Privacy Policy

Our Privacy Promise

Click is built on a simple conviction: your social life is nobody else's business. We collect the minimum data needed to make the product work, we never sell your data, and we delete it when it's no longer needed. Privacy isn't a feature; it's the foundation.

Data We Collect

We collect only what's necessary to power Click:

• Account info: Email address and display name
• Interest tags: Self-selected interests you choose during onboarding
• Connection data: Records of who you connected with, when, and where (semantic location only, e.g. "Coffee Lab", not GPS coordinates)
• Messages: Chat messages sent during active connections
• Device info: Platform (iOS/Android) for NFC compatibility

We do not collect: precise GPS location history, contacts, photos, browsing history, advertising identifiers, or any data from other apps on your device.

How We Use Your Data

• Display your profile to connections you've approved via NFC/QR tap
• Show Common Ground interest overlaps when you meet someone
• Power the 48-hour "Say Hi" window and connection lifecycle
• Store messages during the connection lifecycle (deleted on expiry)
• Generate anonymized, aggregated analytics for business partners (never individual data)

Data Retention & Deletion

Deletion is a feature, not a flaw. Here's exactly when your data is removed:

• Pending connections: Auto-deleted after 48 hours if no message is sent
• Active connections: Auto-deleted after 7 days of no messages (unless both users tap "Keep")
• Kept connections: Stored permanently until either user deletes the connection
• Messages: Deleted when the parent connection expires or is deleted
• Account deletion: All data permanently removed within 30 days

B2B Anonymization Guarantee

Click offers anonymized analytics to venue partners ("Insights"). Here's what they can see:

• Total connection count by day and hour; never individual identities
• Aggregated interest tag distributions; never which specific users
• Kept ratio (percentage of connections that become permanent); never which connections

All analytics queries aggregate before returning data. No user IDs, names, or emails are ever included in Insights API responses.

Third Parties

• Supabase: Database and authentication provider (SOC 2 Type II compliant)
• Vercel: Website hosting and analytics (page views only, no personal data)

We do not use ad networks, data brokers, or third-party tracking SDKs. We will never sell, rent, or share your personal data with advertisers.

Your Rights

You have the right to:

• Access: Request a copy of all data we hold about you
• Correct: Update your profile information at any time
• Delete: Delete your account and all associated data
• Port: Export your connections list
• Object: Opt out of anonymized analytics inclusion

To exercise any of these rights, email us at the addresses below. We'll respond within 30 days.

Children's Privacy

Click is not intended for users under 13. We do not knowingly collect data from children. If you believe a child under 13 is using Click, contact us and we will delete their account.

Security

We use industry-standard encryption for all data transmission. Our database provider (Supabase) is SOC 2 Type II compliant. We regularly audit our security practices and will notify you promptly of any breach.

Changes to This Policy

We'll notify you of material changes via email and in-app notification at least 14 days before they take effect.

Contact Us

Questions about privacy? Reach out: