Privacy Policy

This Privacy Policy explains what personal information PurgeProof collects through purgeproof.com and the member platform, how we use it, and the choices you have. It’s part of the same agreement as our Terms of Service.

Account information — name, city, state/region, email address, phone number, and a password (stored hashed by our authentication provider, never in plain text).

Your setup answers — when you create an account we ask a short set of questions so we can point you at relevant material: what you want help with, what you want from PurgeProof, who lives in your household (for example whether there are children, older adults, or someone with medical needs), whether you own or rent, your timeline, and which preparations you already have in place (such as stored water, a generator, solar, or first-aid training).

These answers are visible only to you and to PurgeProof administrators. They are never shown to other members, never attached to your forum posts, and never used to build a public profile. You can update them at any time, and they are deleted along with your account.

Content you create — your readiness-audit answers and results, saved plans (water, food, go-bag, evacuation, power), forum posts and bookmarks, help requests, and partner applications.

Usage and device data — pages visited, actions taken (e.g. signup, audit completion), rough location inferred from IP, browser/device type, collected via our analytics provider (PostHog). See Cookies below.

• To create and secure your account and let you sign in.
• To run the features you use — the audit engine, your dashboard and readiness figures, the community, saved plans.
• To decide what to show you. Your setup answers group your account by the topics you asked about, so guides, training, and resources relevant to you appear first, and so an administrator answering your question already knows what you came here for.
• To respond to help requests, contact submissions, and partner applications.
• To understand how the Service is used and improve it (aggregated, via PostHog).
• To detect abuse and enforce our Terms.

We don’t sell your personal information. We share it with:

• Supabase — our database and authentication provider; it stores your account and content data.
• PostHog — analytics, proxied through our own domain.
• Vercel — hosting infrastructure.
• Law enforcement or other parties, if required by law or to protect the safety of members or the public.

Each of these processes data on our behalf under its own security commitments; we don’t hand data to unrelated third parties for their own marketing use.

We use a session cookie to keep you signed in, and analytics cookies (PostHog) to understand usage. You can block cookies in your browser, but the Service won’t function properly without the session cookie.

We keep your account and content data for as long as your account is active, plus a reasonable period after deletion to comply with legal obligations and resolve disputes. Audit and plan history is kept so you can see your progress over time; you can request deletion at any time (see below).

You can access or correct most of your account information directly from your dashboard. To request a copy of your data, ask us to delete your account and associated data, or opt out of non-essential analytics, contact us at the email below.

If you’re a California resident, the CCPA gives you the right to know what personal information we collect, request deletion, and not be discriminated against for exercising these rights. We do not sell personal information, so there is nothing to opt out of in that respect.

Access to your data is restricted using row-level security so that, by default, only you (and, where relevant, admins acting in a moderation capacity) can read your own records. No method of transmission or storage is perfectly secure, and we can’t guarantee absolute security.

The Service is not directed to children under 18 and we don’t knowingly collect personal information from them. If you believe a child has created an account, contact us and we’ll remove it.

We may update this policy as the Service changes. We’ll post the updated version here with a new effective date, and make reasonable efforts to notify members directly of material changes.

Questions, access requests, or deletion requests: mo.alhait@gmail.com.