This policy explains what information SocialMax (“we,” “our,” “the app”) collects when you use the app, how we use it, who we share it with, and how you can control it.
Information We Collect
Account information
When you sign up, we collect the email address, password, and username you provide. Your password is never seen or stored by our application code — it is hashed and managed entirely by our authentication provider, Supabase.
Profile information
You may optionally upload a profile picture. Uploaded profile pictures are stored in cloud file storage and served from a public URL — anyone with that URL can view the image, even without an account. Don’t upload an image you want to keep private.
Progress and activity data
To power the app’s core features, we store: your lesson completions and quiz scores, streak/XP/level totals, unlocked badges, and your daily challenge history (including completed, skipped, and re-rolled challenges).
Journal entries
When you write a reflection after a daily challenge, we store the free-text content you write, an optional 1–5 mood rating, and optional “what went well” / “what you’d try differently” notes. This is stored indefinitely as part of your account history unless you request deletion.
AI-generated content and the data sent to power it
SocialMax uses Google’s Gemini API for two features:
- AI practice conversations— the messages you send during a practice conversation are sent to Gemini to generate the other side of the conversation. This chat history is not saved to our database; it lives only in your browser for the duration of the session and is discarded when you leave or refresh the page.
- Journal feedback— if you request AI feedback on a journal entry, the text of that entry is sent to Gemini to generate a response. Unlike practice conversations, this feedback is saved back to your journal entry so it can be shown to you again later.
Content sent to Gemini is processed by Google subject to Google’s Gemini API terms. We also keep a lightweight usage log (just a timestamp and which feature was used, e.g. “practice_chat”) to enforce daily usage limits — this log never contains your message content.
Cookies and local storage
We use a cookie set by Supabase to keep you signed in. We don’t use advertising or tracking cookies. Your light/dark theme preference is saved in your browser’s local storage and never sent to us.
How We Use Your Information
- To create and maintain your account and sign you in
- To track your lessons, streaks, XP, levels, badges, and challenge history, and display them back to you
- To store and display your journal entries
- To generate AI practice conversations and AI journal feedback
- To enforce fair-use limits on AI features
We do not sell your data, and we do not use it for advertising.
Third-Party Services
SocialMax is built on a small number of infrastructure providers:
- Supabase— authentication, database, and file storage. See Supabase’s privacy policy.
- Google Gemini API— powers AI practice conversations and journal feedback, as described above. See Google’s privacy policy.
- Vercel— hosts and serves the app, and processes standard server request logs as part of doing so. See Vercel’s privacy policy.
We do not use any analytics, advertising, or tracking services beyond what is described in this policy.
Data Security
Access to your account data is restricted at the database level so that, with narrow exceptions for server-side logic that awards XP and badges, you can only read and write your own data. Traffic to the app is encrypted in transit (HTTPS). No method of storage or transmission is 100% secure, but we take reasonable steps to protect your information.
Data Retention
We retain your account and activity data for as long as your account is active. If you request deletion (see below), we delete your account and the data associated with it.
Your Rights and Account Deletion
You can request access to, correction of, or deletion of your personal data at any time by contacting us at socialmaxinquiries@gmail.com. When you request deletion, we will delete your account, your profile, progress, badges, journal entries, and any uploaded profile picture. We aim to complete deletion requests within 30 days.
Children’s Privacy
SocialMax is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at socialmaxinquiries@gmail.com and we will delete it.
Changes to This Policy
We may update this policy from time to time. If we make material changes, we will update the effective date at the top of this page.
Contact
Questions about this policy or your data? Email us at socialmaxinquiries@gmail.com.