Privacy Policy

Last updated: June 2026

Your data is yours. We do not sell it, share it with advertisers, or use it to build profiles for third parties. This policy explains what we collect, why we collect it, and what control you have over it.

What we collect

We collect only what is needed to run the platform:

  • Profile information: display name, age (optional), general location (optional), bio (optional), photos (optional), connection intents, interests, communication styles, support needs, ND identifiers, collaboration roles
  • Account credentials: email address and a hashed password (we never store your password in plain text)
  • Messages: messages you send through the platform are stored to deliver them and maintain conversation history
  • Device information: browser type and OS version for compatibility and bug reporting only — not for tracking

What you control

Your profile has granular visibility controls:

  • ND identifiers: you choose whether these are shown publicly, shown only to connections, or hidden entirely
  • Support needs: same controls — you decide who sees them
  • Communication styles: shown or hidden at your discretion
  • Location: if provided, only a general area (city or region) is ever shown — never an exact address or coordinates
  • Photos: all photos you upload can be removed at any time; removal is immediate

What we will never do

  • Sell your data to third parties
  • Share your data with advertisers
  • Use your neurodivergent identifiers or support needs for ad targeting
  • Show ads on this platform
  • Use your data to train AI models without explicit, separate opt-in consent
  • Store support-sensitive information in browser caches accessible offline
  • Share your messages with anyone other than the intended recipient

Data boundaries

Profile data is separated into two layers:

  • Public profile data — information visible to other users according to your visibility settings: display name, bio, connection intents, interests, and any profile sections you have set to public
  • Private account data — email address, exact age, full message history; never shown to other users

These two data types are stored and returned through separate code paths. A bug that leaks public profile data cannot also leak private account data.

Deleting your account

You can request account deletion at any time from your profile settings. Deletion removes all of your personal data — profile, messages, photos, and account credentials — within 30 days. Anonymised aggregate data (e.g. "X% of users are interested in music") may be retained but cannot be linked back to you.

Questions

Questions about your data or this policy? Contact us. We aim to respond within 5 business days.