1. Introduction
Shush Buddy ("we," "our," or "the Service") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Data We Collect
We collect the following types of personal data:
- Account Information: Name, email address, password (encrypted), profile photos
- Profile Information: Display name, bio, gender, date of birth, interests, location preferences
- Usage Data: Messages, likes, matches, saved profiles, notification preferences
- Device Information: Push notification tokens, device identifiers, browser type
- Location Data: Approximate location (coarse coordinates only, rounded to 0.05-degree grid) when you choose to share it
- Analytics Data: Anonymous usage data (no PII) when you consent to analytics
3. How We Use Your Data
We use your data to:
- Provide, operate, and improve the Service
- Facilitate profile discovery and matching
- Enable messaging and notifications
- Verify your identity and protect against fraud
- Enforce our Terms of Use and Community Guidelines
- Analyze usage patterns to improve the Service (with your consent)
- Send you important security and account notifications
4. Data Sharing
We share your data with the following service providers who help us operate the Service:
- Convex: Database, backend services, and authentication (primary data processor)
- Resend: Email delivery for authentication and transactional emails
- Firebase Cloud Messaging: Browser push notifications (FCM only, not Firebase Auth or Firestore)
- UploadThing: Secure file storage for profile photos and media uploads
- Payment and payout providers: Payment processing, recipient verification, and payouts (if enabled; the selected providers will be identified before launch)
We do not sell your personal data to third parties.
5. Data Retention
We retain your data for the following periods:
- In-app notifications: 12 months
- Email delivery metadata: 90 days
- Security and audit events: 12 months
- Push subscriptions: Removed on account deletion, revocation, or invalid endpoint
- Account and profile data: Until you delete your account (30-day completion window)
When you delete your account, we permanently delete your profile, photos, likes, saves, and direct identifiers within 30 days.
6. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Export: Download your account data in a machine-readable format
- Deletion: Request deletion of your account and personal data
- Correction: Update or correct inaccurate personal data
- Objection: Object to certain uses of your personal data
- Withdraw Consent: Revoke consent for analytics and non-essential processing
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure.
8. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws.
9. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect personal data from children under 18. If we become aware that we have collected such data, we will take steps to delete it immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date.
11. Contact Us
If you have questions about this Privacy Policy or your personal data, please contact us at:privacy@shushbuddy.app