Privacy policy

What we collect

You can use Undertow without an account. If you create one, we collect only what the product needs:

Account email Only with an account

The address you sign up with, or the private relay address Apple gives us if you choose Hide My Email. It is held by our authentication provider, Supabase.

Account ID Only with an account

A random identifier that links the rows below to your account. It is not your name or your Apple or Google profile.

District Your choice

The district you pick from the list. We store the district name. We do not store coordinates, and we do not read device location.

Reactions and answers Product function

The option you tap on a card, poll or prediction. Used to show your answer and to count results.

Progress Product function

Points, streak and last-seen date, so your progress is still there when you return.

Topic mutes Your choice

The topics you chose to mute. This is the only personalisation setting in the app.

Answer marker Not the answer

On cards we do not store, such as politics, we write only that you answered — not what you answered. It prevents double voting.

Aggregate counts Not linkable

Card, answer, region and generation totals that cannot be linked back to a person.

We do not collect your name. The name you use on the welcome screen stays on your device. We do not collect free text, comments, messages, photos or video, because Undertow is not a social network.

What we never collect

This is a product rule, not a temporary setting. If a feature needed one of these, the feature would change before data collection expanded.

• Device location, coordinates or location history. The district is a choice you make in the app. We never ask for location permission.
• Advertising ID (IDFA/IDFV), cross-app or cross-device tracking. There is no ATT prompt and no tracking SDK.
• Contacts, contact lists or phone number. We do not ask for them and we do not read them.
• Free text, comments, messages, photos or video. The app has no place to write them.
• Payment information, health or financial data, browsing or search history. None of it is processed.
• Third-party analytics, crash-reporting or advertising SDKs. None are included.

Why we use it

• Email and account ID: sign-in and keeping your session.
• District: showing cards for your area and regional totals.
• Reactions and answers: showing your answer, counting results and keeping your progress.
• Points, streak and mutes: keeping your place and your preferences.
• Aggregate counts: card results and trend totals that cannot identify you.

We do not use your data for tracking, advertising, profiling or sale. We do not follow you across other apps or websites.

Third parties

• Supabase — hosting, database and authentication. Account data is held in the EU, in the eu-west-1 / Ireland region.
• Apple — Sign in with Apple, only if you choose it. Apple may relay your email; the app receives only the identity needed for your session.
• Google — Sign in with Google, only if you choose it.

There are no analytics, crash-reporting, advertising or tracking providers. Data is sent over HTTPS. We do not sell personal data or share it for advertising.

How long we keep it

With an account: we keep your data until you delete your account. There is no separate automatic retention period.

When you delete: we remove your account, email, reactions, answers, answer markers, topic mutes, points and streak. This completes within 30 days and cannot be undone.

Aggregate counts: totals that cannot be linked to a person may remain after deletion.

Without an account: there is no server account and no personal data on our servers. Your district and answers stay on your device until you clear them.

Step-by-step deletion instructions are on the account page.

Your choices and rights

You can ask us to access, correct or delete your data. Write to [email protected] from the email on your account. We reply within 2 business days.

If you are not signed in, you can clear the data on your device from the app. That removes your district, welcome preferences and guest answers from the device; there is no server account to delete.

Children

Undertow is not directed to children and has no child-specific mode or feed. If a child has an account, write to [email protected] and we will delete it.

Changes

This policy is dated 30 October 2026, version 1.0. If it changes, we update the date and version on this page. Material changes appear here before they take effect.

Terms of use: Apple's standard EULA applies.

Contact

For privacy, data and account deletion requests: