Privacy Policy

1. Introduction

atlasTHOUGHT ("we", "our", "us") operates the Bridge mobile application and website (the "Service"). This Privacy Policy explains what information Bridge collects, why it is used, where it may be processed, who it is shared with, and the choices available to you.

2. Information we collect

• Account information: information provided by Google Sign-In, such as your email address, name and profile image, when available. Google Sign-In is currently Bridge's only sign-in option.
• Profile information: display name, college, course, skills, bio, city or region, avatar, banner and optional public social links.
• Age eligibility: you enter your date of birth in Bridge. Google does not provide your date of birth to Bridge. The date of birth is stored in a restricted internal verification table. Bridge also stores a derived age value in a restricted profile field for server-side eligibility checks; it is not exposed through public profile queries.
• Content and activity: posts, comments and replies, polls and votes, Daily Challenge answers, and images you upload. Video and document uploads are disabled. Likes, bookmarks and post views are stored as account activity.
• Usage information: selected interests, feed impressions, Daily Challenge participation and streaks, and unique signed-in challenge opens or shares. These support feed and challenge features, including the participation leaderboard.
• Safety information: reports, moderation decisions, warnings, bans and related enforcement records.
• Support information: the name, email and message you provide through contact or account-deletion requests.

Bridge does not request precise device location, contacts, SMS, call logs, camera or microphone permissions. Profile location is optional user-entered information and may appear publicly if you provide it. Optional social links are public too.

3. How we use information

• Create and authenticate accounts and provide Bridge.
• Display profiles, posts and interactions according to the app's privacy controls.
• Operate and personalize the feed and related features.
• Provide Daily Challenges, record one official answer per challenge, calculate participation streaks, show eligible public leaderboard entries, and measure unique signed-in opens and shares. Private profiles are excluded from public challenge rankings and public answer lists.
• Moderate content, investigate reports and enforce our rules.
• Protect users, prevent abuse and security incidents, and comply with legal obligations.
• Respond to support and deletion requests.

4. Moderation and third-party processing

To check text submitted in posts, comments, Daily Challenge answers and profile names or biographies, and uploaded still images, Bridge sends the relevant content to OpenAI for automated moderation. Animated GIFs are sent to Sightengine, which analyzes the animation frames for visual safety risks. These results help determine whether content may be published. Video uploads are disabled and rejected by the server.

OpenAI and Sightengine process submitted content under the terms and settings applicable to the services Bridge uses. Their processing and retention depend on current provider terms and configuration; Bridge does not promise a fixed provider-side retention period here. Automated results can be wrong or incomplete and are not a substitute for in-app reporting and human review. OpenAI's image moderation does not determine whether a person depicted is a minor and is not a dedicated CSAM detection system.

5. Data sharing and service providers

We do not sell personal data. We share information with providers only as needed to operate Bridge, provide requested features, maintain security or comply with law.

• Supabase: authentication, database, row-level security and file storage.
• Google: Google Sign-In and Google Safe Browsing checks for URLs in user-submitted content.
• OpenAI: automated moderation of text submitted in posts, comments, Daily Challenge answers and profile names or biographies, and uploaded still images.
• Sightengine: automated safety analysis of animated GIF uploads.
• Resend: delivery of support/contact emails, which can include your name, email, subject and message.
• Capgo Social Login: the native Capacitor component used for Android Google Sign-In; Bridge sends the resulting Google identity token to Supabase Auth.

6. Child safety

Bridge is intended for adults aged 18 and over and uses an age gate. We prohibit child sexual abuse and exploitation (CSAE), including CSAM, grooming and sexualization of minors. Child-safety reports are prioritized. When we obtain actual knowledge of confirmed CSAM, we take appropriate action, remove or restrict material, preserve information where legally necessary and follow our child-safety escalation process. Where law requires, we report to NCMEC's CyberTipline or the relevant regional authority and cooperate with lawful requests.

7. User-generated content and moderation

Bridge is a user-generated-content platform. Content is subject to automated safety checks, server-side enforcement and human review of reports and high-risk cases. Automated moderation is a safety signal, not a guarantee that prohibited material will be detected. Bridge provides in-app reporting and blocking. Content or accounts that violate the Terms, community rules or child-safety standards may be removed, restricted or banned.

8. Data retention

We retain account and profile information while an account is active. Content and safety records are kept only as long as reasonably necessary for the purposes described here, including moderation, security, legal compliance and dispute handling. Some records may remain after deletion where required by law or reasonably necessary for safety, fraud prevention or legal claims. Provider retention is governed by the providers' current terms and settings.

9. Account and data deletion

Request deletion in the app at Profile → Settings → Delete my account, or use the public account-deletion page. For in-app deletion, Bridge removes the account's profile, content, interactions, submitted reports, notifications, blocks, related records and files stored under the account's media folders before removing the authentication account. If cleanup fails, the authentication account is not removed and the failure is reported. Limited safety, security, fraud-prevention or legal records may be retained or de-identified when necessary. External requests require Google account verification and administrator review; after verification, Bridge aims to complete them within 7 business days. You can also contact atlasthoughthelp@gmail.com.

10. Your rights and choices

• Request access to, correction of or deletion of personal information.
• Request a copy of information where data portability applies.
• Object to or restrict certain processing where applicable law provides that right.
• Withdraw consent where processing is based on consent, without affecting another lawful basis.
• Complain to the relevant data-protection authority.

11. Security

We use HTTPS/TLS for network transmission and database access controls, including row-level security. No internet transmission or storage system can be guaranteed completely secure.

12. Android permissions

Bridge requires Internet access. Google sign-in libraries may add credential or biometric-related declarations to Android's merged manifest; Bridge does not use biometric data as a sign-in method or collect biometric information. Bridge does not request contacts, SMS, call logs, precise location, camera or microphone permissions. Android's system media/file picker provides access to images you select without Bridge requesting broad device-storage access.

13. Changes to this policy

We may update this policy when our data practices, features or legal obligations change. Material changes will be highlighted in the app and the "Last updated" date will change.

14. Contact

For privacy, account-deletion or child-safety questions, email atlasthoughthelp@gmail.com.