Privacy policy
This template describes how the application is built. Have a lawyer review and adapt it before launch.
What we collect
- Account identifiers. When you sign in with Google or Facebook we store the provider's account ID — not your password. With email or phone sign-in we store the address or number you verify.
- Phone number. Verified by SMS code, used to confirm one account per person.
- ZIP code and intake answers. Collected in chat by the automated agent.
- Messages. What you write in your group chat, stored with your account.
- Technical signals. IP address, browser user agent, and a coarse device signal derived from your browser settings, recorded when you register.
What other participants can see
Only your display name and the messages you send to the group. Participants never see your phone number, email address, IP address, device signal, provider account IDs, registration history or any internal review status.
Why we collect technical signals
To spot patterns that may indicate one person operating several accounts. These signals are reviewed by an administrator. Sharing an IP address, a device or a ZIP code with someone else is normal and does not by itself result in any action against your account.
Automated agent
The agent in your chat is software, not a person, and is labelled as automated. It asks intake questions and announces when your group is ready.
Retention
Account records, messages and registration history are kept while your account is active and for as long as needed for the purposes above. Verification codes are stored hashed and expire after ten minutes.
Your choices
You can ask for a copy of your data or ask us to delete your account by contacting us. Deleting your account removes your profile and unlinks your sign-in methods.
Contact
Reach us through the contact details on our main site.