Privacy policy

How anonymous this actually is

Read this part carefully, because it is the one people assume.

You are anonymous to other users. Your threads and replies carry a handle the server assigned you, which you did not choose and cannot change, and nothing else. Your email address is never shown to anyone, and your campus is shown only as the institution a thread belongs to.

You are not anonymous to us. The service knows which account wrote which thread, because it has to in order to let you delete your own posts, to enforce rate limits, and to act on reports. A handle that nobody could ever connect to an account would also be a handle nobody could ever moderate.

A court order, magistrate warrant, or other lawful order from a Pakistani investigation agency that identifies a specific post can compel us to disclose the campus email behind that handle. Informal emails from a university, a named person, or anyone else are not enough. We tell you this rather than promising something we cannot guarantee.

What we collect

· Your email address, at signup. It is used to verify which campus you belong to, and to send you a password reset if you ask for one. It is never attached to anything you post.

· Your confirmation that you are 18 or older, the time you accepted these documents, and which versions you accepted. We do not store your date of birth.

· Your account type, student or public reader, and the institution your email domain belongs to.

· A department, if you set one. It is shown on your threads and replies.

· What you post: threads, replies, votes, poll answers, status updates and reports, and whether you opted to let a thread go public.

· The words of a thread or reply, which are checked against the community guidelines when you post or edit. That check runs on our servers. For the most serious matches we record the category (for example a threat), not the wording that caused it. A blocked draft is not published as a post.

· Which accounts you have blocked.

· If you signed up through another student's invite link, which account invited you. It is used to count that student's invites and is never shown to anyone else.

· Who viewed whose profile, one record per viewer per day, so you can see a weekly count of views on your own profile. Viewers are never named.

· A push-notification device token if you turn notifications on, so we can send you alerts through Firebase Cloud Messaging.

· Product events: which screens you open and actions such as posting, voting, or opening a sponsored post, with a random session id kept on your device and sent to our server. This is not sold and is not used to advertise to you. Events are deleted after 90 days.

· On Android, the first time the app opens it reads the Play Store install referrer once, so that an invite link can open the thread or campus it pointed to. The referrer is not sent to our server.

· Diagnostics you choose to attach when you send feedback: the app version and your platform, and nothing else.

· Server logs of requests (time, path, and the account if you are signed in). The web server also records the IP address and the app or browser version that connected, for security and abuse handling. Those logs are deleted after 14 days. Monitoring logs are deleted after 7 days.

What we do not collect

· Your name, date of birth, gender, photograph or CNIC.

· Your precise location.

· Your contacts, photos, or anything else on your device, except the notification permission if you grant it.

· Advertising identifiers. Sponsored posts in the feed are placed by us. There is no third-party advertising SDK, and we do not read the Android advertising ID.

Where it goes

Accounts and posts live on a server we operate (a VPS). Ask [email protected] if you need the current country of that server.

A copy of the database is made every night. It is kept for 14 days on that server and for 30 days with an off-site storage provider, then deleted. Backups are used only to restore the service after a failure, which means a deleted account can survive in a backup for up to 30 days.

A small number of Posheeda staff with the account permission can see which email address is behind a handle, for moderation, account support, and lawful orders. Nobody else can, and no other user ever can.

Email (verification, password reset, and occasional service messages) is sent through our mail provider.

If you enable notifications, Firebase Cloud Messaging (Google) receives a device token and the text of the alert. That alert can include a thread title or a short preview of a reply, so your phone can show it. We do not send them your email address.

The feed can include a post labelled Sponsored. We place it. Opening it leaves Posheeda for the sponsor's website. We record on our server that it was seen or opened. The sponsor does not receive your email or your handle from us.

Searching for a GIF sends your search term to GIPHY, who will see it along with your IP address, and their privacy policy applies to that request. If you never open the GIF picker, that request is never made.

If a university's contact office confirms it wants one, we email that office a weekly summary: how many threads were opened, resolved, or left without a response, and the titles of the most-voted threads. It never contains handles, emails, or reply text. If someone asks to represent an institution, we keep the name, position, and email address they gave us.

We do not sell your data. We do not show it to other users except as this product already describes (handle, campus, and the words you posted).

We disclose account information only when a lawful order names a specific post or account, and then only what that order asks for.

How long we keep it

Your account is kept until you delete it.

When you delete your account, the sign-in is removed: the email, the password, the handle, and the record of when you accepted these documents. The handle is not issued again.

Threads, replies, and votes you already posted stay on Posheeda. They are no longer tied to an account. Where a handle was shown, it reads as a deleted account, and vote counts do not change.

Unpublished drafts are removed. A report you filed is removed. A report someone else filed may keep a short preview of what you wrote, so that review can be finished.

A security log may keep the email address and the fact that the account was deleted, for as long as we keep other security logs.

The email address on a deleted account cannot open a new account for 30 days. If you need to come back sooner, write to [email protected] and we can lift that hold.

Server logs are deleted after 14 days, product events after 90 days, and backups after 30 days.

Your choices

· Delete your account in the app at any time: Settings → Delete account. That removes the sign-in immediately. Threads, replies, and votes stay up. The same email cannot open a new account for 30 days unless you ask [email protected] to lift the hold.

· Delete it without the app at https://posheeda.com/delete-account. Enter the email and password on the account. No email is sent. The same posts and votes stay up.

· Ask what we hold about you, or ask for a copy, by writing to [email protected].

· Block any account. Their content stops reaching you, everywhere.

· Turn notifications off in Settings. That removes this device’s push token.

Children

Posheeda is for adults. You must confirm you are 18 or older to create an account. It is not intended for children.

Contact

Questions about any of this: [email protected].

The operator of this service is the person who publishes Posheeda at posheeda.com.