Privacy policy

Last updated October 19, 2026

Draft for legal review. This text has not yet been reviewed by an attorney and is not final.

What we collect

• Account: your email address (for sign-in) and the name you choose.
• Profile: your profile link name and an optional introduction.
• Invitations: the relationship type, the questions, and, if you ask us to email the invite, the recipient’s email address.
• Responses: what an X writes, the years they knew you, optional photos and their attribution choice.
• Records of consent and moderation actions (approve, seal, delete, report), kept in an append-only audit log.

What we never do

• Show anyone’s email address or contact details to other users.
• Publish a response without the profile owner’s approval.
• Let search engines index profiles or books.
• Sell your personal information.

Storage and security

Data is stored with Supabase. Access is enforced by row-level security in the database itself, not only in the app. Photos are kept in private storage and served only through short-lived links after a permission check.

Your rights

You can export your data or delete your account at any time from Settings. Deleting your account removes your profile, the invites you sent and the responses about you. Responses you wrote for others remain with their owner, without being linked to your account.

Retention

Unanswered invites expire after 60 days. Deleted responses are erased; a content-free record of the deletion remains in the audit log.

Contact

privacy@askthex.com