Privacy Policy

1. Information we collect

• Account & profile: your email address, username, display name, and any profile details you add (school, major, year, bio, goals, avatar). If you verify a .edu email for the verified student badge, we store that too.
• Content: posts, comments, reactions, reposts, bookmarks, direct messages, reports, and feedback you submit.
• Activity: on-platform contribution activity used for your heatmap and streak, profile views, follows, and referral activity.
• Billing: if you subscribe to Pro, our payment processor collects your payment details. We receive your subscription status and a customer identifier, not your full card number.
• Technical: standard log and device data (IP address, browser type, timestamps) collected by our hosting and infrastructure providers.

2. How we use information

• operate core features: profiles, feed, follows, messaging, heatmap, and search;
• verify optional student status (confirming a valid .edu email) for the verified student badge;
• power AI features such as connection suggestions and writing prompts;
• process Pro subscriptions and prevent fraud and abuse;
• maintain security, enforce rate limits, and respond to reports;
• communicate with you about your account and the Service.

3. What others can see

Your profile and posts are visible to other signed-in students by default. Logged-out visitors can view a public profile or an individual post opened by direct link, which powers link previews, but not your feed. You control visibility with account settings: private accounts require follow approval and hide their posts, comments, and follower lists from non-followers (including from logged-out visitors); you can also hide your school and restrict your heatmap to followers. Direct messages are visible only to you and the recipient. Bookmarks are private to you.

4. Sharing & service providers

We do not sell your personal information. We share data with vendors who process it on our behalf to run the Service:

• Supabase: database, authentication, and file storage;
• Vercel: application hosting and delivery;
• Stripe: payment processing for Pro;
• Anthropic (or an equivalent AI provider): generating AI feature text.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

5. AI processing

When you use an AI feature, the relevant inputs (such as your own profile fields or a draft you are writing) are sent to our AI provider to generate a response. We do not send another user’s private, non-follower-visible content into prompts on your behalf.

6. Data retention & deletion

We keep your information while your account is active. You can delete your account at any time from Settings, which removes your profile and associated Content. Some records may persist briefly in backups or where retention is required for legal, security, or billing purposes.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. You can exercise most of these directly in the app (edit profile, delete account) or by contacting us at the address below.

8. Security

We use industry-standard measures including encrypted connections, row-level access controls, and server-side authorization. No system is perfectly secure, so we cannot guarantee absolute security.

9. Changes & contact

We may update this Policy from time to time and will revise the “Last updated” date above. For privacy questions or requests, contact support@samehere.dev.