Privacy Policy — Incentive

1.Information We Collect

We collect the categories of information below. The specific items we collect depend on the features you use.

Account and profile information: your name and display name, email address, username, school or college affiliation, avatar, bio, phone number, and date of birth, along with optional profile details you choose to add such as social and external links (for example LinkedIn, Instagram, TikTok, X, Facebook, GitHub, Substack, Linktree, and portfolio links), education history, work and startup experience, skills, clubs, certifications, interests and industries, major, minor, graduation year, and class year.
Academic and education information: your GPA where you provide it, and academic transcripts you upload, including the transcript files themselves and information we extract or derive from them, such as extracted text, course and grade data, institution name, and summaries used to power profile and career features.
Content and community activity: posts, comments, articles activity, likes, follows, group memberships and follows, poll creation and votes, event RSVPs and attendance, bookmarks, sends and shares, invite links, and reports, blocks, and mutes you create.
Messages and shared media: direct and group conversation content, including text, images, videos, reactions, polls, file attachments, and related metadata such as file name, type, and size needed to deliver and display those messages.
AI assistant interactions: the prompts, messages, context, and conversation history you create when you use the in-app assistant ("Copilot"), including stored chat sessions and messages, and audio or text generated by assistant and text-to-speech features you choose to use.
Job and career information: job applications and application answers, resume files and related URLs, cover-letter text, application metadata and submission details, autofill activity, saved and recent job searches and their filters, and job and posting view history.
Notification and device data: push notification tokens, notification preferences, app version, platform and device details, and permission status used to deliver messages, reminders, and alerts.
Usage and analytics data: how you interact with the Service, including session counts and duration, daily, weekly, and monthly active-use signals, activity timestamps such as last-active time, feature interactions, and signals used to generate recommendations.
Technical and log data: IP address, user-agent string, referring page or source, device context, crash and error reports, and performance traces. We collect this when you use the Service, submit job applications, and join our waitlist, among other activities.
Media and input permission data: when you choose to use camera, photo library, microphone, speech recognition, or save-to-library features.
Link and preview data: when you submit or open external URLs and we fetch metadata needed to render link previews safely inside the app.
Waitlist and pre-account data: if you join our waitlist before creating an account, we collect your email address, school email domain, the source or referrer that brought you, and basic technical data such as user-agent.

2.How We Use Information

Create and maintain your account and authenticate you securely.
Match your account to a supported school or college community and personalize your experience, feeds, and recommendations.
Operate community features such as feeds, profiles, comments, groups, events, messaging, notifications, bookmarks, and search.
Provide the AI assistant and related features, including processing your prompts and context to generate responses, and providing dictation and text-to-speech features you choose to use.
Process job applications, autofill application forms from your profile and academic information when available, maintain application and search history, and surface relevant opportunities.
Provide media, notification, and link-preview features you choose to use.
Detect, investigate, and address abuse, including automated content scanning of public content, responding to reports, and enforcing community rules to keep users and the platform safe.
Measure usage, monitor reliability, debug issues, analyze product health, and improve app performance and user experience.
Comply with legal obligations, enforce our Terms, protect rights and safety, and prevent fraud or misuse.

3.AI and Assistant Features

When you use the in-app assistant or related features, your prompts, messages, conversation context, and certain profile or academic information may be processed by us and by third-party AI and text-to-speech providers to generate responses and audio.

Assistant output may be inaccurate or incomplete and is provided for informational and community purposes only. It is not professional, legal, financial, medical, employment, or academic advice. Please do not enter sensitive personal information you do not want processed by these features, and independently verify anything you rely on.

4.Automated Content Scanning and Moderation

To help keep the community safe, public user content may be analyzed automatically to flag potentially policy-violating material for review. These automated signals do not prevent you from posting and are intended to support human review and moderation. We also review reports submitted by users and may use the information involved to investigate and enforce our Terms and community rules.

5.How Information Is Shared

We do not sell your personal information, and we do not use third-party mobile ad networks or cross-app tracking for advertising. We share information only as described below.

Service providers and processors who help us operate the Service, including Supabase, which we use to host backend data, authentication, file storage, realtime features, and edge functions.
Notification providers, including Expo and platform push services such as Apple Push Notification service and, where applicable, Google delivery infrastructure, to deliver notifications you enable.
AI and text-to-speech providers that process prompts, context, and generated content when you use assistant or audio features.
Link-preview and metadata services when you submit a URL and the app fetches preview information.
Employers, job hosts, and external sites when you choose to apply for a role, open an external application URL, or otherwise interact with third-party opportunities. Information you submit through an application, such as your answers, resume, and cover letter, is shared with the relevant opportunity.
Other users, according to the visibility of the feature you use, as described in the next section.
Authorities and other parties when we believe disclosure is reasonably necessary to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, safety, and integrity of users, the public, or the Service.
Acquirers or successors in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to this Privacy Policy or a successor policy.

6.Visibility, Public Content, and Community Context

Your profile information, posts, comments, and certain activity may be visible to other users in the relevant college or community context, and in some cases more broadly within the Service.
Some media you upload, such as avatars, post images and videos, event images, and certain message media, is stored in publicly readable storage. Content stored this way may be accessible by anyone who has the direct file link, including outside the app, even after it is removed from view in the app for a period of time. Please be thoughtful about what you upload.
Direct messages and group conversations are visible to the participants in those conversations and to the service providers needed to deliver the messaging service.
Reports you submit are intended for internal safety and moderation workflows and are not displayed publicly as ordinary user content.
Blocking and muting can limit visibility and interactions between users, but they may not remove information that was already shared with or saved by others.

7.Permissions and Device Features

Photos and camera access are used for profile pictures, post media, event or group media, and message attachments.
Photo-library save access is used when you save supported content, such as images from messages, back to your device.
Microphone and speech-recognition access are used for dictation features when available on your device.
Notification permissions are used to deliver messages, reminders, mentions, job updates, and other alerts you choose to receive.
You can change these device permissions at any time in your device settings.

8.Your Choices and Controls

You can edit much of your profile and academic information from in-app settings and profile-editing surfaces.
You can manage notification preferences in the app and in your device settings.
You can use in-app tools such as report, block, and mute to manage your experience and safety.
You can request deletion of your account from in-app settings, as described in the Account Deletion section below.

9.Your Privacy Rights

Subject to applicable law, you may have rights regarding your personal information, including the ability to access or correct it, request a copy, or request deletion. To exercise any of these rights, contact us using the email at the end of this policy. We will verify and respond to your request as required by law and will not discriminate against you for exercising your rights. We do not sell your personal information.

10.Data Retention

We retain information for as long as reasonably necessary to provide the Service, maintain safety and moderation records, process applications and communications, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and context. When information is no longer needed, we take reasonable steps to delete or de-identify it.

11.Account Deletion

You can request deletion of your account from within the app. When you do, we process the request and work to delete or de-identify your personal information and associated content and files, subject to the exceptions below.

Some information may be retained after deletion where reasonably necessary to comply with legal obligations, maintain safety, security, and moderation records, prevent fraud or abuse, resolve disputes, or enforce our agreements. Content you shared with others, or that others saved or re-shared, may remain visible to them.

12.Data Security

We use measures designed to protect information, including authenticated access controls, access policies on our backend services, and encrypted native secure storage for certain local session data where supported. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account or any information has been compromised, contact us promptly.

13.Children and Age Limits

The Service is intended for users who are at least 13 years old and otherwise old enough to use online services under applicable law, and it is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and delete it as appropriate.

14.Changes to This Policy

We may update this Privacy Policy as the product, our practices, or legal requirements change. When we make material updates, we will revise the effective date above, update the in-app policy text, and provide additional notice where appropriate. Your continued use of the Service after an update takes effect means you accept the revised policy.

15.Contact Us

If you have privacy questions or requests, contact us at support@incentive.social or visit https://incentive.social.