Privacy Policy

Introduction

Welcome to communiti.life ("Communiti," "we," "us," or "our"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information.

This Privacy Policy explains our practices regarding the collection, use, and disclosure of information when you use our social media platform designed for churches, schools, nonprofits, and community organizations.

Effective Date: December 12, 2025

1. Information We Collect

1.1 Information You Provide Directly

When you create an account or use our services, you may provide:

• Account Information: Name, email address, username, password, phone number, date of birth
• Profile Information: Profile picture, bio, organization affiliations
• Content You Create: Posts, comments, messages, photos, videos, reactions
• Communication Data: Messages you send to other users or to our support team
• Organization Data: Information about organizations you create or join
• Accountability Relationships: Information about accountability partnerships you establish (guardian-child, spouse, accountability partner, supervisor relationships)

1.2 Information Collected Automatically

When you use our platform, we automatically collect:

• Device Information: Device type, operating system, browser type, unique device identifiers
• Log Data: IP address, access times, pages viewed, referring URL
• Usage Information: Features used, actions taken, content viewed, interaction patterns
• Cookies and Similar Technologies: Session cookies for authentication and preferences

1.3 Information from Third Parties

We may receive information from:

• Social Login Providers: If you sign in using Facebook or Google, we receive your name, email address, and profile picture from these services
• Organization Administrators: Administrators may add you to their organization with your consent

2. How We Use Your Information

We use the information we collect to:

2.1 Provide and Improve Our Services

• Create and manage your account
• Enable you to post content, send messages, and interact with other users
• Facilitate organization membership and community participation
• Provide customer support
• Improve and optimize our platform

2.2 Safety and Accountability

• Moderate content using AI-powered safeguarding tools (OpenAI Moderation API, Google Perspective API, Claude AI)
• Detect and prevent harmful content, including harassment, hate speech, and grooming behaviors
• Facilitate accountability relationships where users have voluntarily established oversight
• Protect minors through age-appropriate safeguarding measures
• Comply with legal requirements, including Oklahoma HB 3958 for staff-minor communications

2.3 Communications

• Send service-related notifications (account verification, security alerts, policy updates)
• Deliver messages and notifications from other users and organizations
• Respond to your inquiries and support requests

3. How We Share Your Information

3.1 With Other Users

• Your profile information and public posts are visible to other users in your organizations
• Messages are shared with recipients you choose
• Accountability partners can view content according to your established accountability relationships

3.2 With Service Providers

We share information with third-party service providers who assist us in:

• Cloud Hosting: Amazon Web Services (AWS) for secure data storage and processing
• Content Moderation: OpenAI and Google for AI-powered safety analysis
• Authentication: Facebook and Google for social login services
• Communications: Twilio for SMS notifications
• Email: AWS SES for transactional emails

3.3 For Legal Reasons

We may disclose information if required by law, legal process, or government request, or to protect the rights, property, or safety of Communiti, our users, or others.

3.4 With Your Consent

We may share information with your explicit consent for purposes not described in this policy.

3.5 What We Do NOT Do

4. Advertising

Communiti displays advertisements to support our platform. Here's how advertising works on our platform:

4.1 How Ads Are Targeted

Advertisements may be targeted based on:

• Geographic location: Local businesses may advertise to users in their area
• Role on platform: For example, a uniform company may advertise to users identified as coaches
• Platform activities and interests: For example, a chess board company may advertise to users who play chess games on our platform
• Age (adults only): Certain ads, such as political advertising, are shown only to adult users

Important: Advertisers can target categories of users, but they never receive your personal data. All targeting happens on our platform—advertisers only see aggregate statistics about their ad performance.

4.2 Protection of Children

4.3 Your Choices

You may adjust your advertising preferences in your account settings. However, since we do not sell or share your data with advertisers, opting out of personalized ads simply means you'll see less relevant advertisements—not that we'll share less data (we don't share it regardless).

5. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy:

• Account Data: Retained while your account is active and for a reasonable period after deletion
• Content: Posts and messages are retained until you delete them or your account
• Accountability Audit Logs: Retained for 2-7 years depending on the nature of oversight (as required for safeguarding compliance)
• Usage Data: Aggregated and anonymized data may be retained indefinitely for analytics

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (see Section 6)
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your data
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, contact us at privacy@communiti.life.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure cloud infrastructure with AWS
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection

9. Children's Privacy

Communiti is designed with safeguarding for minors in mind. Our platform includes special protections for users under 18:

• Users under 13 require parental consent and guardian oversight
• Age-appropriate accountability levels (full coaching for ages 8-12, guided independence for 13-15, safety net for 16-17)
• AI-powered content moderation to detect and prevent harmful interactions with minors
• Automatic inclusion of guardians in staff-minor communications (HB 3958 compliance)

If you believe a child under 13 has created an account without parental consent, please contact us immediately at privacy@communiti.life.

10. Third-Party Services

Our platform integrates with third-party services. These services have their own privacy policies:

• Facebook: Facebook Privacy Policy
• Google: Google Privacy Policy
• OpenAI: OpenAI Privacy Policy
• Amazon Web Services: AWS Privacy Notice

11. Government and Legal Requests

We may receive requests from government authorities or through legal processes for user data. We handle these requests according to the following policies:

11.1 Required Legal Review

All requests from public authorities for personal data are reviewed for legality before any disclosure:

• Requests must be valid under applicable law and properly served
• We verify the identity and authority of the requesting party
• We assess whether the request is legally binding in our jurisdiction
• Requests that are overly broad, vague, or legally deficient are rejected or narrowed

11.2 Challenging Unlawful Requests

We reserve the right to challenge requests that we believe are unlawful, overbroad, or otherwise improper:

• We may seek to narrow the scope of requests that are overly broad
• We may object to requests that lack proper legal basis
• We may seek judicial review of requests we believe violate user rights
• Where legally permitted, we notify affected users of requests concerning their data

11.3 Data Minimization in Disclosures

When we are legally required to disclose information, we apply data minimization principles:

• We disclose only the minimum information necessary to comply with the specific request
• We do not provide more data than is legally required
• We redact information not relevant to the request where possible
• We do not volunteer additional data beyond what is specifically requested

11.4 Documentation and Transparency

We maintain comprehensive records of government data requests:

• Request documentation: We record all requests received, including the requesting authority, date, scope, and legal basis cited
• Response documentation: We document our responses, including what data was disclosed (if any) and the legal reasoning for our decision
• Decision records: We maintain records of any challenges filed and their outcomes
• Transparency reports: We may publish aggregate statistics about government requests received, subject to legal restrictions

12. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. By using our services, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.