🛡️ What the Bouncer Knows
Privacy Policy. The club keeps the door, not your secrets — here is exactly what we hold and why.
What we collect
- ✓Account basics: email, password (via Supabase Auth), birthday — used only to confirm 18+, never shown publicly.
- ✓Profile: photos, name, bio, preferences. Visible to other members by design — it’s a club, not a vault.
- ✓Verification result: result + timestamp + provider reference only. The ID documents, selfies, and ID numbers are processed by our verification provider (Stripe Identity) and are never stored by us.
- ✓Messages: stored to deliver and to keep the floor safe.
- ✓Token ledger: every earn, spend, and refund. This is financial data.
- ✓Usage basics: how you use the app, to keep it working and secure.
What we do NOT do
- ✓We do not sell personal data. Not now, not ever.
- ✓We do not share data with advertisers — there are no advertisers.
- ✓We do not post your verification status beyond the badge you already show.
- ✓We do not message other members on your behalf, ever.
Why we collect it
- ✓To run the club (accounts, billing, events), to keep it safe (verification, moderation), and to stay legal (age gate, financial records, refunds).
Your rights
- ✓See it: request a copy of your data.
- ✓Fix it: update your profile anytime.
- ✓Delete it: in-app account deletion.
- ✓Complain: to us, and you always keep your rights under applicable law (e.g., GDPR/CCPA).
Consent
- ✓Verification and biometric processing has its own consent checkbox, separate from these terms. Brutus asks; you answer; that’s the whole transaction.
Policy source: docs/Governance/privacy.md (binding on the build). Living document — refined as the club grows.
Questions about your data or your rights? Email info@smartscott.online.