Privacy Policy

1. What We Collect

• Account information: your email address, and (once available) authentication details for signing in.
• Profile information: name, city/state, how you're connected to BRCA, an about section, interests, and a profile photo, all optional except what's needed to create a profile.
• Content you post: posts, replies, and any photos you upload.
• Usage information: basic technical logs (like IP address and browser type) needed to operate and secure the Service.

We do not ask for or collect Social Security numbers, insurance information, or medical records.

2. How We Handle BRCA Status

Your BRCA connection status is hidden by default. It's only visible to other members if you explicitly turn on "Show this on my profile" in your settings. We enforce this with database-level access controls (row-level security), not just a setting in the interface, so the restriction holds even if there's a bug elsewhere in the app.

3. How We Use Your Information

We use your information to operate the Service: creating and displaying your profile and posts to other members, sending you account-related emails, responding to support requests, and keeping the community safe, including reviewing reports. We do not sell your information, and we do not use it for advertising.

4. Third-Party Service Providers

We use a small number of infrastructure providers to run BRCA Bros:

• Supabase for authentication, our database, and photo storage.
• Resend for transactional emails, like signup confirmations.
• Vercel for hosting.

These providers process data on our behalf and are bound by their own privacy and security commitments. We do not use third-party analytics or advertising trackers anywhere on pages that require login, and BRCA status or post content is never sent to any analytics tool.

5. Photos

Photos you upload are stripped of location and other EXIF metadata and resized automatically when you upload them.

6. Data Retention

We keep your information for as long as your account is active. If you delete your account, we delete your profile, posts, replies, and photos, except where we're required to retain limited records by law.

7. Your Rights

You can download a copy of your data and delete your account at any time from your account settings. Deleting your account removes your profile, posts, replies, and photos from the Service.

8. Children's Privacy

BRCA Bros is for adults 18 and older. We don't knowingly collect information from anyone under 18. If we learn an account belongs to someone under 18, we'll close it.

9. Security

We use industry-standard measures, including encryption in transit, to protect your information. No online service can guarantee perfect security, so please use a strong, unique password.

10. Changes to This Policy

If we make material changes to this policy, we'll post the update here with a new "Last updated" date.

11. Contact

Questions about your data? Reach us at hello@brcabros.com.