Branch App Privacy Policy

1. Information We Collect

1.1 Account Information

• Email Address: Required for account creation and authentication
• Password: Encrypted and stored securely by Supabase Auth
• Phone Number: Optional, used for account verification and networking

1.2 Profile Information

• Personal Details: Name, graduation year, field of study
• Professional Information: Current profession, work history, career goals
• Location Data: Hometown, current location (if provided)
• Community Connection: Personal memories and experiences from your community
• Interests & Goals: Personal and professional interests you choose to share

1.3 Communication Data

• Messages: Direct messages and group chat conversations
• Group Participation: Groups you join and your participation
• Read Receipts: Information about which messages you've read

1.4 Technical Data

• Push Notification Tokens: To send you notifications about new messages
• Device Information: Basic device info for app functionality
• Usage Data: How you interact with the app (no personal content)

2. How We Use Your Information

2.1 Core App Functionality

• Authentication: Secure login and account management
• Networking: Connect you with other community members
• Messaging: Enable direct messages and group conversations
• Profile Management: Display your profile to other users

2.2 Communication Features

• Notifications: Alert you to new messages and group activities
• Group Management: Allow you to join groups and participate in discussions
• Content Sharing: Enable sharing of newsletters, photos, and events

2.3 App Improvement

• Performance Monitoring: Ensure the app runs smoothly
• Bug Fixes: Identify and resolve technical issues
• Feature Development: Improve existing features and add new ones

3. How We Protect Your Information

3.1 Security Measures

• Encryption: All data is encrypted in transit and at rest
• Secure Infrastructure: Hosted on Supabase with enterprise-grade security
• Authentication: Industry-standard JWT token authentication
• Access Controls: Row-level security ensures users only see their own data

3.2 Data Minimization

• Required Only: We collect only information necessary for app functionality
• Optional Fields: Most profile information is optional
• Regular Cleanup: We periodically review and remove unnecessary data

4. Information Sharing

4.1 Limited Sharing

• Other Users: Your profile information is visible to other Branch users
• Group Members: Group administrators can see group membership
• Service Providers: Supabase (our backend provider) processes data on our behalf

4.2 Legal Requirements

• Law Enforcement: We may disclose information if required by law
• Safety: We may share information to protect user safety
• Legal Process: We comply with valid legal requests

5. Your Rights and Choices

5.1 Account Management

• Update Information: Edit your profile at any time
• Delete Account: Contact us to permanently delete your account
• Data Export: Request a copy of your data

5.2 Privacy Controls

• Notification Settings: Control which notifications you receive
• Profile Visibility: Choose what information other users can see
• Group Participation: Leave groups or opt out of group messages

5.3 Communication Preferences

• Push Notifications: Enable or disable in your device settings
• Email Notifications: Control email communication preferences
• Direct Messages: Block or report inappropriate users

6. Data Retention

6.1 Active Accounts

• Profile Data: Retained while your account is active
• Messages: Stored to maintain conversation history
• Group Data: Kept for group continuity and participation

6.2 Deleted Accounts

• Immediate Deletion: Profile and personal information removed
• Message Retention: Messages may be retained for other participants
• Backup Cleanup: Data removed from backups within 30 days

7. Third-Party Services

7.1 Supabase

• Purpose: Backend database and authentication services
• Data: All app data is stored securely on Supabase
• Privacy: Supabase is GDPR compliant and SOC 2 certified

7.2 Push Notifications

• Purpose: Sending push notifications to your device
• Data: Only push notification tokens and delivery status
• Privacy: Notification services do not access your personal content

8. International Users

Branch is designed for community networking. If you're using the app from outside the United States, please note that your information may be transferred to and processed in the United States, where our servers are located.

9. Children's Privacy

Branch is intended for community members and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy in the app
• Sending you an email notification
• Displaying a notice when you next open the app

11. Contact Us