NO SUS — PRIVACY POLICY

Last updated: 10 July 2026

1. What we collect

• Account data: your email address, display name, and chosen avatar (a preset character or a photo you upload).
• Content you upload: documents and notes you add to groups, stored in private storage protected by row-level security. Optional profile photos are stored in a public avatars bucket.
• Activity records: to protect shared documents, we record events such as file uploads, views, membership changes, and screenshot attempts in a tamper-evident audit log visible to members of the same group.
• Share-link views: when someone opens a document you shared by link, we record the email they enter and view timestamps, visible to you as the sender.
• Feedback: messages you submit through Help & Feedback, with your app version.
• Device security signals: on sign-in and periodically during use, the app checks the device for indicators of tampering (root access, known instrumentation/hooking frameworks, active screen mirroring). Findings are written to a tamper-evident security ledger tied to your account — never sold or shared with third parties — and used only to flag your own account as higher-risk (e.g. requiring re-authentication) if serious tampering is detected.

2. Burn notes & burn files

Burn notes and burn files are encrypted on your device before upload. The decryption key lives only in the link you share and is never sent to our servers — we store only ciphertext, and it is permanently deleted the moment it is read/downloaded (or when it expires unread). Burn files require no NO SUS account on either end; we do not know who sent or received them.

3. What we don't do

• We do not sell your data.
• We do not use third-party advertising or tracking SDKs.
• We do not read your documents for any purpose other than serving them back to you and your group.

4. Where data lives

Data is stored on Supabase (managed Postgres, storage, and authentication). Transport is encrypted with TLS. Access is enforced with row-level security so users can only reach rows their membership allows.

5. Data deletion

You can delete your account at any time from Profile → Danger Zone → Delete User Account. This permanently removes your profile, group memberships, uploaded files, and auth record. See account deletion for details.

6. Contact

Questions or requests: shubhamsahu9372580326@gmail.com

7. Terms of Service

Please also review our Terms of Service, which govern your use of NO SUS.