Privacy Policy

Last Updated: 11.05.26

This Privacy Policy explains how IAO (“we,” “us,” or “our”) collects, uses, stores, and protects your personal data when you use our mobile application and website (useiao.com).

1. WHO WE ARE                                                                                                                                                                                                                            

IAO (“we”, “us”) is an anonymous debate app. This Privacy Policy explains what data we collect, how we use it, and your rights.

 2. ELIGIBILITY

IAO is intended for users aged 18 and older. We do not knowingly collect data from anyone under 18.               

3. DATA WE COLLECT                      

Account data:                   

    – email address (used for sign-in via one-time code)   

    – account creation timestamp  

    – notification push token (if you enable push notifications) 

  Debate content:                         

    – messages you send during debates  

    – which side (yes/no) you took on each topic   

    – votes you cast on topics 

Safety records:  

    – reports you submit or that are submitted against you  

     – users you block                     

    – ratings you give after a debate 

  We do NOT collect:                

    – your real name, phone number, photos, or location

    – your contacts or device identifiers 

  4. HOW WE USE YOUR DATA        

    – Authenticate you and keep you signed in 

    – Match you with debate opponents (excluding blocked users)

    – Send notifications you’ve opted into

    – Review reports and enforce community rules  

    – Protect the platform from abuse 

    – Comply with legal obligations 

  5. THIRD-PARTY SERVICES      

    – Supabase (database and authentication)   

    – Expo Push Service (for notifications)   

    – Apple Push Notification Service (iOS notifications)    

  We do not sell your personal data.         

  6. DATA RETENTION                                                                                                                                                                                                                                               – Debate messages: retained for up to 2 years, anonymized after account deletion (see Section 7)                                                                                                        

    – Reports and blocks: retained for up to 2 years for safety and legal purposes                        

    – Push tokens: deleted when you sign out or delete the app

  7. ACCOUNT DELETION                     

  You can delete your account at any time from Settings > Account > Delete Account. 

Upon confirmation:  

    – your authentication record is permanently deleted (you cannot log in again with the same email)          

    – your profile is permanently deleted

    – your messages are anonymized in past debates (the conversation remains visible to the other participant but no longer linked to you)   

    – a minimal audit record (email hash, deletion date) is kept for up to 2 years to comply with safety and legal obligations.

You may also email [email protected] to request deletion.  

 8. SAFETY AND MODERATION                

  We review every report within 24 hours. We may suspend or terminate accounts that violate our Terms of Service. Reports, blocks, and related records may be shared with law enforcement when required by law.  

  9. YOUR RIGHTS      

  If you are in the EU/UK (GDPR): 

You have the right to access, rectify, or delete your personal data, to restrict or object to processing, and to data portability. 

Contact us at [email protected] to exercise these rights.

If you are in California (CCPA):  

You have the right to know what personal data we collect, to delete it,  and to opt out of any sale (we do not sell personal data). 

 If you are in Türkiye (KVKK):           

  6698 sayılı Kişisel Verilerin Korunması Kanunu kapsamında erişim, düzeltme, silme, işlenmeye itiraz ve veri taşınabilirliği haklarına sahipsiniz.

  [email protected] adresinden başvurabilirsiniz.

  You also have the right to lodge a complaint with your local data protection authority. 

10. SECURITY                            

  We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest. No system is perfectly secure; we will notify you of any breach affecting your data as required by law.

  11. CHILDREN’S PRIVACY

  IAO is not intended for users under 18. If we discover that an account belongs to someone under 18, we will delete it promptly. Parents or guardians who believe their child has created an account can email [email protected].  

  12. CHANGES TO THIS POLICY               

  We may update this Policy from time to time. Material changes will be indicated by an updated “Last updated” date at the top. Continued use of IAO after changes constitutes acceptance.