What we collect in the app
- Anonymous account — a device-local credential (Supabase anonymous auth). No name, email, or profile.
- Thoughts you post — text, optional link, and a coarse area id (city/district). Never a precise GPS coordinate.
- Install id — a device-local abuse key for rate limits and bans; it is not shown on content.
- Push tokens — only if you allow notifications (transit via Expo’s push service).
- Reports & mutes — so we can act on abuse and hide authors on your device.
Website waitlist
If you leave your email for the beta, we store that email so we can invite you and send access later. We may also record approximate context from the request itself (not asked of you): country and related coarse geo from our CDN, browser language, timezone, referrer page, and user-agent. We do not store your full IP address for the waitlist.
Location
In the app, your exact location never leaves the device. The app resolves GPS on-device to an area id and only that coarse identifier is sent to the server. We declare coarse / approximate location only, for app functionality.
Processors
- Supabase — auth, database, edge functions
- OpenRouter — language model processing of thought text (report-assisted review, area words, readings)
- Expo — push token transit
- Cloudflare — this website, share previews, and approximate geo for the waitlist
Delete my data
In the app: Settings → Delete my data erases your anonymous account and associated server data (posts, replies, comments, mutes, reactions, reports). “Clear my thoughts from this device” only removes the local link on that phone.
To remove a waitlist email, write to contact@unbehav.com.
GDPR / contact
If you are in the EU/UK and want to exercise privacy rights, email contact@unbehav.com. Basis for processing is legitimate interest in running an anonymous public feed, preventing abuse, and inviting beta interest.