Privacy Policy

What data we collect

When you use People Met, we collect and store:

• Account information — your email address, display name, and avatar image.
• People entries— the names, notes, tags, and other details you add about people you've met.
• Tags and categories — custom tags and categories you create to organize your contacts.
• Email preferences — your digest and notification settings.

If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not access your Google contacts, calendar, or any other Google data.

How we store your data

Your data is stored in a PostgreSQL database hosted by Supabase with row-level security enabled. Avatar images are stored in Supabase Storage. The application is hosted on Vercel.

Authentication is handled by Supabase Auth. Passwords are hashed and never stored in plain text. OAuth tokens from Google are managed by Supabase and are not stored in our application database.

How we use your data

Your data is used solely to provide the People Met service:

• Displaying and managing your people entries
• Sending email digests you have opted into
• Authenticating your account

We do not sell, share, or rent your personal data to third parties. We do not use your data for advertising, and we do not build a profile of you or your behaviour.

We do measure anonymous, aggregate usage and performance so we can see which parts of the app are used and how fast it runs. That is described in Analytics and performance below.

Third-party services

People Met relies on the following third-party services:

• Supabase — database, authentication, and file storage
• Vercel — application hosting, plus the analytics and performance measurement described below
• Google — optional OAuth sign-in
• Resend — transactional email delivery

Each service has its own privacy policy. We only share the minimum data required for each service to function.

Analytics and performance

We use two Vercel products to understand how People Met is used and how well it performs: Vercel Web Analytics and Vercel Speed Insights. Neither one uses cookies, neither one tracks you across other websites, and neither one receives the people entries, notes, or tags you store in the app.

Vercel Web Analytics

Web Analytics records a data point when a page is viewed, and when one of a small, fixed set of actions happens. Vercel stores the following with each data point: the page address and its route pattern, the referring site, filtered query parameters, an approximate location (country, region, and city) derived from the request, the device type, the operating system, and the browser and its version. Visitors are counted using a hash derived from the incoming request rather than a cookie, and Vercel discards that session identifier after 24 hours.

Beyond page views, these are the only actions we count. Each one records that the action happened and nothing else:

• person_created — a person entry was added
• person_updated — a person entry was edited
• person_deleted — a person entry was deleted
• favorite_toggled — a person entry was marked or unmarked as a favorite
• feedback_submitted — feedback was sent through the in-app form
• share_opened — the share sheet for People Met was opened
• pwa_installed — the app was installed to a home screen

We attach no properties whatsoever to these events. A name, nickname, note, tag, email address, or person identifier is never sent as part of one. The event name and the standard page information listed above are the whole of it. Individual people you save appear in page addresses only as a randomly generated identifier, never as a name.

Vercel Speed Insights

Speed Insights samples real-world performance measurements — Core Web Vitals such as how quickly the main content appears and how stable the layout is while loading. Vercel stores the following with each measurement: the route and page address, the measured web vital and the page element it is attributed to, the network speed, the browser, the device type, the operating system, the country, and the time the measurement was received. It does not use cookies and does not collect information that would identify you or reconstruct your session across pages.

Retention and access

Vercel acts as our processor for this data: it collects and stores the measurements on our behalf, under our Vercel account, and we do not share them with anyone else. Only the maintainer of People Met can view them, through the Vercel dashboard.

Vercel does not publish a fixed deletion date for this data. What it does publish is a reporting window — the period during which the data is guaranteed to be stored and viewable — whose length depends on the Vercel plan a project is on, and Vercel states that it may retain data beyond that window. Rather than quote a number we cannot stand behind, we will say plainly: this data is kept by Vercel for as long as their platform retains it, and because it is anonymous and aggregate it is not something we can tie back to you.

If you are in the EU, UK, or California

We are describing this so you can judge it for yourself rather than asserting a legal conclusion. The analytics described here are not linked to your account, are not sold or shared, and are not used for advertising, cross-context behavioural advertising, or profiling. No analytics cookies are set, so there is no consent banner to dismiss.

You can ask us for a copy of your account data or ask us to delete it at any time using the contact address below. One honest caveat: because analytics data points are anonymous and carry no account identifier, we have no way to find yours specifically, so we cannot export or delete them individually.

Cookies and sessions

We use cookies solely for authentication session management. We do not use tracking cookies, analytics cookies, or third-party advertising cookies — the analytics described above are cookieless.

Data deletion

You can delete your account and all associated data at any time. If you would like to request account deletion, contact us at the email below. All data will be permanently removed within 30 days of your request.

Contact

If you have questions about this privacy policy, contact us at support@peoplemet.com.