Privacy Policy

This Privacy Policy describes how Subvey ("Subvey," "we," "us," or "our") collects, uses, stores, and shares information when you use our mobile application, website at subvey.com, and related services (collectively, the "Service"). By using the Service you agree to this Policy. If you do not agree, do not use the Service.

1. Who we are

Subvey is a decision-making platform that lets users create comparison jobs and collect opinions via pairwise swipes. The data controller responsible for your personal data is Subvey. You can reach us at privacy@subvey.com.

2. Information we collect

2.1 Information you provide

• Account information. When you sign up as a job creator, we collect your email address, and optionally your name, phone number, and profile picture. If you sign in with a third-party provider (e.g., Google, Apple), we receive basic profile information from that provider.
• Job content. Questions, titles, descriptions, and uploaded options (text, images, audio) that you submit when creating a comparison job.
• Evaluator input. If you participate as an evaluator, we collect the access code you entered, your swipe choices, and an anonymous identifier. We do not require an account from evaluators.
• Communications. Messages you send us for support or feedback.

2.2 Information collected automatically

• Device & technical information. IP address, device type, operating system, app version, browser type, language, time zone, crash logs, and diagnostic data.
• Usage data. Pages and screens viewed, actions taken, session duration, referring URLs, and feature interactions.
• Cookies and similar technologies. On the web, we use cookies and local storage to keep you signed in and to remember preferences. See our Cookie Policy.

2.3 Information we do not collect

We do not collect precise location data, contacts, health data, or financial/payment information. We do not knowingly collect information from children under 13. We do not use your data to train AI models.

3. How we use your information

We use the information we collect for the following purposes:

• To create and manage your account and authenticate you.
• To operate the Service — deliver jobs, record votes, compute rankings, and share results.
• To communicate with you about account activity, updates, and support.
• To improve the Service, debug issues, and develop new features.
• To detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms.
• To comply with legal obligations and enforce our agreements.
• With your consent, for any other purpose disclosed at the time we collect it.

4. Legal bases for processing (EEA / UK users)

If you are in the European Economic Area or the United Kingdom, we process your data based on:

• Contract. To provide the Service you requested.
• Legitimate interests. To keep the Service secure, prevent abuse, and improve features — balanced against your rights and interests.
• Consent. For optional analytics, marketing communications, or any other purpose where we ask for it. You can withdraw consent at any time.
• Legal obligation. When required by law.

5. How we share information

We do not sell your personal information. We share information only as described below:

• With evaluators and the public link. Job content you create is visible to anyone who has the access code or link.
• Service providers (processors). We use trusted vendors to host and operate the Service, including Supabase (database, auth, storage), Vercel (hosting), Twilio (SMS OTP), and Google (OAuth). These providers process data only on our behalf and under written agreements.
• Legal and safety. To comply with law, respond to valid legal process, or protect the rights, safety, or property of Subvey, our users, or the public.
• Business transfers. If Subvey is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.
• With your consent. For any other sharing we ask you to approve.

6. International data transfers

Subvey operates globally. Your information may be transferred to, stored, and processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms to protect your data.

7. Data retention

We retain personal information for as long as your account is active and as needed to provide the Service. We may retain certain information after account deletion to comply with legal obligations, resolve disputes, enforce our agreements, and maintain security and fraud prevention records. Aggregated or de-identified information that cannot reasonably be used to identify you may be retained indefinitely.

8. Your rights and choices

Depending on your location, you may have the following rights regarding your personal information:

• Access a copy of the information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and associated personal data.
• Restrict or object to certain processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent where we rely on it.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at privacy@subvey.com or visit Delete Account. We may need to verify your identity before acting on your request.

9. California privacy rights (CCPA / CPRA)

If you are a California resident, you have the right to (a) know what categories of personal information we collect, use, disclose, and sell; (b) request access to and deletion of your personal information; (c) correct inaccurate personal information; (d) opt out of sale or sharing of personal information; and (e) not be discriminated against for exercising your rights.

We do not sell personal information as defined by the CCPA and we do not share personal information for cross-context behavioral advertising. To exercise your California rights, email privacy@subvey.com.

10. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@subvey.com and we will take steps to delete it. Users in the European Economic Area must be at least 16 or have parental consent.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect information, including encryption in transit (TLS), encrypted storage where supported, access controls, and audit logging. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Third-party links and services

The Service may link to third-party websites or services. We are not responsible for their practices. We encourage you to review the privacy policies of any third-party services you access.

13. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

14. Contact us

If you have questions or concerns about this Policy or our privacy practices, contact us at privacy@subvey.com.