Privacy Policy

• Account details — your name, handle, email address, and optional bio. If you sign up with a password, we store a salted, hashed version of it, never the password itself. Business accounts also have an industry and, optionally, a website.
• Sign in with Google or Apple — if you use one of these, we receive your email address, an account ID from that provider, and your name if the provider shares it. We don’t receive your Google or Apple password.
• What you post and do — posts, polls and your poll answers, ideas, replies, likes, follows, blocks, and reports (including the reason and any note you add). If you unlock an in-person post by scanning its QR code, we record that you unlocked it.
• Points and rewards — the points you earn with each business, the rewards you redeem, and the award certificates and vouchers we send you (including their redemption codes, and when a business marks them redeemed).
• Business verification — to verify a business, we store the email address and domain used to confirm it. If a business asks for a manual review instead, we store the message it sends us and our decision.
• Payment and payout records — for cash bounties we store the amount, our fee, its status (for example funded, paid, or refunded), and the IDs Stripe gives us for the payment, transfer, refund, customer, or payout account. We also store whether your payout account is ready to receive money. We never see or store card numbers, bank details, or identity documents — Stripe collects those directly (see below).
• Email settings — whether notification emails are on for your account.
• Sign-in session — a signed token that keeps you logged in for up to 30 days. On the website it’s a cookie; in the app it’s kept in your device’s secure storage (Keychain or Keystore).
• On your device only — the app remembers the language you picked (English or Spanish) on your phone. We don’t store that on our servers.
• IP address — we use your IP address briefly, in memory, to limit repeated attempts (for example, too many logins in a short time). We don’t save it in our database. Our hosting provider handles it as part of delivering each request.

We don’t use your location, contacts, or camera. The only device permission the app asks for is saving a business’s QR poster to Photos, and only when a business chooses to save one.

• Your name, handle, bio, the ideas and replies you post, your implemented ideas (“wins”), and simple counts like how many ideas you’ve posted. For businesses, also industry, website, verified badge, and posts.
• Likes and poll answers are shown as totals, not as a list of who picked what.
• When a business checks one of your award certificates or vouchers, it sees your name and handle so it can honor it.
• Your email address is never shown on your profile.

• To run FeedBack — show posts and ideas, count votes and poll answers, track points, and issue and redeem rewards.
• To run cash bounties — take a business’s payment, hold it, pay the winner, or refund the business.
• To keep accounts secure and stop abuse — rate limiting, verifying businesses, reviewing reports, and banning accounts that break the rules.
• To send you email (see “Emails we send”).
• To translate posts in the app into your chosen language (see “Who else handles your data”).

• Account emails — confirming your email address, password resets, and business verification results. These are needed to run your account.
• Notification emails — when a business implements your idea, someone replies to your idea, someone suggests an idea on your post, or you’ve earned enough points for a reward. These are on by default. You can turn them off at any time in Settings on the FeedBack website, or with the unsubscribe link at the bottom of every notification email.

We don’t sell your personal information. We share it only with these service providers, and only as needed for them to do their job:

• Railway hosts our servers and the database that holds the information described above, in the United States.
• Backup storage — we keep copies of the database with a separate cloud storage provider so we can recover from an outage. Each copy is deleted after about 14 days.
• Stripe processes cash bounties. Businesses pay through Stripe, and winners are paid through Stripe Connect. Stripe collects card details, and, for winners, identity and bank details, directly under its own privacy policy. We send Stripe a business’s name and FeedBack handle, or a winner’s FeedBack handle, so it can match the account to you.
• Resend delivers our emails, so it receives your email address and the content of each email.
• Anthropic (the maker of Claude) translates text for the app’s English/Spanish setting. When you view posts in the app while signed in, the user-written text on screen — such as posts, poll options, ideas, replies, reward descriptions, and award messages — may be sent to Anthropic to be translated into your chosen language. We send only the text, not who wrote it or who is reading it. We keep a copy of each translation so the same text isn’t sent again. We also count how much text each account has translated per day, to cap costs.
• Google and Apple, if you choose to sign in with them.
• Expo delivers updates to the app. When the app checks for an update it sends basic technical details, such as the app version and platform — not your account information.
• Plausible — when enabled on the website, we use Plausible for page-view statistics. It doesn’t use cookies or build a profile of you; we only see totals.
• Authorities, if the law requires it or to protect people from harm.

• Edit your profile at any time, and delete your own posts, ideas, and replies.
• Block other people so you stop seeing their content.
• Turn notification emails off (see above).
• Close your account from Settings on the website or in the app (see below).
• Email us to ask for a copy of your information or to correct it.

When you close your account, we:

• Replace your name with “Deleted account” (or “Deleted business”), change your handle, and clear your bio — and, for businesses, the industry, website, and verification details.
• Remove your email address, password, and Google or Apple link, so nobody can sign in to the account again. Your email address can then be used for a new account.
• Delete your follows, your notifications, and any pending password reset or business verification requests.

Some things stay, attached to the anonymized account rather than to your name:

• Posts, polls, ideas, replies, likes, and poll answers, so conversations and results still make sense. If you want any of these gone, delete them yourself before closing your account. A closed business’s posts are no longer listed on the board, but they stay in our database.
• Award certificates and vouchers, points records, blocks, and reports.
• Cash bounty and payout records, including Stripe IDs, which we keep for accounting and to handle disputes.

You can’t close your account while money is still moving. A person who is owed a cash payout has to wait until it’s paid; a business with a funded bounty has to approve an idea or wait for the refund. Information Stripe holds about you is kept under Stripe’s own policies.

Database backups made before you closed your account still contain your old details until they’re deleted, about 14 days later.

We keep your information while your account is open. After you close it, we keep what’s described in “Closing your account” for as long as FeedBack runs, or as long as we need payment records for accounting, tax, and disputes. Backups are deleted after about 14 days.

You must be at least 16 to use FeedBack, and at least 18 to receive a cash bounty payout. We don’t knowingly collect information from anyone under 16; if you believe a child has an account, email us and we’ll close it.

We use encrypted (HTTPS) connections, hashed passwords, signed sessions that expire after 30 days, and rate limiting. Resetting your password signs out every existing session. No system is perfectly secure, but we work to protect your data.

We may update this policy. When we do, we’ll change the date at the top. If a change significantly affects how we use your information, we’ll try to let you know by email or in the app.

Questions, or want a copy of your data? Email us at hello@feedbackapp.app.