Privacy Policy

Draft - not yet legally reviewed. This is a working draft. It is not final, is not legal advice, and must be reviewed by counsel before public launch. The effective date and contact details below are placeholders.

1. Who we are

pact is operated by Stewardship World, a California public benefit corporation (the "Company", "we", "us"). This Privacy Policy explains what we collect, how we use it, and the choices you have. It applies to the pact app and website (the "Service").

2. Information we collect

Account information. When you sign up we use a third-party authentication provider (Clerk) to handle sign-in via Google, Apple, or email one-time code. We receive your email and basic identifiers; we do not store your password.
Profile information. Your display name, unique username, bio, and coarse location (country, state, city), plus an optional emoji avatar. Profiles are public.
Pact content. The pacts, roles, criteria, comments, Hallmarks, and other content you create. Most of this is public by design (see Section 5).
Coordination messages. Private 1:1 messages exchanged with another participant to arrange a meeting. These are not public and are retained then purged (see Section 7).
Location. Coarse location (city level) is public and powers local discovery. You may optionally set an approximate, area-level pin on a pact (never an exact home address). If you use proximity search, your device location is requested at that moment and used only for that session - it is not stored.
Device and usage data. Basic technical data and error reports, including through our error-monitoring provider (Sentry), to keep the Service working.

3. How we use information

To operate and provide the Service; to enable discovery and connections between users; to maintain safety, enforce our Terms, and moderate reported content; to provide customer support; to process subscriptions through the app stores; and to comply with law.

Publicly. Your profile, pacts, and Hallmarks are visible to others by design (see Section 5).
Service providers. We share data with vendors that help us run pact, including Clerk (authentication), our hosting and database provider (Fly.io), Sentry (error monitoring), RevenueCat and the app stores (subscriptions), and Cloudflare (image storage). They may process data only to provide their service to us.
Legal and safety. We may disclose information if required by law or to protect the rights, property, or safety of users, the public, or the Company.

We do not sell your personal information.

5. The public nature of pact

pact is built on transparency. Your profile, pacts, completed Hallmarks, and related activity are public, can be viewed by anyone, and may be permanent. Search engines and other people may see and copy public content. Please do not post anything you are not comfortable making public and keeping public. Private logistics belong in the coordination channel, not in public fields.

6. Data retention and deletion

We keep account and public-ledger information for as long as your account is active or as needed to provide the Service and as the transparency model requires. Coordination channel messages are retained through completion or abandonment plus a limited dispute window, then purged. You can request deletion of your account; some public records (such as Hallmarks already earned by others' participation) may persist consistent with the Ledger model, and we may retain limited information as required by law.

7. Your privacy rights (including California)

If you are a California resident, the California Consumer Privacy Act, as amended (CCPA/CPRA), gives you the right to: know what personal information we collect and how we use it; access a copy of it; request correction; request deletion; and opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined. We will not discriminate against you for exercising these rights. To make a request, contact us at the address in Section 12. Residents of other regions may have similar rights.

8. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

9. Children

pact is for adults. The Service is not directed to anyone under 18, and we do not knowingly collect information from people under 18. If you believe a minor has used pact, contact us and we will take appropriate action.

10. Third-party services

The Service relies on third parties (listed in Section 4) who have their own privacy practices. Links or integrations to other services are governed by those services' policies, not this one.

11. Changes

We may update this Policy. If we make material changes we will take reasonable steps to notify you, and we will update the effective date.

12. Contact

Privacy questions or requests: pact@stewardship.world.