PRAıGO

PRAiGO Privacy Policy

Effective date: 29 July 2026

PRAiGO is a social app for joining and hosting small in-person hangouts ("Socials") near

campuses. This policy explains, in plain English, what information the app collects, why,

where it lives, who can see it, and how to delete it.

PRAiGO has no ads, no third-party analytics, and no tracking SDKs. We do not sell your data

to anyone, ever.

What we collect

Only what the app needs to work:

Phone number — if you sign up or sign in with a phone number.
Email address — if you sign in with Google, if you verify a school (.edu) email to host Socials, or if you have a legacy email account. New accounts cannot be created with email; email sign-in exists only for accounts made before that path was removed.
Profile details — your display name, a unique handle, an optional campus, an optional bio and interests, and an optional avatar photo you choose to upload.
Photos you post ("Moments") — pictures you upload to a Social's album, including the check-in photo.
Device location — read in exactly two places, both started by you. (1) When you open the nearby-Socials feed, to find and sort events near you — those coordinates are used to answer that one request and are not stored. (2) When you are hosting and tap "Use current location" while creating a Social, your current coordinates are saved as that Social's meeting spot, which other attendees can see — that is the point of the feature, and it only happens when you press that button. The app does not keep a history of where you have been and does not track your location in the background.
Activity in the app — your RSVPs and attendance at Socials, the in-app messages you send, and a points ledger (the record of points you earn and spend).

That is the full list. We do not collect contacts, calendars, browsing history, advertising

identifiers, or anything from other apps.

Why we collect it

Each item has one job:

Phone number / email — to sign you in and keep your account yours. The school email is used once to confirm you belong to a campus community before you can host.
Profile details — so other attendees know who they are meeting.
Moments photos — so people who were at a Social share its memories.
Location — to show you Socials near you instead of Socials in another city, and — only when a host chooses "Use current location" — to pin a Social's meeting spot.
RSVPs, attendance, messages, points — this is the product itself: who is coming, who came, coordinating the meetup, and rewarding people who show up.

We do not use any of this for advertising or profiling.

Where it lives

All data is stored in a Supabase-hosted PostgreSQL database and file storage, running on

Amazon Web Services in the East US region. Photos live in Supabase Storage buckets in

the same project.

Who sees what

Access is enforced in the database itself with row-level security (Postgres RLS), not just

in the app, so the rules hold even if the app misbehaves. In short: nothing is visible to

people who are not signed in. Your profile is visible to other signed-in users by default,

and you can flip a private profile toggle that hides it — and your avatar, your photos,

and your place in event rosters — from everyone but you. Each Moments photo is visible

either to everyone in the app or only to people who attended that Social, depending on its

visibility setting, and in both cases only while your profile is public (photo files are

kept in a private bucket guarded by the same rules — there are no public photo URLs). Your

points ledger is visible only to you, and messages are visible only inside the Social they

belong to.

Retention

We keep your data for as long as your account exists, because it is your profile, your

history, and your photos. Two exceptions: school-email verification codes expire after 10

minutes, and anything you delete (a photo, your account) is removed as described below

rather than kept "just in case". We do not keep a log of your location; the only stored

coordinates are the meeting spots of Socials, kept as part of the event itself.

Deleting your account

You can delete your account yourself, inside the app, with no email or support ticket:

Profile tab → settings → Delete my account

When you confirm, the app immediately:

1. Deletes your photos — the database records and the actual image files in storage —

along with your likes on other people's photos and reports you filed.

2. Anonymises your profile — your name, handle, avatar, bio, campus, and interests are

erased.

3. Permanently locks the account — your phone number and email are removed from the

sign-in record so it can never be signed into or recognised again.

One honest caveat: Socials you hosted are not deleted, because deleting them would also

erase the attendance history and points of everyone who came. Those events remain,

attributed to "Someone", with nothing identifying you. If the deletion cannot complete, the

app tells you so and nothing is changed — it never pretends a failed deletion succeeded.

Children

PRAiGO is built for college students and is intended for users 17 and older. It is not

directed at children, and we do not knowingly collect data from anyone under 13. If you

believe a child under 13 has an account, email us and we will delete it.

Third-party processors

Four services process data on our behalf, each for one narrow purpose:

Service	What it does	What it receives
Supabase	Hosts our database, file storage, and sign-in system	All data listed above
Twilio	Sends the SMS verification code when you sign in by phone	Your phone number
Google	Google sign-in	Tells us your email and name when you choose to sign in with Google
Resend	Sends the one-time code that verifies your school email	Your school email address

None of them are permitted to use your data for their own purposes.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the effective

date at the top before the change takes effect.

Contact

Questions, concerns, or deletion help: aadijain725@gmail.com