Privacy Policy

1. Information We Collect

When you use Gibbet, we may collect the following types of information:

• Account information — email address, username, and password (securely hashed) when you register.
• Profile data — display name, bio, avatar image, and any community-specific profile details you choose to provide.
• Content you create — posts, comments, messages, wikis, and other content you submit within the app.
• Usage data — community activity, check-in history, session times, and feature interactions used to power Gibbet's engagement features.
• Device information — platform type (iOS/Android) and device identifiers necessary for push notifications.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Gibbet platform and its features.
• Deliver push notifications about activity relevant to you (with your permission).
• Personalize your experience, including community recommendations and achievement tracking.
• Maintain platform safety through content moderation and enforcement of community guidelines.
• Generate aggregated, anonymized analytics to understand how the platform is used.
• Communicate important updates, security notices, and launch announcements.

3. What We Do Not Do

4. Data Sharing

We do not sell, trade, or rent your personal information. We may share data only in the following limited circumstances:

• Service providers — trusted third parties that help us operate Gibbet (e.g., database hosting, authentication, push notification delivery). These providers are contractually bound to protect your data.
• Legal compliance — when required by law, court order, or to protect the rights, property, or safety of Gibbet, our users, or the public.
• Child safety reporting — we report CSAM and child exploitation content to the NCMEC and cooperate with law enforcement as required by law.

5. Third-Party Services

Gibbet uses the following third-party services, each with its own privacy practices:

• Supabase — database and file storage (supabase.com)
• Clerk — user authentication and session management (clerk.com)
• Agora — real-time voice communication (agora.io)
• Expo / Firebase — push notifications and app delivery (expo.dev / firebase.google.com)

6. Community Identities & Privacy

Gibbet is designed with compartmentalized identities. Your global profile and your community-specific profiles are kept separate — what you share in one Lily Pad is not automatically visible in others. Community moderators can only see activity within their own community.

7. Data Retention & Deletion

You may request deletion of your account and all associated data at any time. To delete your account, visit gibbet.app/delete-account or email us at privacy@gibbet.app.

Upon confirmed deletion, your personal data will be removed within 30 days, except where retention is required by applicable law. Anonymized aggregate data may be retained for analytics purposes.

8. Children's Privacy

Gibbet is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately at safety@gibbet.app and we will promptly delete it.

For our full child safety practices, see our Child Safety Policy.

9. Your Rights

• Access — Request a copy of the personal data we hold about you.
• Correction — Update or correct your information through the app or by contacting us.
• Deletion — Request deletion of your account and all associated data.
• Opt-out — Unsubscribe from marketing emails or disable push notifications at any time in Settings.

10. Security

We implement industry-standard security measures to protect your information, including encrypted storage, row-level access controls, and secure authentication through Clerk. While no system is 100% secure, we continuously review and improve our security practices.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through the app or via email. Continued use of Gibbet after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

Questions about this Privacy Policy or how your data is handled:

• Email: privacy@gibbet.app
• Safety concerns: safety@gibbet.app