sup. Privacy Policy
Last updated: September 23, 2026
The short version
sup. collects the minimum needed to run a tiny invite-only ping app: a username, a password, your device's push token, and — only when you choose — your precise location attached to a single sup. No email, no phone number, no analytics, no ads, no tracking of any kind.
What we collect
- Username — your identity on sup. It is visible to people you connect with.
- Password — stored only as a salted hash. It cannot be read by us. There is no password recovery: if you lose it, the account is unrecoverable.
- Device push token — so iOS can deliver sups to your device.
- Sups — the "sup" you send, plus who you sent it to and when.
- Location (optional) — only when you explicitly send a sup with location. It is attached to that sup and handled per the product rules. Push notifications never contain coordinates, only a "with location" note.
What we do not collect
- Email addresses or phone numbers
- Contacts or address books
- Usage analytics, diagnostics, or crash reporting
- Advertising identifiers — sup. displays no ads and does not track you across apps or websites
Retention
Delivered sups are retained for 48 hours. Undelivered sups are retained for 7 days. After that they are deleted from our servers. Account records persist until you delete your account.
Sharing
We do not sell or share your data with third parties. Infrastructure providers (hosting, DNS/CDN, and Apple's push notification service) process data solely to operate the service.
Your choices
- Location is opt-in per sup — the app asks permission and only uses your location when you choose to include it.
- You can delete your account at any time in Settings → Delete account. This removes your account and data.
Contact
Questions about this policy: see the support page.