Last Updated: January 15, 2026
At LetOut, we are committed to providing a safe, anonymous space for community expression. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application and website.
Anonymity Guarantee: We use a Dual-ID system. Your public identity (YR ID) is never linked to your private login identity (Auth ID) in a way that is visible to other users.
1. Information We Collect
A. Information You Provide Directly
- Phone Number: Collected solely for account authentication via OTP. It is never shown to other users.
- Date of Birth: Used to verify you meet our minimum age requirement (18+).
- Gender: Used to provide demographic context to your anonymous persona if you choose to display it.
- User Content: Confessions, comments, and reactions (likes/unlikes) that you post.
B. Information Collected Automatically
- Device Information: We collect device ID and model to prevent spam and maintain security.
- Push Tokens: We collect Firebase Cloud Messaging (FCM) tokens to deliver notifications.
- Metadata: Timestamps of posts and interactions for moderation purposes.
2. How We Use Your Information
We use the collected data to:
- Authenticate your login sessions.
- Provide the core "Confession" and "Circles" services.
- Send real-time push notifications for interactions.
- Detect and prevent spam, harassment, and illegal activities.
- Comply with legal obligations and law enforcement requests.
3. Data Sharing & Third Parties
We do not sell your personal data. We only share information with:
- Supabase: Our database provider (all data is encrypted at rest).
- Firebase (Google): To facilitate push notifications.
- Law Enforcement: If required by valid legal process (subpoena or court order) to investigate illegal activity.
4. Data Retention & Deletion
We retain your active profile data as long as your account is open.
- Account Deletion: You can delete your account via the app settings. Upon deletion, your phone number and active profile are removed.
- 2-Year Audit Log: Per our safety policy, deleted content and account metadata are moved to a secure, encrypted archive for 2 years before permanent purging. This is used exclusively for safety investigations.
5. Children's Privacy
LetOut is not intended for children under the age of 18. We do not knowingly collect data from anyone under 18. If we become aware of such data collection, we will delete it immediately.
6. Your Rights
Depending on your location, you may have the right to:
- Access the data we hold about you.
- Request correction of inaccurate data.
- Request permanent deletion of your data.
7. Security
We implement industry-standard security measures, including SSL encryption and Row Level Security (RLS), to ensure your private data is never accessible to unauthorized parties.
8. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at: