Privacy Policy
Last updated: July 5, 2026
lowkey is built on a simple principle: your data is yours. We collect only what we need to run the service, we never sell it, and we never use it to show you ads. This policy explains exactly what we collect, why, and what we do with it.
1. What We Collect
When you create an account, we collect:
- Your email address (used for account authentication and transactional emails)
- Your display name, date of birth, and profile information you choose to share
- Photos you upload to your profile
- Messages you send to other users
- Your approximate location (used to show nearby users — we use your device's GPS only while the app is in use and do not store your location history)
During beta, phone numbers are not collected. When phone verification launches, your phone number is used once to verify your identity and then permanently deleted. We do not store phone numbers.
2. What We Do Not Collect
- We do not store your location history
- We do not collect your HIV status or any health information beyond what you voluntarily add to your profile
- We do not use tracking pixels, third-party ad networks, or behavioral analytics tools
- We do not store your phone number after verification
3. How We Use Your Information
We use the information we collect to:
- Operate and improve the lowkey platform
- Show your profile to nearby users based on your location
- Deliver messages between users
- Send transactional emails (account confirmation, password reset, subscription receipts)
- Enforce our Community Guidelines and Terms of Service
4. We Never Sell Your Data
lowkey has no advertising model. We do not sell, rent, share, or license your personal information to any third party for marketing or advertising purposes — ever. Our only source of revenue is subscriptions.
5. Third-Party Services
We use a small number of third-party services to operate lowkey:
- Supabase — database and authentication
- Resend — transactional email delivery
- Stripe — payment processing (we never see or store your full card number)
Each of these services has its own privacy policy. We share only the minimum data necessary for each service to function.
6. Data Retention
Your data is retained as long as your account is active. If your account is deleted — by you or due to inactivity after your trial or subscription expires — your profile, photos, and messages are permanently deleted within 7 days.
7. Your Rights
You can delete your account at any time from your profile settings. This permanently removes all your data from our servers. If you have questions about your data or want to request a copy, email us at hello@lowkeytap.com.
8. Security
All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. We take reasonable technical and organizational measures to protect your information.
9. Changes to This Policy
If we make material changes to this policy, we'll notify you by email before the changes take effect. Continued use of lowkey after that date constitutes acceptance of the updated policy.
10. California Residents — CCPA Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you specific rights regarding your personal information.
- Right to know. You have the right to request that we disclose what personal information we collect, use, and share about you.
- Right to access. You have the right to request a copy of the personal information we have collected about you.
- Right to delete. You have the right to request that we delete your personal information. You can do this at any time by deleting your account from your profile settings.
- Right to opt-out of sale. We do not sell your personal information to third parties. Because we do not sell personal information, there is no opt-out necessary — but you have this right and we honor it.
- Right to non-discrimination. We will not discriminate against you for exercising any of your CCPA rights.
To exercise your right to know or access, email us at hello@lowkeytap.com with the subject line "CCPA Request." We will respond within 45 days as required by law.
11. Contact
Questions about this policy? Email us at hello@lowkeytap.com. We read every email.