Privacy Policy

1. Information We Store

When you create a generated experience, we store the following data to render the interactive message link:

• Creator name and receiver nickname (you provide these)
• Selected template, category, tone, and theme
• Custom messages, step-by-step content, and final reveal message
• Creation timestamp and a unique 14-character experience ID
• Optional link expiry time if you set one
• Minimal analytics (opens, completions, selected choices, CTA clicks)

2. How We Use Your Data

We use stored data only to:

• Render the interactive experience when someone opens your shared link
• Track basic engagement metrics (opens, completions) shown on your dashboard
• Improve our template library and user experience based on aggregate patterns

3. What We Do Not Collect

We do not collect or store:

• Phone numbers, email addresses, or physical addresses
• Exact location data or IP addresses tied to specific experiences
• Private chat logs, relationship status, or psychological assessments
• Passwords, login credentials, or authentication data (login is not required)
• Payment information or credit card details

4. Public Links

Generated experiences are publicly accessible to anyone who has the unique link. You should not include private or sensitive information unless you understand that the link can be forwarded or shared. We recommend sharing links only with trusted recipients.

5. Data Retention

Generated experiences are stored only as long as necessary. We automatically apply the following retention schedule:

• Unclaimed experiences (never opened) — automatically deleted after 30 days
• All other experiences — automatically deleted after 90 days
• Experiences with a reaction/engagement — anonymized after 365 days (message content is replaced, but engagement data is preserved in aggregate)

If you would like us to manually remove a specific experience before these timeframes, please contact us with the experience ID. Analytics data may be retained in aggregate after individual experiences are deleted.

6. Third-Party Services

We use Supabase as our database provider. Your data is stored in Supabase's infrastructure. Supabase is SOC 2 compliant and follows industry-standard security practices. We do not sell, rent, or share your personal data with third parties for marketing purposes.

7. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

8. Contact

If you have questions about this privacy policy or would like to request deletion of your data, please visit our contact page.