Privacy Policy

Last updated: 5 November 2026

OtherfolkAI is an opinion-panel app: you send a question, several large language models answer it, and the app summarises where they agree and disagree. This policy says what we collect, why we collect it, where it lives and what you can do about it. We keep collection to what the feature needs and we do not sell your data.

1. What we collect

• Account: your email address, display name, the hash of your password (created and verified by Supabase — we never store the plain password), plus signup and last-sign-in timestamps.
• Your questions: the text you type into the ask box, including whatever it becomes when you export or share a report image.
• Verdicts: each model's reply, its stance (agree, disagree, neutral, no result), the summary and timestamps, so the results and history screens work.
• Credits and entitlements: asks used, asks left, plan and renewal date. Payment is processed by Apple, Google and RevenueCat; we receive purchase status, never card numbers or billing details.
• Technical information: app version, language, platform and device model, used to diagnose failures and roll out changes safely.

2. Legal bases

Performing our contract with you (serving the verdict, the history and the credits), your consent (the notifications permission, the content you choose to submit), legitimate interest (security, abuse prevention, improving the Service) and legal obligation (tax and store record-keeping).

3. Where data lives and who else touches it

• Backend and database: Supabase (Postgres, authentication, Edge Functions). Each account can only read and write its own rows; that is enforced server-side with row-level security, not by the app.
• Model providers: the text of your question is forwarded to the third-party model APIs in your panel so they can answer it. Do not submit other people's personal data, or anything you would not want a language model to process.
• Billing: RevenueCat, Apple and Google record purchases, subscription state and refunds.
• Distribution and telemetry: the app stores and, where enabled, crash and analytics services tell us about installs, crashes and usage.
• Apart from the above and what the law requires, we do not disclose your data to third parties and we do not sell it.

4. How long we keep it

Account data is kept until you delete your account. Questions, replies and history stay until you delete that entry or your account, and deleting the account clears them on the backend. Transaction receipts are kept longer where tax rules or store policies require it, separated from your display name and your questions.

5. Your rights

You can access, correct, export and delete your data, and withdraw consent at any time:

• Change your display name and delete individual history entries in the app.
• Delete your account and its data under Settings → Privacy → Delete account. This is irreversible and you will not be able to sign in again.
• Send us a request for access, portability or any other right to mmhsyy90@gmail.com.

6. Children

The Service is for adults or users who have reached the age of digital consent in their country. We do not knowingly collect children's personal data; if you believe we have, contact us and we will verify and remove it.

7. Security

Traffic is encrypted with TLS, passwords are stored only as hashes, and the database isolates each account's rows. No system is perfectly secure — if you think your account is compromised, change your password and tell us.

8. International transfers

Our hosting, model APIs and billing providers may sit outside your country. This policy is your notice of that, and we use the data only for the purposes described here.

9. Changes

We may update this policy as the Service or the law changes, and we will point out material changes in the app.

10. Contact

The Service is operated by an independent developer. Contact: mmhsyy90@gmail.com — send access, correction, export or deletion requests to this address.