{"id":3,"date":"2026-05-06T01:02:46","date_gmt":"2026-05-06T01:02:46","guid":{"rendered":"https:\/\/theysayapp.org\/?page_id=3"},"modified":"2026-06-28T04:56:40","modified_gmt":"2026-06-28T04:56:40","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/theysayapp.org\/?page_id=3","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TheySay LLC<br>Website Privacy Policy<br>theysayapp.org<br>Effective Date: April, 2026<br>Last Updated: June 27, 2026<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br>TheySay LLC (&#8220;TheySay,&#8221; &#8220;we,&#8221; &#8220;us,&#8221; or &#8220;our&#8221;), a Colorado limited liability company, operates the TheySay mobile application (&#8220;App&#8221;) and related services (collectively, the &#8220;Service&#8221;). This Privacy Policy explains what information we collect, how we use it, how we share it, how long we keep it, and the choices and rights you have.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">By creating an account or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, do not use the Service.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Our Privacy Philosophy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">TheySay is built around a single promise:&nbsp;<strong>the people decide, anonymously.<\/strong>&nbsp;Minimal data collection is not a feature we added \u2014 it is the foundation of how the Service is designed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We do not ask for your email address, phone number, real name, or any third-party login. We do not track your location, read your contacts, access your photos, or follow your activity outside the App. We do not run third-party advertising or analytics trackers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Most importantly:&nbsp;<strong>the votes you cast are not linked to your identity, and they cannot be \u2014 not by us, not by anyone with access to our database, and not in response to a government or legal demand.<\/strong>&nbsp;Section 4 explains exactly how this works and why it is true at the structural level rather than as a matter of policy.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">2. Information We Collect<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We collect only the following information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Information you provide when you create an account:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Username.<\/strong>\u00a0A self-selected display name shown on the questions you post. It is not your real name, and we do not ask for your real name.<\/li>\n\n\n\n<li><strong>PIN.<\/strong>\u00a0A 4-digit code you choose to access your account. Your PIN is cryptographically hashed (using bcrypt) before it is stored. We never store your PIN in readable form and we cannot read, recover, or reset it.<\/li>\n\n\n\n<li><strong>Age confirmation.<\/strong>\u00a0At signup you confirm your date of birth solely to verify that you are 18 or older.\u00a0Your date of birth is used only to perform this age check on your device at that moment. It is\u00a0<strong>not<\/strong>\u00a0stored, transmitted to our servers, or retained \u2014 once your age is confirmed, the date of birth is discarded.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Information created as you use the Service:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Questions (debates) you create.<\/strong>\u00a0The text of the questions you post, the answer options, and the category you choose.<\/li>\n\n\n\n<li><strong>Votes you cast.<\/strong>\u00a0Recorded anonymously and stored in a way that is not linked to your account. See Section 4.<\/li>\n\n\n\n<li><strong>Flags you submit.<\/strong>\u00a0If you flag a question as inappropriate, the flag is recorded anonymously and is not linked to your account. See Section 4.<\/li>\n\n\n\n<li><strong>Feedback you send us.<\/strong>\u00a0Messages you submit through the in-App feedback feature. Unlike votes and flags, feedback is intentionally tied to your account so that we can reply to you.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Information collected automatically:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Device account-uniqueness identifier.<\/strong>\u00a0When you first install the App, the App generates a random identifier and stores it on your device. We store only a one-way cryptographic hash of this identifier on your account record. We use it for one purpose: to enforce our one-account-per-device policy and make mass fake-account creation harder. It is a random value generated by the App \u2014 it is\u00a0<strong>not<\/strong>\u00a0derived from your device hardware, advertising identifiers, or any cross-app tracking technology, and it is not &#8220;device fingerprinting.&#8221; See Section 4 for why this identifier cannot be used to trace your votes.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">That is the complete list. We do not collect anything else.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">3. Information We Do&nbsp;<strong>Not<\/strong>&nbsp;Collect<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To be unambiguous, TheySay does&nbsp;<strong>not<\/strong>&nbsp;collect:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Email addresses<\/li>\n\n\n\n<li>Phone numbers<\/li>\n\n\n\n<li>Real names or legal names<\/li>\n\n\n\n<li>Physical addresses or geolocation data<\/li>\n\n\n\n<li>Contact lists or address books<\/li>\n\n\n\n<li>Photos, videos, camera, or microphone data<\/li>\n\n\n\n<li>Browsing or app-usage activity outside TheySay<\/li>\n\n\n\n<li>Advertising identifiers or cross-app tracking data<\/li>\n\n\n\n<li>Third-party analytics (we do not run usage-analytics SDKs)<\/li>\n\n\n\n<li>Financial or payment information<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">4. How Anonymous Voting Works (The Core Privacy Guarantee)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This section describes the central privacy property of the Service in plain language. It is the technical basis for our promise that your votes cannot be linked to you.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Two separate, unconnectable identifiers.<\/strong>&nbsp;When you install the App, it creates one random device identifier. From that single value, the App derives two&nbsp;<em>different<\/em>&nbsp;one-way hashes that serve two different purposes and that cannot be reconciled with each other:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>An\u00a0<strong>account-uniqueness hash<\/strong>\u00a0is stored on your account record. It lets us detect that &#8220;a device already has an account here&#8221; so we can enforce one account per device. It is never attached to any vote.<\/li>\n\n\n\n<li>A separate\u00a0<strong>voting hash<\/strong>, computed differently for each individual question, is attached to a vote. It lets the system prevent the same device from voting twice on the same question. It is never stored on your account record and never contains your username or account identifier.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Because these two hashes are produced by different one-way calculations, there is no mathematical way to start from a vote and arrive at the account that cast it, or vice versa. Reversing either hash would require defeating the underlying cryptography, which is not feasible.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>What this means in practice:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A vote record contains the question it was cast on, the option chosen, an anonymous voting hash, and a timestamp.\u00a0<strong>It contains no username, no account identifier, and nothing that points back to you.<\/strong><\/li>\n\n\n\n<li>Even with complete read access to our entire database, it is not possible to determine how any individual person voted on any individual question. The link simply does not exist in the data.<\/li>\n\n\n\n<li>This is true for us as well.\u00a0<strong>TheySay itself cannot look up how you voted.<\/strong>\u00a0It is not that we have a policy against doing so \u2014 it is that the information needed to do so is not stored anywhere.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The consequence for legal demands.<\/strong>&nbsp;Because we do not possess a link between accounts and votes, we&nbsp;<strong>cannot produce individual voting records in response to a subpoena, court order, or other legal demand, regardless of who asks or why.<\/strong>&nbsp;We cannot disclose what we do not have. See Section 7.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Flags work the same way.<\/strong>&nbsp;When you flag a question, the flag is recorded with an anonymous hash rather than your identity. We can see that a question received a number of flags, but we cannot see which users flagged it. Flagging is a private civic action by design.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The honest limitations.<\/strong>&nbsp;No system is perfect, and we describe the edges plainly:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Someone with physical access to your unlocked device could, in principle, use it to act as you within the App, as with any app on an unlocked phone.<\/li>\n\n\n\n<li>A factory reset of your device clears the device identifier, which means a determined person who fully wipes their device could create an additional account. We accept this trade-off because the alternative \u2014 hardware-level device fingerprinting \u2014 would be more invasive to every honest user.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">5. How We Use Information<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We use the limited information we collect to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Operate the Service \u2014 display questions, record anonymous votes, show aggregate results, and run features like the daily featured debate;<\/li>\n\n\n\n<li>Authenticate your account when you sign in with your username and PIN;<\/li>\n\n\n\n<li>Enforce one account per device and prevent double-voting and abuse;<\/li>\n\n\n\n<li>Operate community moderation \u2014 review flagged content and take action on questions or accounts that violate our Terms of Service;<\/li>\n\n\n\n<li>Respond to feedback you send us;<\/li>\n\n\n\n<li>Maintain the security and integrity of the Service; and<\/li>\n\n\n\n<li>Comply with our legal obligations.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We do&nbsp;<strong>not<\/strong>&nbsp;use your information to build advertising profiles, and we do not send your content to any third-party artificial-intelligence service. (We may use AI tools internally and offline to help&nbsp;<em>draft<\/em>&nbsp;seed questions that we review before posting; no user-submitted content is sent to an AI service to do this.)<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">6. Aggregate Results<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Service displays aggregate vote counts and results for each question \u2014 for example, the percentage of people who chose each option. These aggregate results reflect the collective input of participants and do not identify any individual. Because votes are anonymous and unlinkable (Section 4), aggregate results cannot be decomposed back into individual choices.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Reserved use of aggregated and anonymized data.<\/strong>&nbsp;TheySay may compile aggregated and anonymized data derived from activity on the Service \u2014 such as overall voting patterns, trends across questions, and category-level results \u2014 and&nbsp;<strong>may use, share, license, or sell that aggregated and anonymized data<\/strong>&nbsp;for research, commercial, or other purposes. Aggregated and anonymized data does not identify any individual user and, because of the anonymous and unlinkable design described in Section 4, cannot be used to reconstruct how any individual voted. By using the Service, you acknowledge and consent to this use of aggregated and anonymized data. This possibility is disclosed here, and in our Terms of Service, so you can make an informed decision before creating an account. There is no separate opt-out for the collection and use of aggregated and anonymized data while you use the Service.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">7. How We Share Information<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>We do not sell your personal information,<\/strong>&nbsp;and we do not share it for advertising. We share information only in these limited situations:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Infrastructure provider.<\/strong>\u00a0The Service runs on Google Firebase (Google Cloud Platform), which provides our database, authentication, and server functions. Google processes and stores data on our behalf as our infrastructure provider and is bound by its own terms and security commitments. Google Firebase is our\u00a0<strong>only<\/strong>\u00a0third-party data processor in this version of the Service.<\/li>\n\n\n\n<li><strong>Legal requirements.<\/strong>\u00a0We may disclose information if we are required to by law, regulation, or valid legal process. However, as explained in Section 4,\u00a0<strong>we cannot produce individual voting or flagging records, because the data linking those actions to a person does not exist.<\/strong>\u00a0What we hold about an account is limited to a username, a hashed PIN, a hashed device identifier, account status, and account timestamps.<\/li>\n\n\n\n<li><strong>Safety and enforcement.<\/strong>\u00a0We may use or disclose information where we believe in good faith it is necessary to protect the safety of a person, investigate fraud or abuse, or enforce our Terms of Service.<\/li>\n\n\n\n<li><strong>Business transfer.<\/strong>\u00a0If TheySay is involved in a merger, acquisition, or sale of assets, account information may transfer as part of that transaction. We will post notice of any such change in the App and on our website.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">8. Data Storage and Security<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Your data is stored on Google Firebase infrastructure in the United States. We use reasonable technical and organizational safeguards, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Hashing of PINs<\/strong>, so they cannot be read in stored form;<\/li>\n\n\n\n<li><strong>Encrypted transmission<\/strong>\u00a0of data between the App and our servers;<\/li>\n\n\n\n<li><strong>Server-enforced access rules<\/strong>, so that sensitive collections (such as the votes collection) cannot be read by client devices at all and are reachable only through controlled server functions; and<\/li>\n\n\n\n<li><strong>The structural separation described in Section 4<\/strong>, which means the most sensitive linkage \u2014 who voted how \u2014 is not present in our systems to begin with.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">No method of storage or transmission is completely secure, and we cannot guarantee absolute security.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">9. Data Retention<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Active accounts.<\/strong>\u00a0We retain your account information for as long as your account exists.<\/li>\n\n\n\n<li><strong>Deleted accounts.<\/strong>\u00a0When you delete your account (Section 10), your private account record and your public profile are permanently deleted, and the questions you posted are anonymized \u2014 the author is changed to &#8220;[deleted]&#8221; and your username is removed from them. The questions themselves, and the anonymous votes others cast on them, remain on the Service so that other people&#8217;s participation is preserved. Because votes were never linked to you, there is nothing in a vote to remove. Deleting your account also frees your device so it can register a new account.<\/li>\n\n\n\n<li><strong>Feedback.<\/strong>\u00a0Messages you send through the feedback feature, including the account identifier needed to reply to you, are retained for our records even after an account is deleted.\u00a0<\/li>\n\n\n\n<li><strong>Moderation records.<\/strong>\u00a0Records related to flagged content and moderation actions are retained for the integrity and safety of the Service.\u00a0<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">10. Your Rights and Choices<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Delete your account.<\/strong>\u00a0You can permanently delete your account at any time from the App&#8217;s settings. The effects are described in Section 9. Deletion is immediate and irreversible.<\/li>\n\n\n\n<li><strong>No password\/PIN recovery.<\/strong>\u00a0For your security, your PIN is stored only as a hash and cannot be recovered or reset by us. If you forget your PIN and become locked out, you will need to create a new account. (See the Terms of Service for the lockout details.)<\/li>\n\n\n\n<li><strong>Notification settings.<\/strong>\u00a0You can turn notification categories on or off in the App&#8217;s settings.<\/li>\n\n\n\n<li><strong>Privacy questions and requests.<\/strong>\u00a0Contact us at\u00a0<strong><a href=\"mailto:theysayllc@theysayapp.org\">theysayllc@theysayapp.org<\/a><\/strong>\u00a0(see Section 14).<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">11. Children&#8217;s Privacy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Service is intended for adults.&nbsp;<strong>You must be 18 or older to use TheySay.<\/strong>&nbsp;We do not knowingly collect information from anyone under 18. If we learn that a user is under 18, we will delete the account and associated account data. If you believe someone under 18 is using the Service, please contact us at&nbsp;<a href=\"mailto:theysayllc@theysayapp.org\">theysayllc@theysayapp.org<\/a>&nbsp;or use the in-App reporting tools.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Service complies with the Children&#8217;s Online Privacy Protection Act (COPPA), which governs collection of information from children under 13; TheySay does not knowingly collect information from anyone under 18.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">12. State Privacy Rights (including California)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Depending on where you live, you may have rights to access, correct, or delete personal information, or to opt out of its sale or sharing. Because TheySay collects so little personal information, does not sell personal information, and does not share it for advertising, the practical effect of these rights is limited. The most complete way to exercise them is to delete your account in the App, which removes your account records and anonymizes your authored content.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">13. International Users<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Service is operated from the United States and your information is stored in the United States. If you use the Service from outside the United States, you understand that your information will be processed in the United States.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">14. Contact<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If you have questions about this Privacy Policy or your information, contact:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>TheySay LLC<\/strong>&nbsp;Email:&nbsp;<strong><a href=\"mailto:theysayllc@theysayapp.org\">theysayllc@theysayapp.org<\/a><\/strong>&nbsp;Web: theysayapp.org<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To report abuse or harmful content, use the in-App reporting tools or email&nbsp;<strong><a href=\"mailto:reportabuse@theysayapp.org\">reportabuse@theysayapp.org<\/a><\/strong>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">15. Changes to This Policy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We may update this Privacy Policy from time to time. When we do, we will revise the &#8220;Last Updated&#8221; date above and post the updated policy in the App and at theysayapp.org\/privacy. Significant changes will be communicated in the App. Your continued use of the Service after an update means you accept the revised policy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TheySay LLC<br>Colorado, USA<br>Email: theysayllc@theysayapp.org<br>Website: theysayapp.org<\/p>\n","protected":false},"excerpt":{"rendered":"<p>TheySay LLCWebsite Privacy Policytheysayapp.orgEffective Date: April, 2026Last Updated: June 27, 2026 TheySay LLC (&#8220;TheySay,&#8221; &#8220;we,&#8221; &#8220;us,&#8221; or &#8220;our&#8221;), a Colorado limited liability company, operates the TheySay mobile application (&#8220;App&#8221;) and related services (collectively, the &#8220;Service&#8221;). This Privacy Policy explains what information we collect, how we use it, how we share it, how long we keep [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/theysayapp.org\/index.php?rest_route=\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/theysayapp.org\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/theysayapp.org\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/theysayapp.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/theysayapp.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3"}],"version-history":[{"count":4,"href":"https:\/\/theysayapp.org\/index.php?rest_route=\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":90,"href":"https:\/\/theysayapp.org\/index.php?rest_route=\/wp\/v2\/pages\/3\/revisions\/90"}],"wp:attachment":[{"href":"https:\/\/theysayapp.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}