01
Who We Are
Enclave Social is operated by Enclave Technologies LLC, registered in the State of Mississippi, United States.
Privacy
Privacy Policy
Plain language on what we collect, what we never touch, and what happens when you leave.
Our commitment
We built Enclave Social to be a private place to gather — not a data harvester dressed up as a chat app. We do not read your messages. We do not profile you. We will never sell, rent, share, or transfer your data for commercial gain.
02
What We Collect — and Why
We collect only what we need to run the platform. Each item below has a specific, legitimate purpose:
| Data | Why we collect it |
|---|---|
| Email address | Account authentication and essential account notices. |
| Username and display name | Your identity within the platform. |
| Avatar and profile banner | Personalization of your profile. |
| Presence status | Realtime communication — online, idle, do-not-disturb, or invisible. |
| Server membership and roles | Community access control and permissions. |
| Message metadata | Timestamps, channel IDs, and sender/recipient IDs — for delivery and ordering only. Not message content. |
| Device information | Push notification delivery via Firebase Cloud Messaging (FCM). |
03
What We Do NOT Collect
Message content. All messages are end-to-end encrypted on your device using the MLS Protocol (RFC 9420). We are technically incapable of reading what you write. Supabase stores ciphertext only — never plaintext.
Encryption keys are generated on your device and never sent to us in a usable form. We do not collect your phone number, government ID, real name, location, or biometrics.
The encryption layer is open source and auditable. Read the code yourself:
github.com/Enclave-Encrypt/enclave-mls-sdk04
Third-Party Data Sharing
We will never sell, rent, share, or otherwise transfer your data to third parties for any commercial purpose — including advertising, analytics resale, or data brokerage.
Data is disclosed only under valid legal process. Even then, only metadata is available by architecture. Message content is inaccessible to us.
- Stripe processes payments — governed by Stripe's privacy policy.
- Supabase hosts our infrastructure — governed by Supabase's privacy policy.
05
Where Data Is Stored
All data is stored on Supabase US-based infrastructure. Data in transit is protected with TLS.
This Privacy Policy is governed by the laws of the State of Mississippi, United States.
06
Account Deletion
When you delete your account, everything goes. Immediately. Permanently. Irreversibly.
Deletion is available in app settings and runs right away. We also wipe:
- Your profile, messages, DMs, friendships, and server memberships
- Posts, avatars, attachments, and billing records
- Stripe customer records — removed via automated cleanup on account deletion
- All storage blobs — avatars and attachments permanently wiped from Supabase Storage
This is comprehensive and irreversible. There is no hidden retention window.
07
No Telemetry
We collect no behavioral analytics, no tracking pixels, and no ad-targeting data.
- Silver Key and above users see no promoted posts.
- Free-tier contextual ads are based on server category only — zero user profiling.
08
Your Rights
You can:
- Delete your account anytime in app settings — immediate and permanent.
- Request a data export by emailing jamesbraxton@enclave.talk.
- Request deletion or ask what we hold about you — we respond within 30 days.
09
Changes
We may update this policy as Enclave Social evolves. When we do, we will post the new version here and update the date above.