Privacy Policy

Information We Collect

Supermedal is a place to record your real personal achievements, backed by proof. To do that, we collect the following categories of information:

• Account and profile information — the name or display name you choose, your email address, and the interests and profile details you add during onboarding.
• Sign-in identifiers — the information needed to authenticate you, including a one-time verification code we send to your email or phone, and, if you use Sign in with Apple or Sign in with Google, the account identifier those services return to us.
• Your conversations and proof — the messages you send in chat, and any photos or location details you choose to attach as proof of an achievement.
• Your achievements — the medals you earn, your progress toward them, and the stories generated from your conversations.
• Waitlist and invitation details — if you request access, the email address you submit; and the invitation code you use to join the beta.
• Device and usage information — basic technical and usage data, such as in-app activity and diagnostics, used to operate, secure, and improve the service. If you enable push notifications in a future release, we would also store a device push token to deliver them.

How We Use Your Information

We use the information above to:

• Provide the core experience — power the AI chat, recognize and evaluate achievements, grant medals, and generate your stories.
• Personalize your experience based on your interests and history.
• Authenticate you and keep your account secure.
• Communicate with you about the beta, including service, security, and support messages.
• Maintain safety and integrity — detect abuse, fabricated or fraudulent proof, and violations of our Terms.
• Comply with legal obligations and enforce our agreements.

AI Processing and OpenAI

Supermedal's core feature is an AI chat that helps you describe your achievements and decides which medals to grant. To provide it, we send the content of your chat — including the text of your messages and any photos you attach — to our AI provider, OpenAI, which processes them to generate replies, recognize what is in your images, and evaluate your achievements.

This means information you share in chat, including photos used as proof, is transmitted to and processed by OpenAI on our behalf. Please keep this in mind and avoid sharing sensitive information you would not want processed by an AI service. OpenAI processes this content to provide the service to us and under its own applicable terms; we do not control OpenAI's independent practices.

How Information Is Shared

We do not sell your personal information. We share information only as described below:

• AI provider — OpenAI, as described in “AI Processing and OpenAI” above.
• Cloud infrastructure — Amazon Web Services (AWS), which hosts our servers, databases, file storage, and email delivery. Your data is stored and processed on AWS infrastructure on our behalf.
• Sign-in providers — Apple and Google, when you choose to sign in with their services, for the limited purpose of authenticating you.
• Messaging providers — when we send a verification code by SMS we use a third-party messaging provider to deliver it, and when we send email we use AWS email delivery.
• Legal and safety — we may disclose information where required by law, or to protect the rights, safety, and security of our users, Supermedal, or the public.
• Business transfers — if Supermedal is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

Data Retention

We keep information for as long as needed to provide the service and for legitimate business or legal purposes. Short-lived data such as one-time sign-in codes expires automatically within minutes.

When you ask us to delete your account, we remove or de-identify your personal information, except where we are required to retain it for legal, security, or fraud-prevention reasons. Because Supermedal is in early beta, account deletion is currently handled by contacting us (see “Contact Us”); self-service deletion will follow.

Your Choices and Rights

You can review and update your profile information in the app. You can ask us to access, correct, export, or delete your personal information by contacting us.

Depending on where you live, you may have additional rights over your personal information under local law, such as rights to access, correct, delete, or restrict certain processing. We will honor these rights as required by applicable law. To exercise any of them, contact us using the details below.

Security

We protect your information using technical and organizational measures, including encryption of data in transit and access controls on our systems. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.

Children's Privacy

Supermedal is not directed to children. You must be at least 13 years old — or the minimum age of digital consent in your country, if higher — to use the service. We do not knowingly collect personal information from children under that age. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

Changes to This Policy

We may update this policy as Supermedal evolves, especially as we move from private beta to general availability. When we make material changes, we will update the date on this page and, where appropriate, notify you in the app.

Contact Us

If you have questions about this policy or your information, contact us at privacy@supermedal.com.

This page is a draft for review. The final policy will identify the Supermedal operating entity and its registered contact address.