Privacy Notice
Last updated: [DATE]. Have a lawyer review this before launch, and fill in everything in [brackets].
Who we are
[BRAND NAME] is run by [YOUR LEGAL NAME / COMPANY], [ADDRESS], India. Contact for privacy questions and grievances: [EMAIL].
What we collect and why
| Data | Why |
|---|---|
| Your Google account email address and Google account ID (when you sign in with Google) | To create your account and keep you signed in |
| The username you choose | To give you your personal link |
| Notes you receive | To show them in your inbox |
| Notes you send, with a private record of the email address that sent them | To prevent and act on bullying, threats and abuse |
| Reports you make about notes or profiles | To review them |
We do not collect your phone number, contacts, location or your Google password. We do not use your data for advertising.
Who can see that you sent a note
The person you write to cannot see who you are. A small number of [BRAND NAME] staff can see the sender of a note, only to review abuse and enforce our rules. Every such view is logged. We share it outside [BRAND NAME] only if the law requires us to, for example a valid request from the police or a court.
How long we keep it
- The record of who sent a note is deleted automatically after 90 days, unless the note was reported or held for review.
- Your account and inbox stay until you delete your account.
- If an account is banned for abuse, we keep its email address on a block list so it can't sign up again.
Your rights
You can delete your account at any time from your inbox (Account → Delete my account). This removes your account and your inbox. Records of notes you sent are kept for up to 90 days for safety, then deleted. You can also ask us to access, correct or erase your data, or withdraw consent, by emailing [EMAIL]. If you're not satisfied with our response, you can complain to the Data Protection Board of India.
Where your data is stored
Data is stored with our hosting provider, Supabase, in its Mumbai (India) region, and protected with encryption in transit and at rest. Sign-in is provided by Google.
Age
[BRAND NAME] is for people aged 18 and over.
Not affiliated with Instagram or Google
[BRAND NAME] is an independent service and is not affiliated with, endorsed by or sponsored by Instagram, Meta or Google. Usernames are chosen by users and are not verified Instagram accounts.