Privacy policy
What we collect
We use your phone number to sign you in and help you find people you know. Your account includes your name, interests, friendships, recommendations, saves, questions, replies, and photos or videos you choose to upload. If you enable notifications, we store a device push token. Service activity helps us prevent abuse and operate the service.
Who can see your content
Recommendations and discussions are limited to their selected audience and current friendship and block rules. They are not public reviews. You may explicitly consent to including selected notes you wrote in a public invitation preview, as explained below. Ordinary Social Graph account data is stored on our hosted Supabase service and is accessible to the service operator; it is not end-to-end encrypted. Other people may retain content they have already received or copied.
Public invitation previews
Invitation links show the inviter’s name to anyone with the link, including people who are not signed in or do not have the app. No recommendation notes are selected by default. You can explicitly choose up to three notes you wrote, review the exact preview, and consent to showing it publicly. Friends-only notes, other people’s notes, photos, and discussions are excluded. New links expire after seven days and can be revoked from invitation review. Edited, deleted, hidden, or newly private notes are removed from future previews. Revoked, expired, or accepted links no longer show a preview. Recipients may copy or forward what they receive; revoking a link cannot recall those copies.
Contacts and device permissions
Contacts access is optional. Matching uses keyed phone-number tokens; the matching service discards submitted raw contact numbers. We do not publish or sell your address book. Camera, photo-library, and notification permissions are requested for features you choose. You can change those permissions in device settings.
Service providers
Supabase hosts account data and authentication. Twilio delivers verification codes. Expo and Apple or Google deliver enabled push notifications. Search and imagery may use Google Places, book providers, and approved media providers. Those providers may receive a search query or image request. Private recommendation notes and conversation text are not sent to catalog search providers. Provider media includes source credit where displayed.
Connected agents
Agents receive data only under the scopes, categories, audience rules, and expiry you approve. Sharing permissions for your recommendations and profile are separate controls. Private feedback requires its own permission. Disconnecting stops future access; it cannot recall data a developer already received.
Retention and deletion
Account content is retained while your account exists or until you remove it. Delete account in Settings removes your cloud account and associated database content. Uploaded media cleanup can continue after deletion if storage is unavailable. Operational backups may retain older data until the provider's configured retention ends. Copies retained by other people or connected developers are outside our account storage. Contact Support to request deletion without the app; we verify account ownership before acting.
Device wallets
Encrypted device wallets are experimental features in separate test builds. Deleting a cloud account does not delete a device wallet or exported backup. Existing wallets can be viewed, exported, or removed from the recovery entry. The normal release does not enable experimental wallet creation or publishing.
Your choices
Settings includes data export, account deletion, blocked accounts, interests, notifications, and connected-agent controls. Contact the publisher through Support for privacy questions. This policy will be updated when the service's data practices change.