Your privacy is foundational.

To create an account, we collect your email address and a display name of your choosing. We do not collect your real name. We do not ask for your phone number, location, date of birth, or any other identifying information.

When you use the app, we collect standard usage data: timestamps, content you post, reactions you give, and actions you take such as reports and saves. We collect your device's timezone to determine active hours for your account. Your IP address is processed briefly to protect the service from abuse, and is not attached to your posts.

To keep the space safe, every post and reply is checked by an automated safety system before it is shown to the community. As part of this check, the text of your post is processed by a third party AI service for the sole purpose of screening it. It is not used to train AI models, it is not stored by that service, and it is never linked to your identity there.

If the system believes a post may be harmful, the post is held for human review instead of being published.

We rely on a small number of providers to run the service: a database and authentication provider, a hosting provider, an email delivery provider for account emails, an AI provider for the safety screening described above, and an infrastructure provider for abuse protection. Each receives only what it needs to do its job, and none may use your data for any other purpose.

In public Rooms, your display name is never attached to your posts. The database records your user ID for moderation purposes, but your identity is never surfaced to other users. Not your display name, not any other identifying information.

In private Circles, your display name is visible to Circle members, as that is the intended purpose of Circles.

Moderators may access the link between a post and its author only when investigating a reported violation or a safety concern. This access is strictly limited, and moderation actions are recorded in an internal audit log.

We do not sell your data. We do not share it with advertisers. We do not use it to build advertising profiles. We do not train AI models on your content.

We do not share your information with any third party except where required by law, or with the service providers described above, solely to provide the service itself.

Your posts are retained as long as your account exists. When you delete a post, it disappears from the app immediately and is permanently erased from our systems within 30 days.

When you delete your account, your posts, reactions, saves, and profile data are removed from the app immediately and permanently erased from our systems within 30 days, along with your email address.

We use sign in cookies to keep you logged in. We do not use tracking cookies, analytics cookies, or advertising cookies.

You have the right to access your data, correct it, export it, or have it deleted. To exercise any of these rights, email us at privacy@underthelamp.app.

If you're in the EU, you also have the right to lodge a complaint with your local data protection authority.

If we make material changes to this policy, we'll notify you by email before they take effect. Continued use of the service after that point means you accept the updated policy.

Questions? Concerns? Email us: privacy@underthelamp.app