Privacy Policy

Last updated: March 29, 2026

Ardsleypost ("we", "our", or "us") operates the Ardsleypost mobile application and website. This page informs you of our policies regarding the collection, use, disclosure, and protection of personal information when you use our service.

Information We Collect

When you create an account via Google Sign-In, we receive and store your name, email address, and profile photo from your Google account. When you use the app, we collect the content you post, comments, likes, and messages you send.

How We Use Your Information

We use your information solely to provide and improve the Ardsleypost service, including displaying your profile to other users, delivering messages, enabling payments, and maintaining app functionality. We do not use your data for advertising or marketing purposes.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We share your data only with the following service providers who are necessary to operate the app:

  • Google — for authentication (OAuth sign-in). Google receives your authentication token to verify your identity. See Google's Privacy Policy.
  • Supabase — for database hosting and storage. Your data is stored on Supabase's infrastructure (hosted on AWS). See Supabase's Privacy Policy.
  • Stripe — for payment processing. If you make or receive payments, Stripe processes your payment information. See Stripe's Privacy Policy.

Beyond these service providers, we do not share, transfer, or disclose your Google user data or any other personal information to any other third parties.

Data Protection and Security

We implement industry-standard security measures to protect your personal information:

  • All data transmitted between your device and our servers is encrypted using TLS/SSL (HTTPS).
  • Your data is stored in encrypted databases managed by Supabase, which uses AES-256 encryption at rest.
  • Authentication tokens and session data are handled securely using industry-standard protocols (OAuth 2.0).
  • Access to user data is restricted to authorized personnel only and is limited to what is necessary to operate and maintain the service.
  • Passwords and sensitive credentials are never stored in plaintext.

Data Retention

We retain your personal data for as long as your account is active. When you request account deletion, all associated data is permanently removed within 30 days. We do not retain copies of deleted data.

Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Update or correct your profile information at any time through the app
  • Request deletion of your account and all associated data by visiting our account deletion page
  • Revoke Google sign-in access through your Google account settings

Children's Privacy

Ardsleypost is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes by posting the new policy on this page with an updated revision date.

Contact

If you have questions about this privacy policy or our data practices, contact us at keugenelee11@gmail.com.

See also our Terms of Service.