← Back to home

Privacy Policy

Last updated: February 24, 2026

Our Commitment to Your Privacy

At Aletheia, your privacy and safety are fundamental to everything we do. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our platform—a safe space for honest expression, growth, and thoughtful connection.

By using Aletheia, you agree to the practices described in this policy. If you have questions or concerns, please contact us at our contact page.

Information We Collect

Information You Provide

  • Account Information: Name, email address, and password (encrypted)
  • Profile Information: Optional profile photo, bio, and preferences
  • Content: Posts, comments, and messages you create
  • Communications: Messages you send to us or through the platform

Information We Collect Automatically

  • Usage Data: How you interact with our platform (pages visited, features used)
  • Device Information: Browser type, operating system, IP address
  • Log Data: Access times, error logs, and performance data
  • Cookies: Session tokens and preferences

How We Use Your Information

  • Provide and improve our services: Create and maintain your account, deliver features, and enhance user experience
  • Safety and moderation: Review reported content, enforce Community Guidelines, and maintain a safe environment
  • Communications: Send you verification emails, important updates, and respond to your inquiries
  • Security: Detect and prevent fraud, abuse, and security incidents
  • Legal compliance: Comply with legal obligations and protect our rights

Third-Party Services We Use

MongoDB Atlas

Secure database hosting for your account data and content. Data is encrypted at rest and in transit.

Cloudinary

Image hosting and optimization for profile photos. Images are stored securely with access controls.

Resend

Email delivery service for verification codes and important account notifications.

Vercel

Hosting and deployment infrastructure. Logs may include IP addresses and request data for security and performance monitoring.

These services are GDPR-compliant and process data according to their own privacy policies. We do not share your personal information with third parties for marketing purposes.

How We Share Your Information

Within Aletheia

  • Your posts are visible only to friends you've approved
  • Your profile information (name, photo, bio) is visible to other users
  • Moderators may review reported content to enforce Community Guidelines

We Do NOT Share

  • Your email address with other users
  • Your data with advertisers or data brokers
  • Your content publicly (unless you choose to make it public in the future)

Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights, property, or safety of Aletheia, our users, or others.

Cookies and Tracking

We use cookies and similar technologies to keep you logged in and remember your preferences.

Essential Cookies

Required for authentication and security. These cannot be disabled without breaking core functionality.

Preference Cookies

Remember your theme preference (dark/light mode) and other settings.

We do not use third-party advertising cookies or tracking pixels.

Your Privacy Rights

  • Access: Request a copy of your personal data
  • Correction: Update or correct your account information at any time through settings
  • Deletion: Request deletion of your account and associated data
  • Portability: Request a machine-readable copy of your data
  • Objection: Object to processing of your data under certain circumstances

To exercise these rights, please contact us. We will respond within 30 days.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When you delete your account, we remove your personal data within 30 days, except:

  • Content subject to legal holds or investigations
  • Anonymized analytics data (with no personal identifiers)
  • Logs required for security and fraud prevention (retained up to 90 days)

Security Measures

We implement industry-standard security measures to protect your data:

  • Passwords are hashed using bcrypt (never stored in plain text)
  • All data is encrypted in transit (HTTPS/TLS)
  • Database access is restricted and monitored
  • Regular security audits and updates
  • Rate limiting to prevent abuse

While we take reasonable measures to protect your data, no system is 100% secure. Please use a strong, unique password and report any suspicious activity immediately.

Children's Privacy

Aletheia is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it immediately. If you believe a child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our platform. Your continued use after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data: