{"id":3,"date":"2026-05-06T01:02:46","date_gmt":"2026-05-06T01:02:46","guid":{"rendered":"https:\/\/theysayapp.org\/?page_id=3"},"modified":"2026-08-08T18:40:24","modified_gmt":"2026-08-08T18:40:24","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/theysayapp.org\/?page_id=3","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TheySay LLC<br>Website Privacy Policy<br>theysayapp.org<br>Effective Date: April, 2026<br>Last Updated: August 08, 2026<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br>TheySay LLC (&#8220;TheySay,&#8221; &#8220;we,&#8221; &#8220;us,&#8221; or &#8220;our&#8221;), a Colorado limited liability company, operates the TheySay mobile application (&#8220;App&#8221;) and related services (collectively, the &#8220;Service&#8221;). This Privacy Policy explains what information we collect, how we use it, how we share it, how long we keep it, and the choices and rights you have.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">By creating an account or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, do not use the Service.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Our Privacy Philosophy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">TheySay is built around a single promise:&nbsp;<strong>the people decide, anonymously.<\/strong>&nbsp;Minimal data collection is not a feature we added \u2014 it is the foundation of how the Service is designed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We do not ask for your email address, phone number, real name, or any third-party login. We do not track your location, read your contacts, access your photos, or follow your activity outside the App. We do not run third-party advertising or analytics trackers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Most importantly:&nbsp;<strong>the votes you cast are not linked to your identity, and they cannot be \u2014 not by us, not by anyone with access to our database, and not in response to a government or legal demand.<\/strong>&nbsp;Section 4 explains exactly how this works and why it is true at the structural level rather than as a matter of policy.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">2. Information We Collect<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We collect only the following information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Information you provide when you create an account:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Username.<\/strong>&nbsp;A self-selected display name shown on the questions you post. It is not your real name, and we do not ask for your real name.<\/li>\n\n\n\n<li><strong>PIN.<\/strong>&nbsp;A 4-digit code you choose to access your account. Your PIN is cryptographically hashed (using bcrypt) before it is stored. We never store your PIN in readable form and we cannot read, recover, or reset it.<\/li>\n\n\n\n<li><strong>Age confirmation.<\/strong>&nbsp;At signup you confirm your date of birth solely to verify that you are 18 or older.&nbsp;Your date of birth is used only to perform this age check on your device at that moment. It is&nbsp;<strong>not<\/strong>&nbsp;stored, transmitted to our servers, or retained \u2014 once your age is confirmed, the date of birth is discarded.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Information created as you use the Service:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Questions (debates) you create.<\/strong>&nbsp;The text of the questions you post, the answer options, and the category you choose.<\/li>\n\n\n\n<li><strong>Votes you cast.<\/strong>&nbsp;Recorded anonymously and stored in a way that is not linked to your account. See Section 4.<\/li>\n\n\n\n<li><strong>Flags you submit.<\/strong>&nbsp;If you flag a question as inappropriate, the flag is recorded anonymously and is not linked to your account. See Section 4.<\/li>\n\n\n\n<li><strong>Groups you create or join.<\/strong>\u00a0If you create or join a private group, we store the group&#8217;s name, a randomly generated invite code, and a membership record linking your account to that group and your role in it (creator\/admin or member). Unlike votes and flags, group membership is intentionally tied to your account, because the Service must know which groups you belong to in order to show them to you. Questions you post to a group are visible only to that group&#8217;s members.<\/li>\n\n\n\n<li><strong>Feedback you send us.<\/strong>&nbsp;Messages you submit through the in-App feedback feature. Unlike votes and flags, feedback is intentionally tied to your account so that we can reply to you.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Information collected automatically:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Device account-uniqueness identifier.<\/strong>&nbsp;When you first install the App, the App generates a random identifier and stores it on your device. We store only a one-way cryptographic hash of this identifier on your account record. We use it for one purpose: to enforce our one-account-per-device policy and make mass fake-account creation harder. It is a random value generated by the App \u2014 it is&nbsp;<strong>not<\/strong>&nbsp;derived from your device hardware, advertising identifiers, or any cross-app tracking technology, and it is not &#8220;device fingerprinting.&#8221; See Section 4 for why this identifier cannot be used to trace your votes.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">That is the complete list. We do not collect anything else.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">3. Information We Do&nbsp;<strong>Not<\/strong>&nbsp;Collect<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To be unambiguous, TheySay does&nbsp;<strong>not<\/strong>&nbsp;collect:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Email addresses<\/li>\n\n\n\n<li>Phone numbers<\/li>\n\n\n\n<li>Real names or legal names<\/li>\n\n\n\n<li>Physical addresses or geolocation data<\/li>\n\n\n\n<li>Contact lists or address books<\/li>\n\n\n\n<li>Photos, videos, camera, or microphone data<\/li>\n\n\n\n<li>Browsing or app-usage activity outside TheySay<\/li>\n\n\n\n<li>Advertising identifiers or cross-app tracking data<\/li>\n\n\n\n<li>Third-party analytics (we do not run usage-analytics SDKs)<\/li>\n\n\n\n<li>Financial or payment information<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">4. How Anonymous Voting Works (The Core Privacy Guarantee)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This section describes the central privacy property of the Service in plain language. It is the technical basis for our promise that your votes cannot be linked to you.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Two separate, unconnectable identifiers.<\/strong>&nbsp;When you install the App, it creates one random device identifier. From that single value, the App derives two&nbsp;<em>different<\/em>&nbsp;one-way hashes that serve two different purposes and that cannot be reconciled with each other:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>An&nbsp;<strong>account-uniqueness hash<\/strong>&nbsp;is stored on your account record. It lets us detect that &#8220;a device already has an account here&#8221; so we can enforce one account per device. It is never attached to any vote.<\/li>\n\n\n\n<li>A separate&nbsp;<strong>voting hash<\/strong>, computed differently for each individual question, is attached to a vote. It lets the system prevent the same device from voting twice on the same question. It is never stored on your account record and never contains your username or account identifier.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Because these two hashes are produced by different one-way calculations, there is no mathematical way to start from a vote and arrive at the account that cast it, or vice versa. Reversing either hash would require defeating the underlying cryptography, which is not feasible.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>What this means in practice:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A vote record contains the question it was cast on, the option chosen, an anonymous voting hash, and a timestamp.&nbsp;<strong>It contains no username, no account identifier, and nothing that points back to you.<\/strong><\/li>\n\n\n\n<li>Even with complete read access to our entire database, it is not possible to determine how any individual person voted on any individual question. The link simply does not exist in the data.<\/li>\n\n\n\n<li>This is true for us as well.&nbsp;<strong>TheySay itself cannot look up how you voted.<\/strong>&nbsp;It is not that we have a policy against doing so \u2014 it is that the information needed to do so is not stored anywhere.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The consequence for legal demands.<\/strong>&nbsp;Because we do not possess a link between accounts and votes, we&nbsp;<strong>cannot produce individual voting records in response to a subpoena, court order, or other legal demand, regardless of who asks or why.<\/strong>&nbsp;We cannot disclose what we do not have. See Section 7.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Flags work the same way.<\/strong>&nbsp;When you flag a question, the flag is recorded with an anonymous hash rather than your identity. We can see that a question received a number of flags, but we cannot see which users flagged it. Flagging is a private civic action by design.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The honest limitations.<\/strong>&nbsp;No system is perfect, and we describe the edges plainly:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Someone with physical access to your unlocked device could, in principle, use it to act as you within the App, as with any app on an unlocked phone.<\/li>\n\n\n\n<li>A factory reset of your device clears the device identifier, which means a determined person who fully wipes their device could create an additional account. We accept this trade-off because the alternative \u2014 hardware-level device fingerprinting \u2014 would be more invasive to every honest user.<\/li>\n\n\n\n<li><em>Small groups can expose votes through deduction.<\/em>\u00a0Your anonymity comes from a vote never being stored next to your identity \u2014 and that remains true everywhere on the Service, including in groups. But in a small private group, where members know who belongs, the\u00a0<em>aggregate<\/em>\u00a0result can sometimes reveal individual votes through simple arithmetic. A unanimous or near-unanimous outcome, or knowing your own vote in a group of only a few people, can let members deduce how others voted. This is a property of small numbers, not a flaw in our data design: the link is still absent from our systems, but people can reconstruct it socially. To reduce this, debates in very small groups (three to four members) keep all results hidden until every member has voted, and never show a running vote-by-vote tally. Even so, we cannot promise that votes cast in a small group stay private from the other members, and you should treat a vote in a small group as potentially visible to them.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">5. How We Use Information<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We use the limited information we collect to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Operate the Service \u2014 display questions, record anonymous votes, show aggregate results, and run features like the daily featured debate;<\/li>\n\n\n\n<li>Authenticate your account when you sign in with your username and PIN;<\/li>\n\n\n\n<li>Enforce one account per device and prevent double-voting and abuse;<\/li>\n\n\n\n<li>Operate community moderation \u2014 review flagged content and take action on questions or accounts that violate our Terms of Service;<\/li>\n\n\n\n<li>Respond to feedback you send us;<\/li>\n\n\n\n<li>Maintain the security and integrity of the Service; and<\/li>\n\n\n\n<li>Comply with our legal obligations.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We do&nbsp;<strong>not<\/strong>&nbsp;use your information to build advertising profiles, and we do not send your content to any third-party artificial-intelligence service. (We may use AI tools internally and offline to help&nbsp;<em>draft<\/em>&nbsp;seed questions that we review before posting; no user-submitted content is sent to an AI service to do this.)<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">6. Aggregate Results<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Service displays aggregate vote counts and results for each question \u2014 for example, the percentage of people who chose each option. These aggregate results reflect the collective input of participants and do not identify any individual. Because votes are anonymous and unlinkable (Section 4), aggregate results on the public feed cannot be decomposed back into individual choices \u2014 this is a property of large numbers, where no single person&#8217;s vote can be isolated from the total. In small private groups this protection is weaker; see the discussion of small-group deduction in Section 4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Reserved use of aggregated and anonymized data.<\/strong>\u00a0TheySay may compile aggregated and anonymized data derived from activity on the Service \u2014 such as overall voting patterns, trends across questions, and category-level results \u2014 and\u00a0<strong>may use, share, license, or sell that aggregated and anonymized data<\/strong>\u00a0for research, commercial, or other purposes. Aggregated and anonymized data does not identify any individual user and, because of the anonymous and unlinkable design described in Section 4, cannot be used to reconstruct how any individual voted on the public Service. By using the Service, you acknowledge and consent to this use of aggregated and anonymized data. This possibility is disclosed here, and in our Terms of Service, so you can make an informed decision before creating an account. There is no separate opt-out for the collection and use of aggregated and anonymized data while you use the Service.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">7. How We Share Information<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>We do not sell your personal information,<\/strong>&nbsp;and we do not share it for advertising. We share information only in these limited situations:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Infrastructure provider.<\/strong>&nbsp;The Service runs on Google Firebase (Google Cloud Platform), which provides our database, authentication, and server functions. Google processes and stores data on our behalf as our infrastructure provider and is bound by its own terms and security commitments. Google Firebase is our&nbsp;<strong>only<\/strong>&nbsp;third-party data processor in this version of the Service.<\/li>\n\n\n\n<li><strong>Legal requirements.<\/strong>&nbsp;We may disclose information if we are required to by law, regulation, or valid legal process. However, as explained in Section 4,&nbsp;<strong>we cannot produce individual voting or flagging records, because the data linking those actions to a person does not exist.<\/strong>&nbsp;What we hold about an account is limited to a username, a hashed PIN, a hashed device identifier, account status, and account timestamps.<\/li>\n\n\n\n<li><strong>Safety and enforcement.<\/strong>&nbsp;We may use or disclose information where we believe in good faith it is necessary to protect the safety of a person, investigate fraud or abuse, or enforce our Terms of Service.<\/li>\n\n\n\n<li><strong>Business transfer.<\/strong>&nbsp;If TheySay is involved in a merger, acquisition, or sale of assets, account information may transfer as part of that transaction. We will post notice of any such change in the App and on our website.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">8. Data Storage and Security<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Your data is stored on Google Firebase infrastructure in the United States. We use reasonable technical and organizational safeguards, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Hashing of PINs<\/strong>, so they cannot be read in stored form;<\/li>\n\n\n\n<li><strong>Encrypted transmission<\/strong>&nbsp;of data between the App and our servers;<\/li>\n\n\n\n<li><strong>Server-enforced access rules<\/strong>, so that sensitive collections (such as the votes collection) cannot be read by client devices at all and are reachable only through controlled server functions; and<\/li>\n\n\n\n<li><strong>The structural separation described in Section 4<\/strong>, which means the most sensitive linkage \u2014 who voted how \u2014 is not present in our systems to begin with.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">No method of storage or transmission is completely secure, and we cannot guarantee absolute security.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">9. Data Retention<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Active accounts.<\/strong>&nbsp;We retain your account information for as long as your account exists.<\/li>\n\n\n\n<li><strong>Deleted accounts.<\/strong>&nbsp;When you delete your account (Section 10), your private account record and your public profile are permanently deleted, and the questions you posted are anonymized \u2014 the author is changed to &#8220;[deleted]&#8221; and your username is removed from them. The questions themselves, and the anonymous votes others cast on them, remain on the Service so that other people&#8217;s participation is preserved. Because votes were never linked to you, there is nothing in a vote to remove. Deleting your account also frees your device so it can register a new account.<\/li>\n\n\n\n<li><strong>Feedback.<\/strong>&nbsp;Messages you send through the feedback feature, including the account identifier needed to reply to you, are retained for our records even after an account is deleted.&nbsp;<\/li>\n\n\n\n<li><strong>Moderation records.<\/strong>&nbsp;Records related to flagged content and moderation actions are retained for the integrity and safety of the Service.&nbsp;<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">10. Your Rights and Choices<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Delete your account.<\/strong>&nbsp;You can permanently delete your account at any time from the App&#8217;s settings. The effects are described in Section 9. Deletion is immediate and irreversible.<\/li>\n\n\n\n<li><strong>No password\/PIN recovery.<\/strong>&nbsp;For your security, your PIN is stored only as a hash and cannot be recovered or reset by us. If you forget your PIN and become locked out, you will need to create a new account. (See the Terms of Service for the lockout details.)<\/li>\n\n\n\n<li><strong>Notification settings.<\/strong>&nbsp;You can turn notification categories on or off in the App&#8217;s settings.<\/li>\n\n\n\n<li><strong>Privacy questions and requests.<\/strong>&nbsp;Contact us at&nbsp;<strong><a href=\"mailto:theysayllc@theysayapp.org\">theysayllc@theysayapp.org<\/a><\/strong>&nbsp;(see Section 14).<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">11. Children&#8217;s Privacy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Service is intended for adults.&nbsp;<strong>You must be 18 or older to use TheySay.<\/strong>&nbsp;We do not knowingly collect information from anyone under 18. If we learn that a user is under 18, we will delete the account and associated account data. If you believe someone under 18 is using the Service, please contact us at&nbsp;<a href=\"mailto:theysayllc@theysayapp.org\">theysayllc@theysayapp.org<\/a>&nbsp;or use the in-App reporting tools.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Service complies with the Children&#8217;s Online Privacy Protection Act (COPPA), which governs collection of information from children under 13; TheySay does not knowingly collect information from anyone under 18.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">12. State Privacy Rights (including California)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Depending on where you live, you may have rights to access, correct, or delete personal information, or to opt out of its sale or sharing. Because TheySay collects so little personal information, does not sell personal information, and does not share it for advertising, the practical effect of these rights is limited. The most complete way to exercise them is to delete your account in the App, which removes your account records and anonymizes your authored content.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">13. International Users<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Service is operated from the United States and your information is stored in the United States. If you use the Service from outside the United States, you understand that your information will be processed in the United States.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">14. Contact<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If you have questions about this Privacy Policy or your information, contact:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>TheySay LLC<\/strong>&nbsp;Email:&nbsp;<strong><a href=\"mailto:theysayllc@theysayapp.org\">theysayllc@theysayapp.org<\/a><\/strong>&nbsp;Web: theysayapp.org<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To report abuse or harmful content, use the in-App reporting tools or email&nbsp;<strong><a href=\"mailto:reportabuse@theysayapp.org\">reportabuse@theysayapp.org<\/a><\/strong>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">15. Changes to This Policy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We may update this Privacy Policy from time to time. When we do, we will revise the &#8220;Last Updated&#8221; date above and post the updated policy in the App and at theysayapp.org\/privacy. Significant changes will be communicated in the App. Your continued use of the Service after an update means you accept the revised policy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TheySay LLC<br>Colorado, USA<br>Email: theysayllc@theysayapp.org<br>Website: theysayapp.org<\/p>\n","protected":false},"excerpt":{"rendered":"<p>TheySay LLCWebsite Privacy Policytheysayapp.orgEffective Date: April, 2026Last Updated: August 08, 2026 TheySay LLC (&#8220;TheySay,&#8221; &#8220;we,&#8221; &#8220;us,&#8221; or &#8220;our&#8221;), a Colorado limited liability company, operates the TheySay mobile application (&#8220;App&#8221;) and related services (collectively, the &#8220;Service&#8221;). This Privacy Policy explains what information we collect, how we use it, how we share it, how long we keep [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/theysayapp.org\/index.php?rest_route=\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/theysayapp.org\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/theysayapp.org\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/theysayapp.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/theysayapp.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3"}],"version-history":[{"count":5,"href":"https:\/\/theysayapp.org\/index.php?rest_route=\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":101,"href":"https:\/\/theysayapp.org\/index.php?rest_route=\/wp\/v2\/pages\/3\/revisions\/101"}],"wp:attachment":[{"href":"https:\/\/theysayapp.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}