your150
Sign UpLogin

Privacy Policy

Effective Date: Sept 10, 2026 · Last Updated: Oct 23, 2026

1. Who we are

your150 ("we," "us," "our") operates the your150 mobile and web application (the "Service"). This policy explains what information we collect, how we use it, and the choices you have. If you have questions, contact us at [email protected].

2. Information we collect

We follow a data-minimization approach — we collect only what's needed to run the Service.

Information you provide directly:

  • Phone number — used as your unique account identifier and for login via SMS one-time passcode. We do not collect or require an email address.
  • First name and last initial — displayed on your profile and posts. your150 requires real names; usernames, handles, and pseudonyms are not permitted.
  • Profile photo — optional, stored on our media infrastructure (Cloudflare R2).
  • Content you post — text updates (up to 200 words). A post can hold up to 5 photos or one video of up to 30 seconds.
  • Private comments — messages you send to other users are encrypted before they leave your device and are only readable by you and the recipient (see Section 5).
  • Payment information — if you subscribe, payment is processed by Stripe. We do not receive or store your full card number; Stripe's own privacy policy governs that data.
  • Contacts (only if you choose one) — If you pick a friend from your contacts to invite, we receive only that person's phone number and keep it with your invitation so we can text them. We do not read the rest of your address book.

Information collected automatically:

  • Device and usage data — basic technical information (device type, app version, crash logs) used to keep the Service running and to fix bugs.
  • Connection data — who you are connected to (mutual, up to 150 people), and the timing of connection requests/removals, used solely to enforce your150's connection-cap and cooldown rules.
  • Notification token (only if you allow notifications) — If you allow notifications, we store a device notification token so we can alert you about private comments and connection requests. We delete it when you log out or delete your account.

Information we do not collect:

  • We do not collect your email address.
  • We do not track you across other apps or websites for advertising purposes.
  • We do not sell or share your data with data brokers or advertisers.

3. How we use your information

We use the information above only to:

  • Authenticate you and operate your account
  • Deliver the core features of the Service (feed, posting, private comments, invites)
  • Process your subscription payment and manage billing
  • Send you direct, high-value notifications (e.g., a new private comment, a new connection request) — we do not send batch "engagement" notifications designed to bring you back to the app
  • Maintain the security of the Service, including rate-limiting login attempts and detecting abuse
  • Respond to safety reports and enforce our Terms of Use
  • Comply with legal obligations

We do not use your content or connections to train third-party advertising models, and we do not run an algorithmic feed — your feed is shown in plain reverse-chronological order.

4. Who can see your information

  • Posts are visible only to your active, mutually-confirmed connections (up to 150 people) — never publicly.
  • Your connection list is visible only to you. Your connections cannot see who else you are connected to, and you cannot see theirs.
  • Private comments are visible only to the post's author and the specific commenter — not to other viewers of the post, and not searchable or listed publicly.
  • We do not display your phone number to other users; only your first name, last initial, and avatar are shown.

5. Encryption & security

  • Private comments are encrypted before they leave your device and are stored in encrypted form; we do not have the ability to read the content of your private comments in ordinary operation.
  • We use industry-standard security practices (encrypted connections, restricted internal access) to protect your account data.
  • No system is 100% secure, and we encourage you to use the security features available on your device (e.g., Face ID/Touch ID, a strong device passcode).

6. Data retention & deletion

  • You can delete your account at any time from within the app or your web account settings.
  • Upon deletion, we permanently remove your posts, comments, media, and phone number from our servers, typically within 24 hours.
  • We may retain limited information where required by law (e.g., financial records related to a subscription) for the period required by applicable regulations.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to certain processing. To exercise these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law (e.g., GDPR, CCPA).

California residents: You have the right to know what personal information we collect, to request deletion, and to not be discriminated against for exercising these rights. We do not sell personal information as defined by the CCPA.

EU/UK residents: Our legal basis for processing your data is performance of our contract with you (providing the Service) and, where applicable, your consent. You have the right to lodge a complaint with your local data protection authority.

8. Children's privacy

your150 is not directed to children under 13. We do not knowingly collect information from children under this age. If you believe a child has created an account, contact us at [email protected] and we will take appropriate action.

9. International data transfers

Our infrastructure providers (including Supabase and Cloudflare) may process data in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

10. Third-party service providers

We use the following categories of service providers to operate your150, each bound by their own privacy and security obligations:

  • Database and authentication hosting
  • SMS delivery (for login codes and invites)
  • Media storage and delivery
  • Payment processing
  • Crash/error monitoring

We do not permit these providers to use your data for their own purposes.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you via the app or by other reasonable means before the changes take effect.

12. Contact us

Questions about this policy or your data can be sent to [email protected].