Privacy Policy

Deep is a friendship development app that helps you grow meaningful relationships with the people who matter to you. We take your privacy seriously. This policy explains what data we collect, how we use it, and what control you have over it.

1. What we collect

When you use Deep, we collect:

  • Account information: your email address and, optionally, display name.
  • Friend data: names, relationship notes, interests, birthdays, and other details you choose to enter about the people in your life.
  • Interaction history: records of prompts you completed, notes you wrote, and when you logged each interaction.
  • App usage data: scheduling preferences, notification settings, and frequency goals.
  • Analytics data: anonymized usage events such as when you complete a prompt, skip a prompt, add a friend, or enable notifications. This data is collected via PostHog and cannot be used to identify you personally.
  • Feedback: if you submit feedback through the app, we collect the text of your message so we can read and respond to it.

We do not collect your contacts, location, or any data from your phone beyond what you explicitly enter into the app.

2. How we use your data

We use your data solely to operate the app and provide the service to you. Specificially:

  • To surface the right friend at the right time based on your scheduling preferences.
  • To remember you interaction history so the app can learn your patterns.
  • To send you notifications if you choose to enable them.
  • To allow you to log in and access your data across devices.
  • To understand how people use the app so we can improve it (analytics data only, anonymized).
  • To read and respond to feedback you submit through the app.

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 4.

3. How your data is stored

You data is stored securely using Supabase, a backend platform built on PostgreSQL. Data is hosted on servers in the United States. Supabase uses industry-standard encryption in transit (TLS) and at rest.

Your friend data and interaction history are private to your account. No other Deep user can see your data.

4. Third-party services

Deep uses a small number of third-party services to operate:

  • Supabase: database, authentication, and backend infrastructure. Supabase processes data on our behalf and is contractually bound to protect it.
  • Expo / EAS: the platform used to build and deliver the app. Expo does not have access to your personal data or friend data.
  • Apple / Google: app distribution through the App Store and Google Play. Their respective privacy practices are governed by their own privacy policies.
  • PostHog: analytics platform used to collect anonymized usage events. PostHog does not receive your name, email, friend data, or interaction history—only anonymized behavioral events tied to a random user ID.
  • Resend: email delivery service used to receive feedback you submit through the app. Your feedback message is transmitted via Resend to reach us.

We do not use advertising networks or any other third-party data services beyond those listed above.

5. Your rights and controls

You are in control of your data:

  • Access: all your data is visible to you within the app.
  • Edit: you can update or correct any information you’ve entered at any time.
  • Delete: you can permanently delete your account and all associated data from within the app under Settings > Privacy & Data > Delete Account. Deletion is immediate and irreversible.

If you have questions about your data or need help with a data request, contact us at the email address in Section 7.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, all of your data–including your friend list, interaction history, and account information–is permanently deleted from our systems immediately.

We do not retain backups of deleted accounts.

7. Children’s privacy

Deep is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete promptly.

8. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the “Last updated” data at the top of this document. If we make material changes, we will notify you within the app. Continued use of Deep after changes are posted constitutes your acceptance of the updated policy.

9. Contact

If you have questions, concerns, or requests regarding this privacy policy or your data, you can reach us here at joindeep.org/contact.