Privacy Policy

We collect only what the service needs to work:

• Account information — your email address and password (passwords are stored only as a salted hash; we never see them), and the display name, profile photo, bio, and social links you choose to add.
• Content you create — posts, comments, likes, images and files you upload, and your progress through classroom material.
• Membership information — which communities you belong to and your role in each.
• Notification data — if you enable push notifications, a device push token so we can deliver them. You can turn this off at any time.
• Technical data — a session cookie to keep you signed in, and a local setting for your light/dark theme preference. We do not use advertising or third-party tracking cookies.

We do not sell your personal data, and we do not use it for advertising.

• To create and secure your account and sign you in.
• To operate the communities — show your posts and profile to the other members of the communities you belong to.
• To send you notifications you have opted into, and essential account emails (for example, password resets).
• To keep the service secure and to prevent abuse.

Your profile and the content you post are visible to the other members of your community. Posts a community chooses to feature publicly may also appear on our public homepage; you control whether your own posts are shared publicly.

We use a small number of trusted providers to run the service. They process data only to provide their service to us:

• Supabase — database, authentication, and file storage (hosted in the Southeast Asia / Singapore region).
• Vercel — application hosting and delivery.
• Bunny Stream — hosting and streaming of classroom videos.
• Resend — delivery of account emails.
• Apple and Google push services — delivery of push notifications, if you enable them.

We may also disclose information if required by law or to protect the rights and safety of our users.

We keep your information for as long as your account is active. You can delete your account at any time from your profile screen. When you do:

• Your profile is anonymised (your name, photo, bio and links are removed) so past discussions still read correctly, and your account, memberships, notifications, and uploaded files are deleted.
• Your posts and comments are kept but shown as from a deleted user, so other members’ conversations remain intact.
• Your login is removed and your email is freed.

You can access and update your profile information at any time from your profile screen, and delete your account as described above. Depending on where you live, you may also have rights under applicable data protection law (including Malaysia’s Personal Data Protection Act) to request access to, correction of, or deletion of your personal data. To make a request, contact us at the address below.

The service is intended for adults and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, contact us and we will remove it.

Access to community content is restricted to that community’s members, enforced at the database level. Passwords are stored only as salted hashes, and traffic is encrypted in transit. No system is perfectly secure, but we take reasonable measures to protect your data.

We may update this policy from time to time. When we do, we will change the effective date above, and for material changes we will provide notice within the app.

Questions about this policy or your data? Contact The Tree Solutions at support@theprophetsystem.com.