Privacy Policy

Last updated: January 26, 2026

Your Privacy Matters

At Trybl, we are committed to protecting your privacy and being transparent about how we handle your data. This policy explains what information we collect, how we use it, and your rights regarding your personal information.

1. Information We Collect

Account Information

When you create a Trybl account, we collect:

  • Email address
  • Name and display name
  • Username
  • Profile photo (optional)
  • Phone number (optional, for login)

Community Information

To connect you with relevant content, we collect:

  • Communities you join (colleges, organizations, neighborhoods)
  • Groups and interests you select
  • Academic information if applicable (major, graduation year, classes)

Calendar Data

If you choose to connect your calendar, we access:

  • Google Calendar (Read Access): We read your calendar events to determine your availability and find free time slots
  • Google Calendar (Write Access): We create or modify calendar events only with your explicit approval
  • Apple Calendar: We read local calendar events on your device for availability checking

Google OAuth Scopes We Request

We request only the minimum necessary Google Calendar permissions:

calendar.readonlycalendar.events

We do NOT access your Gmail, Google Drive, or any other Google services.

Location Data

If you enable location features, we may collect:

  • Approximate location for showing nearby events and friends
  • Location for map features and proximity-based hangouts
  • Background location only if you explicitly enable it in settings

You control when and how your location is shared through in-app settings.

Usage & Interaction Data

We automatically collect certain information:

  • Device information (device type, operating system, app version)
  • Log data (access times, features used, crash reports)
  • Interaction data (groups joined, events attended, connections made)

Content You Create

  • Messages and chat content
  • Events and hangouts you create
  • Polls and voting data
  • Profile information and bio

2. How We Use Your Information

We use the information we collect to:

  • Provide Core Services: Enable event discovery, friend connections, group management, and messaging
  • Calendar Coordination: Find mutual availability and help you schedule group activities
  • Personalization: Show relevant events, suggest groups, and recommend friends based on your interests and community
  • Location Features: Display nearby events, enable map features, and show friend proximity (when enabled)
  • Communication: Send notifications about your groups, events, messages, and friend requests
  • Safety & Security: Detect and prevent fraud, abuse, and security incidents
  • Improvements: Analyze usage patterns to improve the app experience
  • Legal Compliance: Comply with applicable laws and regulations

3. Data Storage & Security

Infrastructure

  • Data is stored on Supabase (hosted PostgreSQL database)
  • Supabase provides enterprise-grade security with SOC 2 Type II compliance
  • Cloud infrastructure hosted on AWS with industry-standard protections

Security Measures

  • Encryption in Transit: All data encrypted using TLS 1.3
  • Encryption at Rest: Data encrypted using AES-256
  • Authentication: OAuth 2.0 for Google Calendar, secure JWT tokens for API access
  • Row-Level Security: Database policies ensure users only access their own data
  • Access Controls: Strict role-based access for our team
  • Password Storage: Passwords are hashed using bcrypt (never stored in plain text)
  • Regular Audits: Security assessments and vulnerability testing

Note: While we use industry-standard practices, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party services:

Supabase (Database & Authentication)

Provides database hosting, user authentication, and real-time features.

Supabase Privacy Policy

Google Calendar API

Used for calendar synchronization and event management. We comply with Google API Services User Data Policy.

Google Privacy Policy

Apple Calendar (EventKit)

Local calendar access on iOS devices. Event data stays on your device; we only read event times for availability.

Expo (App Framework)

Provides app infrastructure and push notification services.

Expo Privacy Policy

5. Information Sharing & Disclosure

We do NOT sell your personal information to third parties.

We share information only in these circumstances:

  • With Other Users: Profile information, group memberships, and friend connections are visible to other users based on your privacy settings
  • Service Providers: Trusted partners who help us operate Trybl (Supabase, cloud infrastructure providers) under strict confidentiality agreements
  • Legal Requirements: When required by law, court order, or to protect rights and safety
  • Business Transfers: In connection with a merger or acquisition (with continued privacy protection)
  • With Your Consent: Any other sharing only with your explicit permission

6. Your Rights & Controls

You Have Complete Control Over Your Data

  • Access Your Data: Request a copy of all information we have about you
  • Correct Information: Update or correct any inaccurate information
  • Delete Your Account: Request complete deletion of your account and data
  • Revoke Google Access: Disconnect Google Calendar at any time via Google Account → Security → Third-party access
  • Data Portability: Export your data in a machine-readable format
  • Opt-Out: Unsubscribe from non-essential communications

Privacy Controls in the App

  • Visibility settings (who can see your profile, calendar, location)
  • Location sharing toggle (foreground, background, or disabled)
  • Notification preferences
  • Friend visibility levels

How to Exercise Your Rights

  • In-App: Use the Settings → Privacy section
  • Email: Send requests to triblyfindyours@gmail.com
  • Response Time: We respond to all requests within 30 days

7. Data Retention & Deletion

Retention Periods

  • Active Accounts: Data retained while your account is active
  • Calendar Data: Cached for up to 7 days for performance
  • Messages: Retained until you or the conversation is deleted
  • Deleted Accounts: Data purged within 30 days of deletion request
  • Legal Requirements: Some data may be retained longer if required by law

How to Delete Your Data

You can request complete deletion of your Trybl account and all associated data:

  1. In-App: Settings → Account → Delete Account
  2. Email: Send request to triblyfindyours@gmail.com

Timeline: We process deletion requests within 30 days.

8. Children's Privacy

Trybl is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will delete it promptly.

If you believe a child has provided us with personal information, please contact us at triblyfindyours@gmail.com.

9. Regional Privacy Rights

Depending on where you live, you may have additional rights:

California Residents (CCPA)

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we don't sell your data)
  • Right to non-discrimination for exercising your rights

European Union Residents (GDPR)

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to data portability
  • Right to object to processing
  • Right to lodge a complaint with a supervisory authority

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the new policy with an updated "Last Updated" date
  • Sending an in-app notification or email for significant changes

Your continued use of Trybl after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

Get in Touch

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Subject Lines:"Privacy Question", "Data Request", or "Data Deletion"
Response Time:We respond to all privacy requests within 30 days