Privacy Policy

1. What we collect

We do not collect your name, email address or phone number. Accounts are anonymous and identified only by a random ID.

• Photos you submit for a check (required for LOOK, optional for PROFILE)
• Text you submit for a check (a message, a bio). A check's heading is generated automatically from the beginning of that text
• An optional age band (18–24 / 25–34 / 35+) and gender identity, used to decide who is asked to answer
• The time at which you confirmed you are 18 or over
• Answers you give on other people's checks: the dimensions you chose, anything you wrote, how long you took, and the confidence you reported
• Usage events (a screen was shown, a feature was used) together with the identifier of the check they relate to
• Purchase information: transaction id, product id, and whether it was sandbox or production
• Reputation score, tiles solved, and any reports or blocks you make

2. Why we use it

To deliver checks to other people, to screen submissions for safety, to produce the aggregated result, to apply purchases, to prevent abuse, and to improve the Service.

We do not serve advertising and we do not profile you for advertising.

3. Who we share it with

• Supabase (Supabase Inc., United States) — the database, authentication, file storage and server functions. All data is stored there.
• OpenAI (OpenAI, L.L.C., United States) — photos and text are sent for safety screening and for the AI reading of a submission. No respondent identifiers are sent.
• RevenueCat (RevenueCat, Inc., United States) — your account ID is sent so purchases can be applied.
• Apple (Apple Inc.) — App Store purchase processing.

We share personal information with no one else. There is no advertising network, no analytics SDK, and no crash-reporting SDK in the app.

Our infrastructure runs on servers in the United States, so data is transferred outside your country.

4. What other people can see

People answering a check see the submitted photo or text and the check's heading. Photos are shown through a temporary link that is valid for 60 seconds.

Answers are anonymous. The person who asked is not told who answered, and answerers are not told who else answered.

Someone you block is not told that you blocked them.

5. Retention and deletion

You can delete your account and your data at any time from the Me tab. Deletion removes your profile, the checks you created, the photos you uploaded, the answers you gave, your balance, your purchase records, your reputation and your authentication account. It cannot be undone.

Until you delete it, the information above is retained.

Two things are treated differently. Usage events are detached from your account and remain as records belonging to no one. Records of notifications from our payment processor keep the row — so that a redelivered notification cannot credit anyone twice — but the account ID inside it is removed.

6. What we do not collect

• Location
• The advertising identifier (IDFA) or tracking permission
• Name, email address or phone number
• Push notification tokens
• Contacts, calendar or health data

Our infrastructure provider (Supabase) may log technical information such as IP addresses in the course of operating the service. That is not information we collect or consult.

7. Age

The Service is for people aged 18 or over. We do not knowingly collect information from anyone under 18.

8. Changes

If this policy changes we will update the date on this page, and announce material changes in the Service.

9. Contact

Questions about this policy or about your information: contact Aster Works.