Privacy Policy

Last updated October 18, 2026

Friendship Contract is a social app for recording friendships as humorous “contracts”. This page explains what we collect, how it is used and protected, and the choices you have. The short version: we collect only what the app needs, we never sell it, there are no ads, and you can delete everything yourself at any time.

What we collect

• Account details: your name, email address and password (stored only as a one-way hash). If you sign in with Google or Apple, we receive your name and email from them. We never see those passwords.
• What you add in the app: friend names, where and when you met, contract types, notes, hangouts, claims, replies, reactions, group chats and messages, plus the photos and drawn signatures you upload.
• Optional profile details: social media handles, your birthday, and your phone number (only if you turn sharing on).
• Notification tokens: if you turn notifications on, your phone or browser gives us a token so we can deliver them. Turn them off and it is removed.
• Usage, speed and error data: which screens and features are used, how fast pages load on your phone, and crash reports. This is tied to your account so we can fix problems, and it is automatically deleted after 30–180 days.

We do not collect your precise location, your contacts, your biometric data, or anything from other apps.

Who can see it

• A contract, its history and its messages are visible only to the two people on it (or the members of a group).
• Your profile and socials are visible only to people with an active contract with you. Your phone number is hidden unless you choose to share it. Your birthday shows only the month and day unless you choose to show the year.
• Your activity appears in friends’ feeds and in rankings only if your profile is set to visible. Terminations are never shown. You can hide specific hangouts from specific people.
• A contract link you share shows the issuer’s first name, last initial and profile photo so the other person knows who it is from.

How it is used

Your information is used only to run the app’s features, keep it working, and keep it safe (for example reviewing reports of abuse). We do not sell your data, show ads, build advertising profiles, or share your data with advertisers or data brokers.

No AI, no biometrics

Friendship Contract does not use artificial intelligence or automated decision-making about you, does not generate content with AI, and does not use your content to train AI models. Signatures and photos are stored as ordinary images; we never run facial recognition or collect biometric identifiers. We do not use Face ID or Touch ID. If your phone uses them to fill in a password, that happens on your phone and never reaches us. If we ever add AI features, we will update this policy first and tell you in the app.

How it is protected

• Encrypted in transit: every connection uses HTTPS/TLS. The site refuses plain HTTP.
• Encrypted at rest: the database, backups and uploaded photos are stored on encrypted disks by our hosting providers.
• Access rules in the database itself: every record is protected by row-level security, so one person’s data cannot be read by another even if the app has a bug.
• Passwords are hashed, sign-in links expire, and abusive behavior is rate-limited.

No system is perfectly secure. If we ever learn of a breach that affects you, we will tell you by email as soon as we can.

Where it is stored and who helps us

Data is stored with Supabase (database, file storage and sign-in) and the site is hosted by Vercel, both in the United States. Apple and Google handle their own sign-in buttons and Apple delivers iPhone notifications. These providers process data only on our behalf. We use no analytics vendors, ad networks or tracking pixels.

Cookies

The website uses only the cookies and on-device storage needed to keep you signed in and remember your settings. There are no advertising or third-party tracking cookies, and we do not load any social-media pixels. Because nothing is optional, there is nothing to opt out of; clearing your browser’s site data signs you out.

Notifications and email

Notifications are off until you turn them on, and you can turn each kind on or off any time from Me → Notifications or in your phone’s settings. We do not send marketing or promotional email. The only emails we send are for your account (confirming your address, resetting your password) and replies when you contact us.

18 and older

Friendship Contract is for adults. You must be 18 or older to create an account, and birthdays under 18 are rejected. We do not knowingly collect information from anyone under 18; if we learn we have, we delete the account. If you believe someone under 18 is using the app, email us.

How long we keep it

Your account and everything in it stay until you delete them. Usage data is deleted after 180 days, error reports after 90 days and speed measurements after 30 days. Reports of abuse are kept while we handle them. Database backups are kept for a short rolling period and then overwritten.

Your choices and rights

• Edit or hide: change your profile, hide it from feeds and rankings, remove contracts from your Book, and delete posts or recent hangouts in the app.
• Delete everything: go to Me → Delete my account. Your account, contracts, messages, photos and notification tokens are deleted immediately. You can also email us and we will do it within 30 days.
• Get a copy: email us and we will send you an export of your data within 30 days.
• Depending on where you live (for example California or the EU) you may have additional rights to access, correct, delete or restrict your data. Email us to exercise them; we will never treat you differently for doing so.

Changes

If we change this policy we will update the date at the top and, for important changes, tell you in the app.

Contact

Questions about privacy: esgabay@gmail.com

See also our Terms of Service and Support page.