Privacy Policy

1. Introduction

PUSO Spaze ("we," "our," or "us") is a faith-based mental wellness community app open to everyone, especially Gen Z and younger generations. We are committed to protecting your privacy and ensuring your personal information is handled responsibly. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

2. Information We Collect

2.1 Account Information

• Display Name — A username you choose when creating your account. This is publicly visible on posts and comments.
• Device Identifier — A unique ID generated on your device to authenticate your account. We do not collect your name, email address, phone number, or password.
• PIN — A 6-digit PIN auto-generated for cross-device login. Stored securely on our servers.

2.2 Content You Create

• Posts & Comments — Text content and optional images you share in the community. Posts can be made anonymously.
• Journal Entries — Private journal entries you write. These are only visible to you.
• Messages — Direct messages exchanged with coaches through the app.
• Reactions — Reactions (Pray, Care, Support, Like) you give to posts and comments.

2.3 Device & Technical Information

• Push Notification Token — If you enable notifications, we store your Expo push token to deliver notifications to your device.
• Platform — Whether you are using the app on Android, iOS, or web.

2.4 Information We Do NOT Collect

• Real name, email address, or phone number
• Location or GPS data
• Contacts or address book
• Photos or files from your device (unless you explicitly upload an image)
• Browsing history or app usage analytics

3. How We Use Your Information

• Provide the Service — Display your posts, deliver notifications, enable coaching conversations, and store your journal entries.
• Content Moderation — We use automated AI-based moderation (via OpenAI) to review posts and comments for harmful content before they are published. Moderation is designed to keep the community safe.
• Biblical Encouragement — We use AI to generate faith-based encouragement responses to community posts. No personal data is sent to AI services beyond the post content being moderated or responded to.
• Account Recovery — If you lose access to your device, coaches can review your recovery request using your display name and posting history to verify your identity.
• Push Notifications — To notify you about reactions, comments, encouragement messages, and coach messages.

4. Anonymous Posting

PUSO Spaze supports anonymous posting. When you post anonymously:

• A randomly generated display name is used instead of your real username.
• Other users cannot see your identity on anonymous posts.
• Coaches and administrators can see anonymous post authorship only for moderation and safety purposes.

5. Data Sharing & Third Parties

We do not sell, trade, or rent your personal information to third parties. We share data only in the following limited cases:

• OpenAI — Post and comment text is sent to OpenAI's moderation and chat completion APIs for content safety checks and encouragement generation. No account identifiers are included in these requests.
• Expo (Push Notifications) — Your push notification token is sent to Expo's push notification service to deliver notifications.
• Hosting Providers — Our servers and database are hosted on Railway and Vercel. These providers may process data as part of infrastructure operations.
• Legal Requirements — We may disclose information if required by law or to protect the safety of our users.

6. Data Storage & Security

• Data is stored in a PostgreSQL database hosted on Railway with encrypted connections.
• Authentication uses JSON Web Tokens (JWT) with secure signing.
• Sensitive data (device ID, tokens) is stored using platform-secure storage on your device (Expo SecureStore on mobile, encrypted storage on web).
• Image uploads are validated for safe file types using magic byte verification.

7. Data Retention

• Your account and content remain stored as long as your account exists.
• Journal entries are stored indefinitely and are only accessible by you.
• Deleted posts and comments are permanently removed from our database.
• If you wish to delete your account and all associated data, you can do so in the app at Profile → Preferences → Delete Account, or contact us at the email below.

8. Children's Privacy

PUSO Spaze is designed for users aged 13 and above. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete that information.

9. Your Rights

You have the right to:

• Access your data — View your posts, journal entries, and profile information within the app.
• Delete your content — Remove individual posts, comments, and journal entries at any time.
• Delete your account in-app — Open Profile → Preferences → Delete Account to permanently remove your account, posts, journals, comments, reactions, and chat history. This action is immediate and cannot be undone.
• Request account deletion by email — If you cannot access the app, contact us at the email below and we will delete your account and all associated data on your behalf.
• Opt out of notifications — Disable push notifications in the app settings or your device settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

• Email: support@puso-spaze.org
• Facebook: facebook.com/PUSOofficial