Privacy Policy

What we collect

• Your email address, from Google or the email sign-in link, so you can sign in. It’s never shown to anyone.
• Your birth month and year, to apply Harbor’s age rules.
• The experiences you choose to share, and how you heard about Harbor.
• The messages you send on Harbor.
• Safety records: messages that were flagged, reports, and the text of any message that was blocked because it contained contact details.
• If you apply to be a mentor: your first name, birth month and year, and your answers on the application.

We don’t collect students’ names, photos, phone numbers or location.

How we use it

Only to run Harbor: signing you in, keeping chats safe, applying the age rules, and emailing you when you have a new message. Those emails never include the message itself. We count sign-ups by where people heard about Harbor so we know what’s working. There are no ads, and we never sell your information.

Who can see it

• The person you’re chatting with sees your messages, your student number, your age and the experiences you shared.
• Harbor’s safety team (the founder and a safety partner) can read a chat if a message was flagged or the chat was reported.
• The services Harbor runs on store data for us: Supabase (database and sign-in), Vercel (hosting), Resend (email) and Google (only if you sign in with Google).

Deleting your account

You can ask us to delete your account at any time, and we’ll delete your account and messages within 30 days. Accounts of anyone under 14 are deleted straight away.

Changes

If we change this policy, we’ll update this page and the date below.