Privacy Policy

1. Data We Collect

Account information

When you register, we collect your email address, chosen username, and display name. You may optionally add a profile photo, bio, and website URL.

Photos and EXIF metadata

When you upload a photo, technical metadata embedded in it (EXIF data) — such as camera make and model, capture date and time — may be read to verify the authenticity of the image. Stored photos are re-encoded, which strips embedded metadata from the file we serve. If your photo contains GPS coordinates, they are read on your device only to suggest a place name for your post; the raw coordinates are never uploaded or stored. A location appears on your post only if you explicitly choose one, and it is stored at place level (e.g. a neighbourhood or landmark), not as the photo's exact coordinates.

Usage data

We record the last time you were active on the Platform to power presence features. Standard server logs (IP address, browser type, pages visited) may be retained for security and debugging purposes.

Content you create

Posts, captions, comments, and messages you create are stored on our servers. Direct messages are private between participants.

2. How We Use Your Data

• To operate and provide the Platform.
• To verify the authenticity of uploaded photos.
• To send you notifications about activity on your account (if enabled).
• To detect and prevent abuse, spam, and policy violations.
• To improve the Platform.

We do not sell your personal data. We do not use your data for advertising.

3. Third-Party Services

We use the following third-party services to operate the Platform:

• Supabase — database, authentication, and file storage. Your data is stored on Supabase's infrastructure.
• Vercel — application hosting and content delivery.
• Sightengine — AI-generated image detection. A compressed thumbnail of each uploaded photo is sent to Sightengine for analysis. Sightengine does not retain images after analysis.

4. Cookies

We use essential cookies to maintain your login session. We do not use tracking or advertising cookies. By using the Platform, you consent to the use of essential cookies.

5. Data Retention

We retain your data for as long as your account is active. Stories are automatically deleted after 24 hours. If you delete your account, all associated data — including posts, comments, messages, and profile information — is permanently and irreversibly removed within 30 days.

6. Your Rights

Depending on where you live, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — update incorrect data via your account settings.
• Deletion — permanently delete your account and all associated data from Settings → Account → Delete account.
• Portability — download a copy of your data any time from Settings → Privacy → Download your data.
• Objection — object to certain uses of your data.
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at contact@authentic-app.com. We will respond within 30 days.

7. Children's Privacy (COPPA)

authentic is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us at contact@authentic-app.com and we will promptly delete the account.

8. International Transfers

Your data may be stored and processed in the United States or other countries where our service providers operate. By using the Platform, you consent to this transfer.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Platform or by email. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact

Questions or concerns about this policy? contact@authentic-app.com