Privacy Policy

Welcome to PRIZM.

Your privacy is important to us. This Privacy Policy explains how PRIZM ("we", "our", or "the app") collects, uses, protects, and manages your information when you use our application and services.

By using PRIZM, you agree to the practices described in this Privacy Policy.

1. Information We Collect

Account Information — When you create an account, we may collect:

• Email address
• Username and display name
• Profile information
• Profile photo (if provided)
• Other information you choose to add

Communication Data — When you use PRIZM, we may process:

• Messages you send and receive
• Conversations and interactions
• Stories you post and the list of friends who viewed them
• Call signaling metadata (who called whom and the call's status) — never the audio or video content of your calls
• Anonymous posts or community content
• Reports, feedback, and support requests

Location Information — Some features may require location access for nearby connection features and location-based discovery. Location permissions are optional and can be controlled through your device settings. If you enable the "Share live GPS" toggle during a MeetGuard check-in, your approximate coordinates are included in emergency alerts sent only to your trusted contacts; they are not stored on Prizm servers after the session ends.

MeetGuard Safety Data — If you use the MeetGuard feature, we may collect:

• Check-in photos you take during a safety check-in (person and surroundings)
• Session metadata (meeting time, duration, trusted contact Prizm IDs)
• GPS coordinates, if you opt in via the in-app toggle

MeetGuard photos are uploaded securely to Prizm servers and are automatically and permanently deleted after 3 weeks. Session metadata is deleted within 7 days of the session ending. See Section 6 for full MeetGuard details.

Device Information — We may collect limited technical data including device type, operating system, app version, and crash reports to improve reliability and user experience.

Push Notifications — If you grant permission, Prizm sends push notifications to your device via Apple Push Notification service (APNs) for incoming messages, MeetGuard safety alerts, and account activity. You may disable push notifications at any time in Settings → Notifications → Prizm.

2. How We Use Your Information

We use information to:

• Provide and maintain PRIZM services
• Create and manage your account
• Enable messaging and community features
• Improve app performance and security
• Prevent abuse, fraud, and harmful behavior
• Provide customer support
• Develop new features and improve user experience

3. AnonPost Content

PRIZM includes a community posting feature called AnonPost.

Age Requirement — AnonPost is restricted to users who are 18 years of age or older. By posting or viewing AnonPost content, you confirm you meet this requirement.

What We Collect — Although posts appear only by anonhandle to other users, PRIZM retains the following internally and securely:

• The account ID associated with each post (for moderation and safety)
• Timestamps and post content
• Any reports filed against a post

This information is never displayed publicly and is used solely for safety, abuse prevention, and compliance purposes.

Moderation — PRIZM has zero tolerance for objectionable content. All reported content is reviewed within 24 hours. Content that violates our Community Standards is removed and the responsible account may be permanently suspended.

Your Controls — You have the following controls over AnonPost content:

• Flag — Report any post you find objectionable using the flag button on each post.
• Block — Block any anonhandle to permanently hide their content from your feed.
• Delete — Delete your own posts at any time directly from the feed.

Abuse Reporting — To report abuse directly to our team: support@prizmapp.org

4. Stories & Disappearing Media

Stories
Stories are photos, short videos, or text cards you share with your friends.

• Stories are visible only to your Prizm friends, for 24 hours.
• Story media is uploaded securely to Prizm's servers and is automatically deleted after the 24-hour period ends.
• Prizm records which friends viewed your story so you can see a "Viewed by" list. This list is visible only to you and is deleted together with the story.

Story Replies
If a friend reacts to or comments on one of your photo stories, a copy of the story image is attached to their reply in your chat. Like any other chat message, that copy remains in the conversation after the original story expires and is visible to both participants.

Disappearing Photos & Videos in Chats
You may send photos and videos as view-once or timed. These are intended to be viewed briefly and cannot be saved to the recipient's device through the app. Regular (non-disappearing) photos can be saved by the recipient.

Disappearing Messages Timer
Either participant in a conversation may set a disappearing messages timer (24 hours, 7 days, or 90 days). When active:

• All messages in that conversation older than the chosen duration are automatically deleted from your device and from Prizm's servers.
• Deletion applies to both participants — messages are removed on both sides.
• When the timer is set or changed, both participants are shown a notice inside the conversation.
• Timer settings are stored on your device and are not shared with third parties.
• Setting the timer to "Off" stops automatic deletion; previously sent messages are not retroactively restored.

Screenshot & Save Notices
To keep both sides informed, Prizm posts a notice in the conversation when either person takes a screenshot of the chat or saves a photo from it. Expect the other person to be notified when you do either of these.

Saving Photos to Your Device
Saving a photo from a chat to your photo library happens only when you explicitly choose to save it. Prizm uses add-only photo library access — it can save new images to your library but can never read, browse, or access your existing photos.

5. Location Features

PRIZM uses location access for the following purposes:

Radar, Connect & Spots — Map-based features that let you discover and connect with people nearby.

• Location access is strictly opt-in.
• You must explicitly tap the location button each session. There is no automatic or persistent location sharing.
• You may browse the Spots map without ever sharing your own location.
• Location coordinates are used only for proximity features and are not broadcast to other users as a live feed.

MeetGuard — If you enable the "Share live GPS" toggle during a MeetGuard safety check-in:

• Your approximate GPS coordinates are included in any emergency alert sent to your trusted contacts.
• Coordinates are not stored on Prizm servers beyond your active session.
• They are never used for advertising or shared with any third party.
• You can turn the toggle off at any time during check-in to disable location sharing for that session.

You may revoke location access at any time through your device Settings → PRIZM → Location.

6. MeetGuard Safety Feature

MeetGuard is an optional personal safety check-in feature. This section explains exactly what data is collected and how it is handled.

Check-In Photos
When you complete a MeetGuard check-in, you may take up to two photos — one of the person you are meeting and one of your surroundings. These photos are:

• Uploaded securely to Prizm's servers using encrypted transfer
• Stored for a maximum of 3 weeks from the date of upload
• Automatically and permanently deleted after that 3-week period — no manual action is required
• Never shared with third parties
• Used exclusively to document your meeting for personal safety purposes

Live GPS Location
Your device's GPS coordinates are only captured if you turn on the "Share live GPS" toggle in the check-in screen. If you do:

• Coordinates are included in emergency alerts sent only to your trusted contacts
• They are not retained on Prizm's servers after your session ends
• They are never used for advertising, analytics, or sold to third parties

Trusted Contacts

• Phone numbers you enter for trusted contacts are stored only on your device and are never uploaded to Prizm's servers
• If you add a Prizm user as a trusted contact, their Prizm user ID is stored to enable in-app emergency alerts
• SMS emergency alerts are sent directly from your own phone number — Prizm does not send SMS on your behalf

Session Metadata
MeetGuard session records (meeting time, expiry, trusted contact Prizm IDs, alert status) are stored on Prizm's servers to operate the server-side dead-man's switch. This data is:

• Retained for a maximum of 7 days after the session ends
• Permanently deleted after that period

Server-Side Protection (Dead-Man's Switch)
Prizm's servers monitor active MeetGuard sessions. If your device stops sending heartbeat signals and your check-in window expires, Prizm's servers will automatically send push notifications to your trusted contacts' Prizm devices. This protection operates even if your phone is offline, out of battery, or the app is closed.

Emergency Alerts
If a MeetGuard alert is triggered — whether manually by you or automatically by the server watchdog — Prizm will:

• Send an in-app message to any trusted contacts who are Prizm users
• Pre-draft an SMS on your device for you to send (Prizm does not send SMS independently)

Emergency SOS
Prizm includes an Emergency SOS button that calls emergency services directly from your device:

• The SOS button dials the correct local emergency number for the country you are in (for example 911, 112, or 999).
• Your GPS location is used to detect which country you are in, if you have opted in to location access. If you have not, your device region setting is used instead.
• This lookup happens entirely on your device. No location data is sent to Prizm servers for this purpose.

7. Sharing of Information (General)

We do not sell your personal information.

We may share limited information only when necessary:

• To provide app services
• To comply with legal obligations
• To protect users and platform security
• With trusted service providers that help operate our services

8. Data Security

We take reasonable measures to protect your information, including:

• Secure authentication systems
• Protected data storage
• Access controls
• Security monitoring

However, no online service can guarantee complete security.

9. Your Choices and Rights

You have the following rights regarding your personal information:

• Access — Request a copy of the personal information we hold about you.
• Correction — Ask us to correct inaccurate or incomplete information.
• Deletion — Request deletion of your account and associated data (see Section 10).
• Portability — Request your data in a portable format.
• Restriction — Ask us to restrict how we process your information in certain circumstances.
• Objection — Object to our processing of your personal information.
• Withdraw Consent — Revoke optional permissions (e.g., location) at any time through your device settings.

European Union (GDPR) — If you are located in the EU or EEA, you have the rights above under the General Data Protection Regulation and may lodge a complaint with your local data protection authority.

California (CCPA) — If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of any sale of personal information. We do not sell your personal information.

To exercise any of these rights, contact: support@prizmapp.org

10. Account Deletion

You may request deletion of your PRIZM account at any time through the app (Account → Delete Account), through our account deletion page, or by contacting support@prizmapp.org.

Upon deletion:

• Your profile, messages, and associated personal data will be permanently deleted within 30 days.
• MeetGuard photos are deleted within 3 weeks and session metadata within 7 days (or sooner upon account deletion).
• Some anonymized or aggregated data may be retained where required for legal, security, or operational reasons.
• Purchase history is managed by Apple and subject to Apple's own data policies.

11. Children's Privacy

PRIZM is intended for users who are 18 years of age or older. It is not intended for anyone under 18.

We do not knowingly collect personal information from minors. If we become aware that we have collected information from a user under 18, we will take steps to delete that information promptly. If you believe a minor has created an account, please contact us at support@prizmapp.org.

12. Third-Party Services

PRIZM uses the following third-party services to support its functionality:

• Supabase (supabase.com) — Backend database, authentication, and real-time messaging infrastructure. Supabase processes account data and messages on our behalf under a data processing agreement.
• LiveKit (livekit.io) — Real-time video and audio call infrastructure. LiveKit temporarily processes audio and video streams during active calls; stream data is not stored after the call ends.
• Apple App Store / StoreKit — Subscription and in-app purchase billing. Apple processes all payment information; Prizm does not store payment card details.
• Apple Push Notification Service (APNs) — Delivers push notifications to your device.
• Apple Translation — Powers the optional "Translate" action on messages, posts, and comments. Translation is performed by Apple's built-in translation feature on your device; Prizm does not send the text to its own servers or to any third-party translation service.

These services operate under their own privacy policies. We do not sell your personal information to these or any other third parties.

13. LGBTQ+ Community and Inclusive Environment

PRIZM is designed to provide a welcoming space for everyone.

While inspired by the LGBTQ+ community, PRIZM is created for people of all backgrounds to connect, communicate, and express themselves.

We are committed to maintaining a respectful and inclusive environment.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be reflected with an updated effective date.

15. Governing Law

This Privacy Policy is governed by the laws of the State of California, United States.

If you are located in the European Union or United Kingdom, your use of PRIZM and our handling of your personal data is also subject to applicable data protection law, including the General Data Protection Regulation (GDPR). The data controller responsible for your personal information is PRIZM (contact: support@prizmapp.org).

For inquiries from EU or UK residents, you may also contact your national data protection authority.

Contact Us

If you have questions about this Privacy Policy, please contact us:

support@prizmapp.org
www.prizmapp.org