Your people, your privacy
Private by design.
Development disclosure draft · This page describes the implemented design. The operator identity, contact address, hosting regions, backup retention and final policy must be confirmed before public release.
What the app uses
Your Apple-linked account identifier, chosen display name and avatar color identify you inside your private groups. The service stores group membership, requests, descriptions, photos, links, prices, comments, sightings, notification preferences, reports and blocks so the app can work.
Who can see it
Active members of a group can see its requests and discussions, including history from before they joined. Invitation previews reveal the group name and inviter. There are no public profiles or searchable public groups. Authorized operators can review reports and manage abuse.
Service providers
Supabase provides authentication, database and private image storage. Apple handles Apple sign-in and iPhone delivery. Firebase Cloud Messaging handles push transport and device registration. Google Cloud Vision screens submitted photos for likely adult or violent content. The app sends photos for screening only when you explicitly send a draft. These providers process information needed to perform those functions.
What stays on your phone
Drafts and cached content are stored locally under your account. Signing out clears remote caches and widget snapshots; your account’s drafts stay separate from other accounts. Widgets hold minimal display data and expire after 24 hours. Offline devices can temporarily retain previously authorized content.
Photos, links and notifications
The app resizes photos and removes metadata before uploading them to private storage. External links open only when you choose them; the server does not fetch linked pages for previews. Lock-screen notifications use generic text. Notification permission is optional.
Deletion and retention
You can delete your own requests and discussion entries and begin account deletion in Settings. Account deletion also removes authored content and photos; groups you still own are deleted. Cleanup is retryable when providers are unavailable. Backup retention and the support route must be finalized before launch.
No advertising
The app has no advertising SDK, ad targeting, payments, subscriptions, session replay, or sale of personal information. Any future change to these practices requires a revised disclosure.