Venttly Privacy Policy

Version 2026-09-07. This text is pending legal review.

1. The short version

You are pseudonymous here. We hold as little about you as the service can work with, and the things people are most afraid of us sharing — what you vent about, what you say in a message, what you record as a Whisper — are never sent to any advertising, analytics or third-party AI service.

2. What we hold

• Your account: pseudonym, display name, avatar, the hash of your

password and recovery phrase, and your date of birth.

• What you post: Vents, comments, Whispers, messages, Tribe activity, and

the reactions you give and receive.

• How you use the app: the events needed to operate and debug it, and to

count activity. These pass through a scrubber that strips personal data before they leave the device.

• Security records: sign-in attempts, device sessions and risk signals,

kept to protect accounts from takeover.

We do not ask for your real name. If you type it into a post, that is your disclosure, not ours.

3. Who we share it with, and what they get

• Supabase — everything listed above. It is our database, and it is where

the service runs.

• Resend — your email address, and only for an email you asked for, such

as sign-in or account recovery.

• Firebase — a device token and generic notification text, to deliver push

notifications. The notification never contains what somebody wrote.

• Sightengine — an uploaded image, when image scanning is switched on, to

check whether it is unsafe.

• PostHog — scrubbed usage events, to understand how the app is used.
• Sentry — scrubbed error reports, so we can find crashes.

What none of them ever receive: the text of your Vents, the contents of your messages, Whisper audio or transcripts, your recovery phrase, or a real name if you ever entered one.

4. What is public

Your pseudonym, display name, avatar, bio, and your public activity counts are visible to anyone. The content of your posts, your mood history and your activity heatmap are visible only to your connections. Whether you have accepted a policy, your date of birth, your email and your security records are never public.

5. How long we keep it

For as long as your account exists. When you delete your account we remove your content and personal data from the live service; backups age out on their normal schedule. Records we are legally required to keep — such as a child-safety report — are retained as the law requires.

6. Your choices

• Read, correct or export what we hold about you.
• Delete your account, from Settings.
• Turn off push notifications, from Settings or your device.
• Ask us a question about any of this.

7. Children

Venttly is not for anybody under 13. If we learn an account belongs to a child under 13, we remove it.

8. Changes

If we change this policy in a way that affects you, we will ask you to acknowledge the new version before you continue. We keep a record of which version you acknowledged and when.