Privacy notice

The short version: your projects are public, your messages stay between you and the other person unless one of you reports them, and you can download or delete your data.

When you publish a project, anyone can read it. That includes your display name, the project text, its stage and topics, any updates you post, and a general location if you choose to add one.

So keep exact addresses and anything confidential out of your projects.

Your email address and sign-in records are stored privately with Supabase, the service that handles accounts for us.

Who you follow and your notification settings are saved to your account.

Private conversations can be read by the two people in them. Our moderation tools don't let us browse through conversations. If someone reports a message, the people who review reports can see that one message.

We also keep records of reports, blocks, moderation decisions, and whether emails were delivered. That's how we keep the site safe and working.

We send sign-in codes when you log in, and notifications if you want them.

When you get a new message, the email just links to your inbox. It never includes the message, the conversation title, or a preview.

You'll only get emails about a project's updates if you turn them on for that specific project. You can turn notification emails off anytime in your settings or with the unsubscribe link in any email. Once an email has gone out, we can't unsend it.

To run Up To Something, we use a few outside services: Supabase for accounts and data, Vercel for hosting, Resend for email. Confirm the list and where data is stored.

If you start writing and haven't saved yet, your draft is kept in this browser for up to 14 days. It won't show up on your other devices until you save it.

Anyone else using this device could see those drafts, so clear them if you're on a shared computer. Signing out clears your drafts. Signing in keeps the one you're working on.

You can download a copy of your account data. It includes your email, your projects (public and private details), updates, follows, settings, reports you've made, people you've blocked, and the conversations you're part of.

It doesn't include messages hidden by moderation, or anything that belongs to other people, like their reports, settings, or conversations you're not in.

Your export has private information in it, so keep it somewhere safe.

You can delete your account yourself. This permanently removes your account and everything tied to it. To make sure it's really you, you'll need to have signed in recently and type a confirmation.

Heads up: deleting your account also deletes every conversation you're in, including the other person's messages.

Any notifications that haven't gone out yet are cancelled. A few things we can't pull back: emails that were already sent, or a copy of a conversation someone else already exported.

Reports other people made about you, and overall moderation and email delivery records, may stay. But once your content is deleted, we can't see it anymore.

## Contact

Questions about privacy, help with your account, or a deletion request? Email heyuptosomething@gmail.com.

Up To Something is a project by Heirloom, run by Heirloom Connect, Inc.