Privacy

Privacy policy

Last updated 3 November 2026.

Privacy is part of the Tribe Code. This page says plainly what we collect, why, who can see it and what you can do about it.

What we collect

• Account: email (to sign in and to reach you), a password (stored only as a salted hash).
• Your request to join: name, phone, address, country, city, date of birth, job, monthly income with currency and main source, personality, about you, ambitions, why you want to join, what you want to change, skills, how you heard of us, a profile photo.
• Inside the app: posts, comments, messages, likes, groups, friends, task answers and notes, reports.
• Payments: your invoices and the public transaction hash. We never ask for wallet keys.
• Technical: device type and browser (for "My devices"), rough country, a short-lived hashed IP for abuse protection. No advertising trackers, no selling of data.

Who sees what

• Other members see only your public profile: name, photo, member number, rank and streak, city, about, ambitions, skills and job title, and what you post to the tribe.
• The Chief sees your private details (income, address, phone, email, date of birth and the rest of your request) to accept you and to help you.
• Your Guide sees your public profile and task progress. Your private details only when the Chief grants it for a reason, for a limited time; income is never shown to Guides. You can see every view of your private details in the app (Profile > Privacy > Who viewed my details).
• The founder's assistant tools (software, including an AI assistant used by the founder) may process data when the founder asks, for example to prepare approvals or tasks. Every such action is logged.
• The public web sees only the journal and what you choose to share publicly (a post marked "Share publicly", or a public profile with the fields you pick).

How we protect it

HTTPS everywhere. Private details, task notes and messages are encrypted in our database with keys that are never in the database itself. Sessions are tied to your devices and you can sign any device out. The app stores nothing private on your device for offline use. Photos are re-encoded so that location and camera data are removed. Every access to private details is recorded in a tamper-evident log.

Service providers

Cloudflare (hosting, database, email sending), your browser's push service (Google, Apple, Mozilla or Microsoft: they receive only encrypted notifications that never contain message text), and the public blockchain (payments are public by nature and can be linked to your wallet). A currency-rate service receives no personal data.

How long we keep it

While you are a member. Declined requests: deleted within 30 days. Unconfirmed sign-ups: 7 days. When you delete your account we destroy the key that unlocks your private details, delete your photos, posts and comments, and wipe the messages you sent; we keep only the payment records the law may require, linked to an anonymous id.

Your rights

Download your data (Profile > Privacy > Download my data), correct your profile, cancel, or delete your account in the app at any time. You can also write to privacy@fornoreason.app; we answer within 30 days. Depending on where you live you may have further rights, including a complaint to your data protection authority.

Adults only

The app is for people aged 18 and over. If you believe a minor has joined, write to safety@fornoreason.app.