its me← Back
Draft — pending counsel review

This document is a structural scaffold modeled on standard industry practice. Final language must be reviewed by a licensed attorney before this product is used by the public.

Privacy Policy

Effective 2026-05-23

Our approach

its me is built around a simple promise: the platform helps you find people near you who want to meet in person, then gets out of the way. We collect only what we need to make that work. We never sell or license data that can be tied back to an individual user.

1. What we collect

  • An anonymous account identifier generated when you first open the Service. No email, name, or password is required to create an account.
  • Approximate location — your latitude and longitude, snapped to a roughly 5-meter grid before it is stored. We never retain your raw, unfuzzed coordinates.
  • Profile content you provide — display name, short biography, and up to four photos. You may leave any of these blank and remove them at any time.
  • Activity signals — the time you were last active, and the record that you sent a “hey there” to another user (and vice versa).
  • An authentication cookie required to keep your anonymous session signed in. We do not use third-party advertising cookies.

2. What we do with it

  • Show you to other opted-in users on the map.
  • Show other opted-in users to you.
  • Deliver the “hey there” greeting and inform both parties when it is mutual.
  • Protect the Service from abuse — including bot detection, content moderation, and investigating reports.
  • Improve the Service through aggregated, de-identified analysis only.

3. Aggregate data & commercial use

We may produce and license aggregated, de-identified insights — such as the approximate number of opted-in users in a given neighborhood at a given hour — to third parties (for example, hospitality or urban-planning clients). Aggregated data does not identify any individual user. We do not sell or license individual user data, profile content, or precise location histories.

4. Who we share it with

We share data only with the service providers we need to operate:

  • Supabase — database, authentication, and storage hosting.
  • Vercel — application hosting and content delivery.
  • Cloudflare — bot protection (Turnstile) and CSAM scanning, when enabled.

Each processor handles your data under its own privacy and security terms and is contractually limited to providing the service we engage them for.

5. Visibility & your control

You control whether you appear on the map at all. The visibility toggle in your profile takes effect immediately. When visibility is off, no other user can see you or send you a greeting.

6. Retention & deletion

We retain your profile and activity data for as long as your account is active. You may delete your account at any time from your profile sheet; deletion removes your profile, photos, hellos, and location from the Service. Aggregate, de-identified analytics derived prior to deletion may be retained. We may retain limited records for as long as required by law (for example, evidence preserved in connection with a report to NCMEC). [Self-delete UI is queued; until then, contact us to delete.]

7. Children

The Service is intended for users 18 and older. We do not knowingly collect information from anyone under 18. If we learn that we have collected information from a minor, we will delete it promptly.

8. Your rights

Depending on where you live, you may have the right to access, correct, port, or delete personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. We will not discriminate against you for exercising any right under applicable law.

9. Security

All traffic to and from the Service is encrypted in transit. Access to user data is restricted at the database layer by row-level security: a signed-in user can read only profiles that are affirmatively visible and can modify only their own record. No system is perfectly secure; we cannot guarantee absolute security of any information transmitted to or stored by us.

10. International users

The Service is operated from the United States. By using it, you consent to the transfer of your information to the United States for processing.

11. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new effective date.

12. Contact

Privacy questions, deletion requests, and rights inquiries may be sent to privacy@itsme.example. [Update with real contact before launch.]