Maskless Privacy Policy

Maskless requires you to sign in using an available account method, such as Sign in with Apple or email verification. We use a private account identifier and the sign-in information needed to authenticate and recover your account. Depending on the method you choose, this may include an email address or information provided by Apple for authentication. This private sign-in information is not displayed on your public Maskless profile. We also process your chosen username, optional profile information, posts, comments, polls, interactions, messages, reports, blocks, subscription status, and technical diagnostics. Your birth date is sent to the eligibility-checking function to confirm that you are at least 18; the check stores adult-verification status and timing rather than the birth date in your public profile.

Posts and comments may appear with an anonymous or chosen public identity and information you elect to share. Private conversation participants can see messages sent within their conversation. Your recovery email and account identifier are not displayed publicly.

If you turn on approximate distance and grant location permission, Maskless obtains device location and rounds geographic coordinates before using them to support approximate distances and nearby discovery. The app does not show map pins or exact device coordinates. Turning off location stops new location reads; it does not necessarily remove location already attached to older posts.

When you upload photos, they are re-encoded as JPEG to remove embedded metadata such as EXIF GPS information. Public post images and text are accessible to people who can view the post. Public media URLs can also be accessible outside the app to people who obtain the URL. Do not share photos that reveal information you want to keep private.

Maskless uses Supabase for accounts and social data, RevenueCat for purchase entitlements, and Sentry for diagnostics and performance monitoring. Diagnostics are configured to minimize personal information, remove account and request fields from error events, and exclude console breadcrumbs. Session replay is disabled in the current app configuration. These services process information needed to perform their functions. We use access controls and other reasonable safeguards, but cannot promise absolute security.

Reports can include the reason, details you provide, content references and a snapshot of reported material. Maskless may access the relevant content to investigate abuse, enforce safety rules and comply with legal obligations. Reporters' identities are not normally disclosed to the people they report.

You can request account deletion in Settings. Account deletion removes your authentication account and related database records covered by deletion relationships. It does not retrieve copies already captured by other people. Contact support about uploaded files and other stored copies that may require separate cleanup. Certain content in abuse reports, security records, or legally required records may be retained when lawful and necessary. Contact support for deletion questions.

You can change your profile, disable approximate location, block people, report misuse, control whether posts accept private messages, manage subscriptions through the relevant app store, and delete your account.

Contact hello@brittanyapps.com about your information, access, deletion, or privacy concerns. We may revise this policy and will update the effective date. Effective October 9, 2026.