Privacy Policy
Last updated: January 26, 2026
Your Privacy Matters
At Trybl, we are committed to protecting your privacy and being transparent about how we handle your data. This policy explains what information we collect, how we use it, and your rights regarding your personal information.
1. Information We Collect
Account Information
When you create a Trybl account, we collect:
- Email address
- Name and display name
- Username
- Profile photo (optional)
- Phone number (optional, for login)
Community Information
To connect you with relevant content, we collect:
- Communities you join (colleges, organizations, neighborhoods)
- Groups and interests you select
- Academic information if applicable (major, graduation year, classes)
Calendar Data
If you choose to connect your calendar, we access:
- Google Calendar (Read Access): We read your calendar events to determine your availability and find free time slots
- Google Calendar (Write Access): We create or modify calendar events only with your explicit approval
- Apple Calendar: We read local calendar events on your device for availability checking
Google OAuth Scopes We Request
We request only the minimum necessary Google Calendar permissions:
We do NOT access your Gmail, Google Drive, or any other Google services.
Location Data
If you enable location features, we may collect:
- Approximate location for showing nearby events and friends
- Location for map features and proximity-based hangouts
- Background location only if you explicitly enable it in settings
You control when and how your location is shared through in-app settings.
Usage & Interaction Data
We automatically collect certain information:
- Device information (device type, operating system, app version)
- Log data (access times, features used, crash reports)
- Interaction data (groups joined, events attended, connections made)
Content You Create
- Messages and chat content
- Events and hangouts you create
- Polls and voting data
- Profile information and bio
2. How We Use Your Information
We use the information we collect to:
- Provide Core Services: Enable event discovery, friend connections, group management, and messaging
- Calendar Coordination: Find mutual availability and help you schedule group activities
- Personalization: Show relevant events, suggest groups, and recommend friends based on your interests and community
- Location Features: Display nearby events, enable map features, and show friend proximity (when enabled)
- Communication: Send notifications about your groups, events, messages, and friend requests
- Safety & Security: Detect and prevent fraud, abuse, and security incidents
- Improvements: Analyze usage patterns to improve the app experience
- Legal Compliance: Comply with applicable laws and regulations
3. Data Storage & Security
Infrastructure
- Data is stored on Supabase (hosted PostgreSQL database)
- Supabase provides enterprise-grade security with SOC 2 Type II compliance
- Cloud infrastructure hosted on AWS with industry-standard protections
Security Measures
- Encryption in Transit: All data encrypted using TLS 1.3
- Encryption at Rest: Data encrypted using AES-256
- Authentication: OAuth 2.0 for Google Calendar, secure JWT tokens for API access
- Row-Level Security: Database policies ensure users only access their own data
- Access Controls: Strict role-based access for our team
- Password Storage: Passwords are hashed using bcrypt (never stored in plain text)
- Regular Audits: Security assessments and vulnerability testing
Note: While we use industry-standard practices, no method of electronic storage is 100% secure. We cannot guarantee absolute security.
4. Third-Party Services
We use the following third-party services:
Supabase (Database & Authentication)
Provides database hosting, user authentication, and real-time features.
Supabase Privacy PolicyGoogle Calendar API
Used for calendar synchronization and event management. We comply with Google API Services User Data Policy.
Google Privacy PolicyApple Calendar (EventKit)
Local calendar access on iOS devices. Event data stays on your device; we only read event times for availability.
5. Information Sharing & Disclosure
We do NOT sell your personal information to third parties.
We share information only in these circumstances:
- With Other Users: Profile information, group memberships, and friend connections are visible to other users based on your privacy settings
- Service Providers: Trusted partners who help us operate Trybl (Supabase, cloud infrastructure providers) under strict confidentiality agreements
- Legal Requirements: When required by law, court order, or to protect rights and safety
- Business Transfers: In connection with a merger or acquisition (with continued privacy protection)
- With Your Consent: Any other sharing only with your explicit permission
6. Your Rights & Controls
You Have Complete Control Over Your Data
- Access Your Data: Request a copy of all information we have about you
- Correct Information: Update or correct any inaccurate information
- Delete Your Account: Request complete deletion of your account and data
- Revoke Google Access: Disconnect Google Calendar at any time via Google Account → Security → Third-party access
- Data Portability: Export your data in a machine-readable format
- Opt-Out: Unsubscribe from non-essential communications
Privacy Controls in the App
- Visibility settings (who can see your profile, calendar, location)
- Location sharing toggle (foreground, background, or disabled)
- Notification preferences
- Friend visibility levels
How to Exercise Your Rights
- In-App: Use the Settings → Privacy section
- Email: Send requests to triblyfindyours@gmail.com
- Response Time: We respond to all requests within 30 days
7. Data Retention & Deletion
Retention Periods
- Active Accounts: Data retained while your account is active
- Calendar Data: Cached for up to 7 days for performance
- Messages: Retained until you or the conversation is deleted
- Deleted Accounts: Data purged within 30 days of deletion request
- Legal Requirements: Some data may be retained longer if required by law
How to Delete Your Data
You can request complete deletion of your Trybl account and all associated data:
- In-App: Settings → Account → Delete Account
- Email: Send request to triblyfindyours@gmail.com
Timeline: We process deletion requests within 30 days.
8. Children's Privacy
Trybl is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will delete it promptly.
If you believe a child has provided us with personal information, please contact us at triblyfindyours@gmail.com.
9. Regional Privacy Rights
Depending on where you live, you may have additional rights:
California Residents (CCPA)
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information (we don't sell your data)
- Right to non-discrimination for exercising your rights
European Union Residents (GDPR)
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the new policy with an updated "Last Updated" date
- Sending an in-app notification or email for significant changes
Your continued use of Trybl after changes become effective constitutes acceptance of the revised policy.
11. Contact Us
Get in Touch
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: