ProxI Privacy Policy

Last updated: September 26, 2026

This policy describes what ProxI ("the App," "we," "us") collects, why, and who it is shared with.

ProxI is operated by BetterU LLC ("we," "us," "our"). If you have questions about this policy or your data, contact us at lucasborgarello@icloud.com.

1. Who this applies to

ProxI is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at the email above and we will delete it.

2. What we collect

Account information

• Email address: required to create an account, used for login and account-related communication (e.g., password reset, email confirmation). Collected and authenticated by our backend provider, Supabase (see Section 4).
• Password: never stored or seen by us in plain text. It is hashed and managed entirely by Supabase Auth.
• When you agreed to these terms: the date and time you accepted the Terms of Service and this Privacy Policy, and which version you accepted, kept as a record that you did.
• Age confirmation: when you create an account you confirm that you are at least the minimum age in Section 1, and we keep the date and time you confirmed it. We no longer ask for your date of birth.
• Date of birth, for older accounts only: accounts created before September 26, 2026 gave a date of birth instead, which we used only to check the minimum age. It is stored separately from your profile, in a table no other user of the App can read by any route, and it is never shown on your profile, never shown to your friends or group, and never shared with anyone outside the providers in Section 4. To have it deleted, contact us at the address in Section 9.
• Phone number (optional): only if you add one in Settings. We text you a code to confirm it is yours, and it is used for one thing: letting friends who have your number in their contacts find you on ProxI. It is never shown on your profile or to anyone in the App. You can turn off "Let people with my number find me" at any time, and nobody can then find you by it.

Profile information

• Name and username
• Traits and activities: selected from preset lists (e.g., "Early riser," "Running"), plus up to five of each you type yourself. Who sees them depends on your settings (see Section 4)
• An optional bio: up to 150 characters you write about yourself, shared with the same people as your traits and activities
• A short goal description: free text describing something you're working on, collected during onboarding. It is optional, stored separately from your profile, and not visible to anyone else
• An optional "what's getting in the way" reflection: free text about difficulty making friends, sticking to goals, or social media. This field is optional and visible only to you, never to other members, friends, or anyone else. It is stored separately from your profile, where no other user can read it by any route. Treat it as you would any personal journal entry: we do not analyze it, sell it, or use it for advertising, but you should still only share what you're comfortable having stored on our servers.
• Profile settings: the colours you chose for your profile (background, banner, cards and accent), and who each part of your profile is shared with (Friends, Only me, or Everyone)

Profile posts

Posts you add to your profile, in two kinds:

• Posts: a photo with an optional caption and an optional activity
• Goal posts: the name of something you achieved, the activity it belongs to, and optionally a photo and caption

Each post is stored with the date you posted it. Who can see it depends on your profile settings (see Section 4).

Content you create in the App

• Daily proof posts (only in groups with the daily challenge on): photos, videos, or notes you post to that group, plus timestamps and whether a post landed on time or late
• Forfeit and dispute records: what you owe, dispute reasons you write, and your votes on other members' disputes. Votes are stored per member but are only ever readable by the member who cast them. The App and other members only ever see the aggregate count, never who voted which way
• Plans: plans you create, including "I'm free now," with an optional title and place, a start and end time, and who the plan is for (your friends, your group, or only people you invite); who you invited; which plans you have joined; and, if you host a plan and change its time or place, when you last changed it. Everyone going or invited is told the new time and place
• Messages on a plan: the text you write in the message thread attached to a plan, and when you wrote it. These are not private messages between two people in general: a thread belongs to one plan, everyone who can see that plan can read it, and it is deleted along with the plan (see Section 5). There is no inbox and no way to message someone you have no plan with
• Friends: friend requests you send and receive, who you are friends with, and whether you met online or in person
• "Tell me when they're free" choices: which friends you asked to be notified about. That friend is not told
• "I'd like to see them" choices: friends you privately mark as someone you would like to see, and when you did. That friend is not told, ever, unless they mark you too. Only then are you both told, at the same moment. Nobody is ever shown that you marked them if they did not mark you back, and the App never tells anyone how many people have marked them
• "When I am free" answers after meeting someone in person: the time window you give when the App asks, after you add a friend by trading codes. It is not shown to them unless they answer too
• "Do this again" choices: after a plan with friends, the App may offer to repeat it. We keep which of those offers you put away, and whether you have switched the offers off. Nobody else is told either
• Reports you file: what you reported, the category you chose, and the reason you wrote
• Blocks and hidden posts: who you have blocked, and which posts or messages you have hidden from your own view. Nobody is told about either
• Moderation records: if content you posted is reported, what our moderators decided and why, including any warning sent to you, content removed, or suspension of your account
• Streak and attendance counters derived automatically from the above

Push notifications (only if you turn them on)

If you allow notifications on your iPhone, we collect:

• A push token: an identifier that Apple and Expo (see Section 4) give this install of the App so notifications can be delivered to it. It is not an advertising identifier and is not shared with advertisers
• Your phone's platform and time zone, and when the App last checked in, so notifications arrive at sensible times and a phone you no longer use stops receiving them
• Your notification settings: which kinds of notification you want
• A record of each notification sent to you: its title, its text, what it was about, and whether it was delivered. We keep this so the App never sends the same notification twice, keeps to its daily limits and quiet hours, and can stop sending to a phone the App has been removed from

Nothing is sent to your phone unless you have allowed notifications in iOS, and each kind can be turned off in the App's notification settings.

Some notifications carry content you or another member wrote, so that the notification says something useful rather than "you have a new message". A notification about a message on a plan includes the start of that message, and one about a plan includes its title and time. This means that text passes through Apple's and Expo's notification delivery services on its way to the phone, in the same way the rest of the notification does. If you would rather that did not happen, turn off the "Plans" notification switch in the App.

Time zone

Your group's time zone decides when its daily proof window opens and closes. Your phone's time zone, if you turn on notifications, decides your quiet hours.

Photos, your camera and your photo library

When you add a photo to a daily proof post or a profile post, the App asks for permission to use your camera or your photo library. We only ever receive the single image you choose. We do not browse, scan, or upload anything else from your library, and permission can be declined.

The camera is also used to scan a friend's code when you add each other in person. The scan is read on your phone and only the code is sent to us; no image from the camera is stored.

Photos you post are uploaded to and stored by Supabase Storage (see Section 4). We do not run face recognition, object recognition, or any other automated analysis on your photos, and we do not strip or read embedded camera metadata.

Proof photos and videos are stored privately. The App shows them through links that expire after one hour, and a link is only issued to someone who is in that photo's group and has not been blocked by the person who posted it. Someone who was given a link could open the photo until it expires.

Profile post photos are stored privately. The App shows them through links that expire after one hour, and those links are only issued to people your profile settings allow. Someone who was given a link could open the photo until it expires.

Your contacts (only if you use "Find friends from your contacts")

If you tap "Find friends from your contacts", the App asks for permission to read your contacts, and permission can be declined. It then sends the phone numbers only (never names, emails or anything else) to our database, which checks which of them belong to ProxI accounts with a confirmed number and the setting above turned on, and sends back just those accounts. The numbers you send are not stored. We keep only a count of how many numbers each account checked that day, to stop anyone checking huge lists. Names from your contacts stay on your phone.

If you tap "Invite" next to a contact who is not on ProxI, the App opens a text message to them in your own Messages app, which you send yourself. We do not send it, and we do not keep their number.

What we do not collect

ProxI does not collect your location/GPS, does not read your contacts except as described above, does not use advertising identifiers or ad SDKs, does not use analytics or crash-tracking SDKs, and does not process payments (forfeits are informal social arrangements between friends; see the Terms of Service). If any of that changes, this section will be updated first.

We do not use artificial intelligence or any automated analysis on you or on anything you post, and we do not profile, score or rank people.

3. How we use what we collect

• To create and secure your account, and let you log back in
• To operate the App's core features: your group's daily proof wall, streaks, forfeit disputes and votes, plans, friends, and your profile
• To send the notifications you have turned on, within the App's daily limits and quiet hours
• To review reports and act on them: removing content that breaks the Terms of Service, and warning, suspending or removing the accounts responsible
• To communicate with you about your account (e.g., email confirmation)
• We do not use your data to serve you ads, and we do not sell your personal information to anyone

4. Who your data is shared with

We share data with three third-party service providers, plus Apple as the App Store operator and the delivery network for notifications:

• Supabase, Inc.: our backend provider. Supabase hosts our database, handles authentication, runs the scheduled jobs that send notifications, and stores essentially all data described in Section 2 on our behalf, in the cloud region we selected when creating our project. This includes Supabase Storage, where proof photos and profile post photos are held. Supabase acts as our data processor: it stores the data under our direction and does not use it for its own purposes. See Supabase's privacy policy for how they handle infrastructure-level data.
• Expo (650 Industries, Inc.): our push notification service, used only if you turn notifications on. When a notification is sent to you, we send Expo the push token for your phone and the notification itself: the title and text you will see (which can include a friend's name, a plan's title, or your group's day number) and a few internal identifiers the App uses to open the right screen when you tap it. Expo passes the notification to Apple for delivery and tells us whether it was delivered. We do not send Expo your email, password, photos, proof posts, profile posts, or anything else in Section 2. See Expo's privacy policy.
• Twilio Inc.: only if you add a phone number. Supabase uses Twilio to send the text message with your confirmation code, so Twilio receives your phone number and that message. See Twilio's privacy notice.
• Apple Inc.: when you download the App through the App Store, Apple, per its own policies, may know that you use the App. If you turn on notifications, Apple's Push Notification service delivers them to your iPhone, and receives your phone's push token and each notification's content from Expo to do so. We do not send Apple any other information described in Section 2. See Apple's privacy policy.

Accounts are created with an email address and password.

Who inside the App sees what

Everything below is enforced by database-level access rules, not just by the App's screens. If you block someone, or they block you, neither of you sees anything of the other's described here.

Members of your groups see the group content the App is designed to show them: your name, traits and activities, proof posts, dispute reasons, and forfeit status. That visibility is the core of how the App works, not a third-party disclosure, and it is scoped to your group.

Friends are separate from your group. Someone you have accepted as a friend sees your name, username, avatar, how and when you became friends, your current streak number, and whether you have posted today. They also see the parts of your profile you share with friends. They do not see your proof photos or videos, your proof notes, your goal description or reflection, which group you are in, or anything about your forfeits or disputes.

People on a plan with you can read the messages on that plan, and so can anyone else who can see the plan. Who that is depends on the plan: your friends, your group, or only the people you invited. Nobody outside that can read them.

Nobody is told what you keep to yourself. Three things you can do in the App are stored but deliberately never revealed:

• Marking a friend as someone you would like to see. They are told only if they mark you too, and then you are both told at once. If they never do, they are never told anything, and the App does not tell them, or anyone, that somebody marked them.
• Saying when you are free after meeting someone in person. It is shared only if they answer too.
• Asking to be told when a friend posts free time.

In each case the App cannot tell the difference between someone who has not looked and someone who chose not to answer, and it never reports either as a refusal.

Your age confirmation, and your date of birth if your account has one, are not visible to anyone using the App, including your friends, your group and anyone whose profile you appear on.

Your profile has three parts, and you choose who sees each one in Edit Profile: your traits and activities, your goal posts, and your other posts. Each can be set to:

• Friends (the default): people you have added as friends
• Only me: nobody but you
• Everyone: anyone signed in to ProxI who finds your profile, for example by searching your username

Anyone who can open your profile sees your name, username, avatar, and profile colour, and which of these settings each part uses, so a hidden part can say that it is shared with friends only. Someone searching for you by username sees your name, username and avatar in the results.

Plans are seen by the people the plan is for: your friends for a plan shared with friends (including "I'm free now"), your group for a group plan, or only the people you invited. Anyone who can see a plan can see who has joined it.

Notifications can mention you to someone else. If you invite someone to a plan, join their plan, call off a plan they joined, or send or accept a friend request, they may get a notification with your name in it. If a friend has asked to be told when you are free, they are notified when you post that you are; you are not told who asked.

We do not share your data with data brokers, advertisers, or any other third party not listed above.

5. Data retention and deletion

We keep your data for as long as your account is active, except:

• Plans are deleted once they are more than 30 days old.
• Messages on a plan are deleted with that plan, so they go the same way 30 days after it. You cannot write to a thread once the plan has finished. Neither you nor anyone else can delete an individual message: a message that could be deleted could not be reported afterwards, and Section 5 of the Terms commits us to acting on reports.
• "I'd like to see them" marks are deleted the moment you turn one off, and automatically if you stop being friends or either of you blocks the other.
• "When I am free" answers after meeting someone in person are deleted 60 days after you give them, and straight away if you stop being friends or either of you blocks the other, unless a plan was already made from them.
• "Do this again" offers you put away are deleted along with the plan they were about. Whether you have switched the offers off is kept until you change it or delete your account.
• Records of notifications sent to you are deleted after 30 days.
• Your push token is removed when you sign out on that phone or delete your account, and is no longer used once Expo reports that the App has been removed from that phone.
• A profile post you delete disappears for everyone straight away, and its photo is deleted from storage. Its text is kept, hidden, so a report about it can still be reviewed, until you delete your account.
• A suspended or banned account is hidden from everyone else in the App and cannot sign in, but its data is not deleted, so that it can be restored if the suspension ends or is lifted. It is kept until the account is restored or deleted.

Group history (who missed a day, dispute outcomes) is kept as a permanent record within your group by design. Settling a forfeit clears the debt but does not erase that the day was missed, matching how the App is meant to work.

To delete your account, open your Profile, tap the menu button, choose Settings, then Delete account. This is permanent and takes effect immediately. It removes:

• your login, including your email address and password
• your profile: name, username, traits, activities, settings, and onboarding answers
• every photo you posted, as proof or on your profile, deleted from storage
• your profile posts and goal posts
• your proof history, streaks, group membership, and any disputes you opened
• plans you created and the plans you joined
• your friends, any friend requests you had sent or received, and any unused in-person codes. Your friends simply stop seeing you in their list, and are not told why
• your notification settings, the phones registered to receive your notifications, your "tell me when they're free" choices, and the record of notifications sent to you

The one thing that remains is forfeits your group had already recorded, kept as part of that group's shared history with your name detached from them, so the group's own record still makes sense for the people still in it. Those entries no longer identify you.

If the in-app deletion fails for any reason, email us at lucasborgarello@icloud.com and we will delete the account for you.

6. Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal information, or to receive a copy of it. To exercise any of these rights, contact us at lucasborgarello@icloud.com; we will respond within a reasonable time.

7. Security

We rely on Supabase's infrastructure security and row-level database permissions to keep your data scoped to you, your group, and the people your profile settings allow, each seeing a different and deliberately limited set, as described in Section 4. Proof photos and profile post photos are only reachable through links that expire. Notifications travel to Expo and Apple over encrypted connections. No method of storage or transmission is 100% secure, and we can't guarantee absolute security.

8. Changes to this policy

If we change what we collect or who we share it with, we'll update this document and change the "Last updated" date above. Material changes (e.g., adding ad tracking or a new third-party processor) will be called out clearly, not buried in a version bump.

9. Contact

BetterU LLC Texas, United States lucasborgarello@icloud.com

We answer privacy requests at that address. If your jurisdiction requires a postal address for a privacy contact, email us and we will provide one.