Privacy Policy — On2

Last updated: [DATE]

On2 is an invite-only, private social app. This policy explains what information we collect, how it's used, how it's protected, and the rights you have over it.

What we collect

• Account info: the email address and display name you sign up with.
• Age verification: at signup, we ask for your date of birth to confirm you're 13 or older. We only store the result of that check (yes/no, and when) — not your actual birthdate.
• Content you post: posts, comments, reactions, and direct messages you create in the app.
• Photos/media: any images you choose to upload to your posts, avatar, or messages.
• Basic usage data: things like login timestamps, used only to keep the app secure and working.

What we don't do

• We don't sell your data to anyone.
• We don't show ads or share your information with advertisers.
• We don't track you across other apps or websites.
• We don't knowingly allow anyone under 13 to create an account.

Children's privacy (COPPA)

On2 is not directed at children, and anyone under 13 is not permitted to use it. We verify this at signup by asking for date of birth and blocking account creation for anyone who indicates they're under 13. We do not knowingly collect personal information from children under 13. If we become aware that we've inadvertently collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has an account, please contact us at the email below.

Your rights (GDPR)

If data protection law (such as the EU/UK GDPR) applies to you, you have the following rights over your personal data, regardless of where On2's servers are located:

• Right to access: you can download a copy of everything On2 has stored about you at any time from Profile → Privacy & Data → Download my data.
• Right to erasure: you can permanently delete your posts, comments, messages, friend connections, and profile from Profile → Privacy & Data → Delete my account & data. This action is immediate and cannot be undone.
• Right to rectification: you can edit your display name and profile details at any time within the app.
• Right to data portability: the data export mentioned above is provided in a structured, machine-readable JSON format.
• Right to object / restrict processing: contact us at the email below and we'll address your request.

Legal basis for processing: we process your data based on your consent (given at signup and re-confirmable at any time) and to provide the service you've signed up for (performance of a contract).

Data retention: posts expire and are removed automatically after 7 days. Account data (profile, friends, messages) is retained until you delete your account, or upon request.

How your content is handled

Posts on On2 expire automatically after 7 days. Direct messages are private between the people in the conversation. Only accepted friends (or the public, if you choose) can see your non-draft posts within that window.

Data storage

Your data is stored securely using Supabase, our backend infrastructure provider, with row-level access controls so that only you and the people you've connected with can see your content.

Deleting your account

You can delete your account and all associated data at any time from Profile → Privacy & Data → Delete my account & data. This permanently removes your posts, comments, messages, and friend connections. If you'd rather we handle this for you, or run into any trouble, email us and we'll take care of it.

Changes to this policy

If this policy changes, we'll update the date at the top of this page.

Contact

Questions about this policy, your data, or your rights? Reach us at on2appofficial@gmail.com.