Privacy Policy

Last updated: April 29, 2026

This Privacy Policy explains how information is collected, used, and shared when using US Social Network ("we", "us", or "the Service").

1. Information We Collect

• Account information — name, email or phone number, profile details (affiliation, photo, optional locations such as where you live, work, or grew up).
• Content you create — posts, replies, photos, gifts you send and receive, RSVPs, offers you claim, and check-ins.
• Location data — device location is read when you use a location-based feature (check-in, neighborhood feed, place discovery). With your permission, you may also pin a "home" coordinate that drives the neighborhood radius.
• Online presence signal — while the app is foregrounded, the client sends a short heartbeat (approximately every 60 seconds) so we can show you and your connections as "online" with a green ring on the avatar.
• Push notification identifiers — if you enable push, we register a device-specific token with our notification provider so messages can be delivered.
• Device and usage data — operating system, app version, IP address, error logs.
• Payment metadata — when you buy [US] Coins or a place subscription, we receive transaction metadata (amount, success/failure, last four digits, timestamps). Full card details are handled directly by Stripe, Apple, or Google and never touch our servers.

2. How We Use Information

• Operate, maintain, and improve the Service
• Enable social and location-based features
• Process payments, deliver Coins, and manage subscriptions
• Maintain safety, integrity, and moderation
• Communicate with you about updates, changes, or support requests
• Comply with legal obligations

3. Location Data

The Service uses location data to enable core features such as nearby place discovery, posting only when physically present, real-time presence at venues, and the per-user "neighborhood" radius.

When you use location-based features, your presence at a place may be visible to other users currently viewing that place. Your home coordinates (used to compute your neighborhood) are never shown to other users — they are used server-side only to determine which other users fall inside your radius.

Location data is collected only while the app is in use or while location-based features are active. It is not continuously tracked in the background unless explicitly permitted by your device settings.

You can control or disable location access through your device settings, though some features may stop working.

4. Photos and Public URLs

Photos you upload (profile picture, story photo, post images, place backgrounds, etc.) are stored in our cloud storage provider (Supabase Storage). The resulting media URLs are publicly addressable — anyone with the link can load the file. We do not list or index those URLs publicly, but you should treat any photo you upload as potentially viewable by anyone who obtains the URL through the Service.

5. Sharing of Information

We share information only as needed to operate the Service or as required by law. Specifically:

• Supabase — application database, authentication, file storage, and serverless functions
• Stripe — web-based payment processing for [US] Coin packs and place subscriptions
• Apple App Store / Google Play — in-app purchase processing for [US] Coins on iOS and Android
• OneSignal — push notification delivery
• Google Places — venue search and place data lookup
• Law enforcement and regulators — when required by valid legal process or to protect rights, safety, or property

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as defined under the California Consumer Privacy Act (CCPA / CPRA).

6. Children's Privacy

The Service is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected such information, we will take steps to delete it.

7. User Content Visibility

Content you post may be visible to other users depending on the feature:

• Posts and check-ins at a venue are visible on the place's profile and to your network.
• Story photos are visible to anyone who views your profile.
• Gifts you send are visible to the recipient and on the recipient's profile aggregate; the sender's identity is shown to the recipient.
• Comments and likes are visible to the post's author and other commenters.

8. Data Security

We implement reasonable technical and organizational safeguards to protect personal information, including encryption in transit (TLS), row-level security on the database, and authenticated APIs. No system is completely secure; we cannot guarantee absolute security.

9. Breach Notification

If we discover a security breach affecting your personal information, we will notify you and, where required, the appropriate regulatory authorities, in accordance with applicable law (including the New York SHIELD Act and other state and federal data-breach statutes).

10. Your Rights and Choices

Depending on where you live, you may have the following rights with respect to your personal information:

• Right to know — what personal information we have collected, how we use it, and with whom we share it
• Right to access — a copy of your personal information
• Right to delete — request deletion of your personal information, subject to the retention exceptions in Section 11
• Right to correct — fix inaccurate personal information
• Right to opt out of sale or sharing — we do not sell or share your personal information for cross-context behavioral advertising; this right is honored automatically
• Right to non-discrimination — we will not retaliate against you for exercising these rights

EU and UK residents additionally have rights under the GDPR / UK GDPR including the right to object to processing, the right to restrict processing, and the right to data portability. The lawful bases on which we process personal information are the performance of our contract with you, our legitimate interest in operating and securing the Service, and your consent (for optional features such as location and push notifications).

To exercise any of these rights, email hello@aixum.io. You may also delete your account at any time through the in-app "Delete Account" flow.

11. Data Retention

We retain personal information only as long as necessary to provide the Service and fulfill our legal obligations. When you delete your account:

• We anonymize your profile and remove personally identifiable fields (name, photo, email, phone, locations).
• We delete your posts (or anonymize them as "Deleted user" so existing comment threads remain coherent), replies, likes, check-ins, connections, and similar user-action records.
• We purge profile photos, story photos, and post photos from our storage.
• We strip your email and phone from your authentication record so they free up for re-registration, then remove the authentication record itself.

Records we retain after account deletion: we retain transactional records (Coin purchases, subscription payments, gift transfers between users, and refund history) for up to seven (7) years to comply with U.S. tax law, audit requirements, and counterparty interests (for example, the recipient of a gift retains their own gift history). At the time of deletion these records are anonymized — your user identifier is removed — but the transactional row is preserved. Moderation records (e.g., reports filed about content you posted) may also be retained for safety purposes, anonymized.

12. Changes

This Privacy Policy may be updated over time. We will note the "Last updated" date at the top of this page. Material changes will be communicated through the Service or by email. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Contact

If you have questions about this Privacy Policy or want to exercise any of your rights, contact us at hello@aixum.io.

© 2026 US Social Network