Privacy Policy

1. What we collect

Account details (name, email and/or mobile number, username), your date of birth (to confirm you are 18+; never shown publicly), profile information you add, content you post, private reactions and messages, requests and answers to owner questions, verification results, device and usage data needed for security.

2. Who can see what

Public profile and public posts: everyone. Follower count: everyone. Follower identities: only you and the other person in each follow. Reactions, notes and replies: only you and the author. Answers to joining questions: only the profile owner. Inner Circle members: only the owner. Meeting links: only the host and admitted attendees.

3. Why we use it

To provide the service, keep it safe (moderation, rate limits, fraud prevention), verify identities when you ask us to, and improve the product. We never sell your private reactions and never use them to target advertising.

4. Identity documents

Documents uploaded for verification are stored in a private, encrypted storage area, reviewed only by authorised staff, and deleted as soon as a decision is made. We keep only the verification result.

4a. Verification data

Phone verification: we keep your confirmed mobile number for sign-in and security.

Live check: your short selfie video is stored privately, viewed only by authorised reviewers, and deleted as soon as a decision is made.

Identity: when you use our identity provider, you show your document and selfie to the provider, not to us; we receive only the result, your verified legal name, date of birth, document type and issuing country. When you use manual review, your document is deleted as soon as a decision is made.

Identity confirmations: if a host asks and you agree, we share only your verified legal name, that you are 18+, the verification method and date with that host. The host can see this record for 12 months. We never share documents.

4b. AI sorting for profile owners

Profile owners may switch on the AI Priority Inbox. If they do, private reactions, replies and requests sent to them are processed by our AI service provider solely to sort them into the owner’s private priority sections and write a short summary visible only to that owner.

The AI never replies, accepts, rejects or deletes anything, and its results are never shown to anyone else or used for advertising. Our AI provider processes this content on our behalf under its commercial terms.

5. Service providers

We use trusted providers for hosting, database and storage (e.g. Supabase, Vercel), email delivery, and optional AI moderation. They process data only on our instructions.

6. Retention

We keep your data while your account is active. If you delete your account, we delete or anonymise your data within a reasonable period, except where the law requires us to keep it.

7. Your rights

Depending on where you live (including under UAE PDPL, India DPDP Act 2023 and GDPR), you may access, correct, export or delete your data, and withdraw consent. Contact us to exercise these rights.

8. Security

Privacy rules are enforced in the database itself. We use encryption in transit, access controls and audit logs for staff actions.