Last updated August 2026.
Your email address (used only to sign you in and to notify you about things addressed to you, like an invite or a connection note — never sold, never used for marketing). Whatever you choose to write: your name, a bio, answers to prompts, status updates, and any custom questions or private notes you write to a connection. We also keep a basic log of access changes on your own profile (who was granted or revoked which tier, and when) so you have a record of who's had access to what.
Nobody, by default. You choose each connection's tier (general, close, best, or partner), and every answer you write is visible only to people at or above the tier it's set to — a real, server-enforced check on every single view, not a setting that just hides things in the interface. You can override any individual question or category to be stricter or looser than its default at any time, and revoke a connection's access entirely, instantly, whenever you want.
In a hosted PostgreSQL database, encrypted in transit. Emails are sent through Resend; their handling of the message in transit is governed by their own privacy policy. We don't use ad trackers or sell data to anyone, because there's no one to sell it to — this isn't an ad-supported product.
For as long as your account exists. You can delete individual entries, connections, or notes at any time from within the app.
You can permanently delete your account and everything tied to it — profile, entries, connections, guest links, history — from Settings. It's immediate and irreversible; nothing is kept afterward.
Reach out to the person who invited you, or the app's owner directly.