Privacy

IYKYK (“we,” “us”) provides apps and websites where people share personal recommendations of physical places. This policy describes what we collect, why, and what we never do with it.

With your permission, we read your device’s location to: show nearby places you might recommend; show recommendations near you; and, if you enable prompts, ask whether you’d like to recommend a place you appear to be at. Location is read when you use those features, not continuously in the background. We store the places you act on (recommend, save, pass, want) — not a trail of your movements.

To power the “you’re at a place you keep coming back to” prompt, we keep a per-place record of the last time you appeared at a place and how many times — not the times themselves, and not a path between places. You control whether we prompt you at all, and how often, in your settings.

If you turn on new-town nudges (“you’re in Pensacola — want to see recs?”), we keep a note of which towns we’ve nudged you about so we don’t repeat ourselves, and you set the cadence (monthly, quarterly, or off). We do not store a “home” point unless you set one yourself, and if you do it is a single area you choose, kept only to decide when a town is new to you.

Public: recommendations you publish (the place, your sentence, your name), photos you explicitly mark as shareable, and your profile (name, bio). Shared with specific people: circles content (visible to circle members), guesses and replies (circle members), collections you share. Between two people only: a “you were right” thank-you goes from the person who went to the person who recommended it, and a house note goes from a place’s owner to a specific guest — each is seen by the two people it is about and no one else, and neither is counted or ranked. Private to you alone: your want-to-try list, your “not mine” passes, the note you keep of who handed you a place and when, and drafts. We never show anyone that you wanted, passed on, or were asked about a place.

Photos you attach to your recommendations are stored with your account. A photo appears publicly only when you have marked it shareable; otherwise only you see it. Photos may be reviewed by our moderation systems and team, and removed if they break the rules in our Community Guidelines. Place photos from Google are displayed under Google’s terms and are not stored by us.

When you request recommendations from a friend, you may enter their phone number so the request can be sent to them. That number is write-only: once saved, no one can read it back through the app — not the friend, not even you. It exists only for the messaging provider to send the one text, and it is erased the moment the friend answers the request. We keep only the last four digits after that, so the screen can show which number an answer came from; the rest is gone. The number is never used for marketing and is never sold or shared.

We collect your email address (and, if you choose phone sign-in, your phone number) to authenticate you with one-time codes, plus the profile details you add. Sign-in with Google shares your name and email with us per Google’s consent screen. If you allow notifications, we store the push token your device issues so we can send the alerts you turned on (a save on your rec, a thank-you, a note); the token is tied to your device and removed when you sign out or turn notifications off.

If you claim a place you own or manage, we record that claim and how it was verified (a code read back over the business’s public phone, an email, or a manual review), along with facts you choose to publish about the place. If you order printed table cards — the one thing IYKYK sells — we record what you asked for (which of your recommendations, how many cards). We do not process or store any payment or card details in the app; invoicing is handled separately by a person.

We log product events (for example, that a recommendation was viewed or saved) to operate features like showing an author that their recommendation reached people, and to understand aggregate product health. We do not sell this data or share it with advertisers.

Adult-oriented venues and related photos are hidden unless you enable the After Dark setting and confirm you are 18 or older. Your setting is private. Content behind this gate follows the same moderation rules as everything else.

We use Supabase (database, authentication, storage), Vercel (web hosting), Google (Places data, optional sign-in), Expo (push notification delivery), and messaging providers that send one-time codes, ask texts, and email. Each processes data solely to provide their service to us. The friend’s number on an ask is handed to the text provider to send that one message and is not retained by us afterward.

Your recommendations, notes, saves, thanks, and profile stay until you remove them or delete your account. Some data is cleared on a schedule regardless: a friend’s phone number on an ask is erased the moment the ask is answered (only the last four digits remain); and the map coordinates behind a place are re-fetched from Google at least every 30 days, because Google’s terms only let us cache them that long — we keep the place’s stable Google id and refresh the rest. When you delete your account, we remove your account and the content tied to it; recommendations you handed to specific people can remain on those people’s saved lists, with your name, so deleting your account does not rewrite their memory of a place.

You can access and update your profile in the app, and delete your account from your profile settings — deletion removes your account and associated content. You may also contact us at hello@iykyk.social to exercise access, correction, or deletion rights available under your local law (including CCPA and GDPR where applicable). We respond within the timelines those laws require.

IYKYK is not directed to children under 13 and we do not knowingly collect their data; if we learn we have, we delete it. After Dark features require an 18+ confirmation.

We will post updates here and, for material changes, notify you in the product before they take effect.