Your moments deserve care.

1. Who operates Pathly

Pathly is operated by Omar Alkhalifah, an individual developer, under the public brand Pathly. Privacy questions may be sent to support.pathly@gmail.com.

2. Information Pathly processes

Account and profile

Email address, email-confirmation state, authentication identifiers, username, display name, optional bio, profile avatar, optional cover image, and public/private account choice. Password credentials are handled by Supabase Auth; Pathly does not store plaintext passwords.

Social content

Moments and their text, photo, video, music, status, or place information; Stories; comments and replies; reactions; friendships and requests; Story views; visibility choices; timestamps; and Activity records.

Private conversations

Conversation participants, message text, images, voice notes, voice-note duration and waveform metadata, timestamps, and read state.

Security and device information

App-generated installation identifiers, a secret-derived server hash, device/session approval state, platform label, security-attempt records, and optional authenticator-app MFA metadata. Biometric templates remain with the operating system and are not received by Pathly.

Local preferences

Language, notification preferences, UI sound and haptic choices, welcome state, optional App Lock setting, safe media caches, drafts, and private Adhkar progress may be stored on the device.

Check-ins

If a user explicitly creates a Place check-in, Pathly processes the place name, chosen visibility, and expiry. The current client does not request background location, store precise coordinates or distance, or track movement history.

Technical information

Supabase, Expo/EAS, Apple, Cloudflare, and network infrastructure may process limited operational information such as request metadata, error logs, IP address, device or browser information, and security events as needed to operate and protect their services.

3. How information is used

• Create and secure accounts, confirm email, recover access, and enforce one active device.
• Provide profiles, friendships, Moments, Stories, reactions, comments, messages, media, and check-ins according to the user’s visibility choices.
• Deliver Activity events and maintain message or Story read state.
• Detect abuse, troubleshoot failures, protect private data, and maintain service reliability.
• Respond to support, safety, privacy, and beta-feedback requests.

Pathly does not currently include third-party advertising SDKs or sell personal information.

4. Visibility and sharing

Information is shown to other Pathly users only through the product’s profile, friendship, Moment, Story, message, and check-in visibility rules. Private messages and private media are intended only for authorized participants. A user’s explicit sharing choice can make some profile or Moment information available more broadly inside Pathly.

Pathly uses service providers to operate the beta. Supabase processes authentication, database records, private media, Edge Functions, and Realtime events. Expo/EAS supports app building and delivery, Apple distributes TestFlight builds and provides operating-system services, and Cloudflare hosts this public release website and its security infrastructure. These providers process information under their own terms and policies.

Information may also be disclosed when reasonably necessary to comply with law, protect users, investigate abuse, or defend the service and its rights.

5. Storage, security, and retention

Pathly uses access controls, row-level security, private storage buckets, signed media access, secure device storage, and a device/session guard. No internet service can guarantee absolute security.

Account information and user content may be retained while the account is active and as needed to operate, secure, and troubleshoot the beta. Stories expire from normal viewing after their configured 24-hour period. Service-provider logs, backups, and deletion queues may persist for limited periods under provider operational policies. Pathly does not promise a fixed retention period where the current implementation does not enforce one.

6. Account deletion and user choices

Users can change available profile, account-privacy, Moment, Story, and check-in visibility settings in the app. The in-app Delete Account flow requires security checks and initiates deletion of associated Pathly account data and private media before the authentication account is removed. Some limited records may remain temporarily in provider backups, security logs, or where retention is legally required.

To request access, correction, deletion assistance, or ask a privacy question, contact support.pathly@gmail.com. Pathly may need to verify account ownership before acting on a request.

7. International processing and changes

Infrastructure providers may process information in countries other than the user’s country. Their safeguards and locations depend on the services and regions used by Pathly.

This policy may be updated as the beta changes. Material updates will be reflected on this page with a revised date.