user profile, phone authentication account, active group memberships, push tokens, preferences, and other account-level records under your user profile.
Shared Group History: Because Points groups contain shared scoring histories affecting multiple members, some historical group records may be retained after account deletion to preserve remaining members' scores and group ledgers. We reduce personal context in those retained records where reasonably practical, such as replacing names with “Former Member” and removing notes associated with the deleted account, but retained records may continue to include technical identifiers or transaction metadata needed for integrity, abuse prevention, security, dispute handling, or legal compliance.
Groups You Own: If you own a group with other members, you will be prompted to transfer ownership before deleting. If no members remain, the group is deleted.
You may leave a Points group without deleting your account. Leaving removes your active membership while preserving historical transactions affecting other members.
We retain personal information only for as long as reasonably necessary to operate the Services, maintain security, prevent abuse, and comply with law.
We use administrative and technical safeguards including encryption, Firebase security rules, and server-side authorization. Users are responsible for safeguarding their devices and private invitation codes.
Points is not directed to children under 13. We do not knowingly collect personal information from children under 13.
You may change your display name, manage groups, leave groups, block users, report content, manage notifications, or permanently delete your account anytime in Settings.
Points may use Firebase Analytics and Firebase Crashlytics to understand app usage, diagnose errors, improve reliability, and troubleshoot crashes. These services may process technical information such as device and app information, crash traces, diagnostic data, usage events, timestamps, and account or user identifiers when needed to diagnose account-specific issues.
Certain functionality depends on Google/Firebase and Apple services, which operate under their own applicable terms and privacy policies.
We may update this Privacy Policy as Points changes. The “Last Updated” date will reflect revisions.
Gavin Palm / GP Lights
Privacy: privacy@gp-lights.com
Support: support@gp-lights.com