Privacy Policy

1. Introduction

Justibate (“we,” “us,” “our”) respects your privacy. This policy describes how we collect, use, and protect your personal data when you use our mobile app and services.

2. Data Controller

Justibate is the data controller. For data protection enquiries, see our Contact page.

3. Data We Collect

We collect:

• Account data: email, username, password (hashed)
• Profile data: debate stats, preferences, activity
• Content: debate topics, votes, messages you create
• Technical data: device info, IP address, crash logs

4. How We Use Your Data

We use your data to:

• Provide and improve the Service
• Authenticate you and manage your account
• Enforce our Terms and Community Guidelines
• Process data export and deletion requests
• Comply with legal obligations

5. Legal Basis (GDPR / UK GDPR)

If you are in the EU/EEA or UK:

• Contract: Data needed to provide the Service
• Legitimate interests: Security, fraud prevention, moderation, and service analytics
• Consent: Where we expressly ask (e.g. optional features)
• Legal obligation: Where we must retain or disclose data to comply with law

UK users may also raise concerns with the UK Information Commissioner's Office (ICO). EU users may complain to their local supervisory authority.

6. Data Sharing

We share data with:

• Supabase: Hosting, database, and authentication services
• Cloudflare: Web infrastructure and security services
• App stores: As required for distribution, billing, and compliance

Where required, we rely on appropriate contractual and technical safeguards with our service providers, including data processing agreements where applicable.

7. Retention

We retain data as long as your account is active. After deletion, we remove or anonymise data within 30 days, except where we must retain for legal or regulatory reasons.

8. Your Rights

You have the right to:

• Access: Request a copy of your data (data export in app)
• Rectification: Update inaccurate profile information
• Erasure: Request account deletion (in app: Legal & Data Rights)
• Portability: Export your data
• Object / Restrict: Contact us via the Contact page
• Withdraw consent: Where processing is based on consent

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may request access to, deletion of, or correction of personal information as provided by applicable law. Justibate does not sell personal information and does not share personal information for cross-context behavioral advertising.

10. Regions We Serve

Justibate may be made available in the United States, United Kingdom, European Economic Area, and other regions where the service is lawfully offered. We aim to handle personal data in line with applicable privacy laws, including GDPR, UK GDPR, CCPA/CPRA, and other local laws that may apply based on where you live.

11. Security

We use industry-standard measures to protect your data, including encryption and secure authentication.

12. Children

Justibate is not intended for users under 13. In some regions, including parts of the EU, a higher minimum age may apply before a young person can use certain online services without parental involvement. If local law requires a higher minimum age, that higher age applies. We do not knowingly collect data from children who are not permitted to use the service under applicable law.

13. Changes

We may update this policy. Material changes will be notified in the app or by email. Continued use after changes constitutes acceptance.

14. Contact

Data protection enquiries: Contact page