Privacy Policy

Galvanized App

Last Updated: February 15, 2026

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address - Used for authentication and account recovery
• Name - Displayed to other forum members
• Password - Stored securely using industry-standard hashing
• Profile photo (optional) - Displayed to other forum members

Forum Activity

To provide the service, we store:

• Wellness check-ins - Your daily wellness scores and optional notes
• Monthly updates - Your forum update submissions
• Meeting data - Agendas, minutes, and attendance
• Chat messages - Communications with forum members
• Vault content - Photos and videos you upload
• Financial records - Shared expenses and payments within your forum
• Parking lot items - Ideas and follow-ups you create

Location Information

With your permission, we collect:

• City-level location - Used to display your general location to forum members
• Timezone - Used to show local time differences between members

We do not track precise GPS coordinates. Location sharing is optional and can be disabled at any time.

Device Information

• Push notification tokens - To deliver notifications to your device
• Device type and OS version - For compatibility and troubleshooting

Authentication Data

If you sign in with Apple or Google, we receive:

• A unique identifier from the provider
• Your email address (if you permit)
• Your name (if you permit)

We do not receive or store your Apple or Google password.

2. How We Use Your Information

We use your information to:

• Provide and maintain the Galvanized service
• Authenticate your identity and secure your account
• Enable communication between forum members
• Send push notifications for meetings, messages, and reminders
• Generate AI-assisted features (wellness insights, update organization)
• Improve the app through anonymized usage analytics
• Respond to support requests

3. Information Sharing

Within Your Forum

Your forum members can see:

• Your name and profile photo
• Your city and timezone (if location sharing is enabled)
• Content you share: messages, vault items, meeting contributions
• Aggregated wellness trends (individual scores are private)

Third-Party Services

We use trusted third-party services to operate Galvanized:

• Neon (Database) - Secure cloud database hosting
• Cloudinary - Media storage and delivery
• OpenAI - AI features (assistant, content generation)
• Expo - Push notification delivery
• Sentry - Error monitoring and crash reporting

These services process data only as necessary to provide their functionality and are bound by their own privacy policies.

We Never

• Sell your personal information
• Share your data with advertisers
• Allow access to your forum content by non-members
• Use your content to train AI models

4. Data Security

We implement multiple layers of security:

• Encryption in transit - All data transmitted via HTTPS/TLS
• Encryption at rest - Database and media storage are encrypted
• Biometric protection - Vault access requires Face ID or Touch ID
• Vault Access Tokens - Time-limited tokens for sensitive content
• Row-Level Security - Database policies ensure you only access your forum's data
• Audit logging - Security-relevant actions are logged
• Secure authentication - JWT tokens with RS256 signing

5. Data Retention

• Account data - Retained while your account is active
• Forum content - Retained while the forum exists
• Deleted content - Permanently removed within 30 days
• Audit logs - Retained for 2 years for security purposes

6. Your Rights

You have the right to:

• Access - Request a copy of your personal data
• Correction - Update inaccurate information
• Deletion - Request deletion of your account and data
• Portability - Export your data in a standard format
• Withdraw consent - Disable location sharing or notifications

To exercise these rights, contact us at the address below.

7. Children's Privacy

Galvanized is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.

8. International Data Transfers

Your data may be processed in the United States where our servers are located. By using Galvanized, you consent to this transfer. We ensure appropriate safeguards are in place to protect your data in accordance with this policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of Galvanized after changes constitutes acceptance of the updated policy.

10. Contact Us