Privacy Policy

1. Scope

This Privacy Policy applies to information we collect:

• when you create an account or use the Services,
• when you connect third-party accounts (such as YouTube),
• when you communicate with us (support, feedback, surveys),
• when you visit our websites or interact with our emails.

This Privacy Policy does not cover third-party services (e.g., YouTube/Google) when used outside our Services. Those services have their own terms and privacy policies.

2. Information We Collect

We collect information from (A) you, (B) connected platforms you authorize, and (C) your device and usage of the Services.

2.1 Information You Provide

We may collect:

• Account details: name, email address, and profile preferences.
• Authentication details: information necessary to sign you in (see Section 6).
• Optional information: any additional data you choose to provide (e.g., messages, feedback, profile content).
• Communications: messages and feedback you send to us.

2.2 Information From Connected Platforms (YouTube / Google)

We use YouTube API Services to access your YouTube data. If you choose to connect your YouTube account, we access data only through Google's official OAuth and YouTube Data APIs, and only with the permissions (scopes) you authorize.

For more information about how Google handles your data, see Google's Privacy Policy.

By using TheNetwork features that access YouTube data, you also agree to be bound by YouTube's Privacy Policy and Terms of Service.

Scopes we request (current):

• email (basic email address)
• profile (basic profile information)
• https://www.googleapis.com/auth/youtube.readonly (read-only YouTube access)

With youtube.readonly, our Services may read:

• Your channel subscriptions list (channels you are subscribed to)
• Your liked videos list (via the "Liked videos" playlist, when available through the API)
• Metadata returned by the YouTube Data API for those items (e.g., channel ID, channel title, video ID, video title, thumbnail URL, published date)

We do not use youtube.readonly to:

• upload videos,
• delete content,
• modify subscriptions,
• like/unlike videos,
• post comments,
• manage your YouTube account settings.

We do not request access to your YouTube password, and we do not store your YouTube password.

Data Storage: YouTube data is stored on our servers (not on your device) to power your Digital DNA profile and matching features.

We do not request scopes to access your private playlists beyond your own "Liked videos" playlist. We do not fetch other playlists.

2.3 Device, Log, and Usage Data

We may collect:

• Device and technical data: device type, OS, browser/app version, language.
• Network data: IP address and approximate location derived from IP.
• Usage data: feature interactions, pages/screens viewed, session duration.
• Session recordings: in the mobile app, our analytics provider can record a replay of the screens you move through, so we can see where the app confuses people. Message threads are masked, so the words in your chats are never captured. You can turn this off with "Share usage data" in Settings.
• Diagnostics: crash logs, performance metrics, and error reports.

We use this data for reliability, security, and service improvement.

2.4 Cookies and Similar Technologies (Web)

Our websites may use cookies or similar technologies for login/session management, security, preferences, and analytics. You can control cookies via browser settings. Some cookies are required for the Services to function.

2.5 Location and Maps

The app never asks for your location until you tap the locate button on the map, and it only ever asks for while-in-use access. Your position is used on your device to centre the map and draw your dot. We do not send it to our servers, store it, or share it, and we never ask for background location.

The city you choose in your profile is different: you tell us that, we store it, and it is how we show you people and plans near you. Map images are drawn from OpenStreetMap data through a tile provider, so that provider receives the map areas your app requests, never your identity or your saved city.

3. How We Use Information

We use information to operate the Services, provide personalization, maintain security, and comply with law.

3.1 Core Service Operations

• Create and manage accounts
• Authenticate users
• Provide core app features and settings

3.2 Personalization and "Memory Layer"

We use your information to deliver personalization features you request, including:

• building and maintaining your private, user-controlled "TheNetwork Memory Layer"
• generating interest analysis from connected signals (e.g., YouTube subscriptions/liked videos) to tailor your experience

3.3 Service Improvement, Analytics, and Debugging

• Improve performance and reliability
• Fix bugs and troubleshoot crashes
• Evaluate feature usage to improve product quality

3.4 Communications

• Send security and operational messages (e.g., login verification, account notices)
• Send product updates or invitations when permitted by your preferences and applicable law

3.5 Security, Fraud Prevention, and Legal Compliance

• Detect and prevent abuse, fraud, and unauthorized access
• Enforce our terms and protect users
• Comply with legal obligations and valid legal requests

No advertising by default: Your data is not used for third-party targeted advertising, and we do not sell your personal data.

4. Google / YouTube API Data: Limited Use and Sharing Restrictions

4.1 Google API Limited Use Disclosure

TheNetwork's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4.2 How we use Google/YouTube user data

Information obtained from YouTube (including subscriptions and liked videos signals) is used only to:

• provide and improve user-facing features inside TheNetwork (e.g., personalization and interest analysis you request)
• maintain account connections you initiate
• secure the Services and prevent abuse

We do not use Google/YouTube user data for:

• selling data
• advertising targeting
• building profiles for third-party advertising
• transferring the data to third parties for their independent use

Derived Data: This includes data derived from YouTube data, such as interest embeddings, Digital DNA vectors, personality archetypes, and similarity scores. All derived data is subject to Google's Limited Use requirements and is used only to provide and improve user-facing features within TheNetwork (e.g., interest profile and matching), not for advertising, data sales, or transfer to third parties.

4.3 When we share data

We may share limited information only:

• with service providers that help us run the Services (e.g., hosting/database providers, infrastructure and security tooling) under contractual confidentiality and security obligations, and only as necessary to provide the Services
• when required by law or to protect rights and safety (see Section 9)

We do not share Google/YouTube user data with data brokers or advertisers.

4.4 Human access to connected-platform data

Access to connected-platform data is restricted:

• By default, our systems process connected data automatically to provide features.
• Authorized personnel may access limited data only when necessary for support, debugging, security investigations, or compliance, and under confidentiality obligations.

5. Data Ownership and Control

You own your data.

Depending on product features available in your account, you can:

• view, edit, export, or delete your data
• disconnect connected platforms (like YouTube) at any time
• request deletion of your account and associated data (see Section 8)

6. Authentication (Google Sign-In)

If you sign in using Google, we receive basic profile information from Google (such as email and profile) necessary to authenticate you and maintain your account. The exact information depends on the permissions you grant.

7. SMS Messaging and Phone Verification

TheNetwork uses SMS messaging solely to deliver one-time verification codes (OTP) during account signup and login to verify ownership of a phone number and secure user accounts.

We collect and process your phone number for authentication purposes when you voluntarily enter it within the TheNetwork mobile application and request verification.

SMS messages:

• are strictly transactional and not promotional;
• are sent only after you initiate the verification process;
• contain a single-use authentication code;
• are not used for marketing or advertising;
• may be subject to message and data rates depending on your mobile carrier.

You may reply STOP to opt out of SMS messages at any time. You may reply HELP for assistance.

SMS delivery may be handled by third-party service providers acting on our behalf under contractual confidentiality and security obligations.

We do not sell or share phone numbers collected for SMS verification with third parties for advertising or marketing purposes.

8. Revoking YouTube Access, Deleting Data, and Data Retention

8.1 Revoking access

You can revoke TheNetwork's access to YouTube at any time:

• in your TheNetwork account settings (Connected Accounts / Integrations), and/or
• in your Google Account security permissions (Third-party access)

To revoke access via Google Account:

1. Go to https://myaccount.google.com/permissions
2. Find "TheNetwork" in the list of connected apps
3. Click "Remove Access" or "Revoke Access"

After revocation:

• We stop fetching new data from YouTube.
• We will delete all stored YouTube data (subscriptions, liked videos, and derived data) within 7 calendar days of revocation.
• You can also request immediate deletion from within the app (YouTube Data Review / Settings) or by contacting privacy@thenetwork.life.

8.2 Data deletion requests

You can delete imported YouTube data from within the app (YouTube Data Review / Settings) or by contacting privacy@thenetwork.life.

You can request deletion of your account and associated personal data at any time by contacting privacy@thenetwork.life.

We may retain limited information where required by law or for legitimate security purposes (e.g., fraud prevention logs) and will protect it under this policy.

8.3 Retention

We retain personal data only as long as needed to:

• provide the Services,
• maintain security and prevent abuse,
• comply with legal obligations.

Retention periods may vary by data type. You may request deletion at any time.

Deleting your account. You can delete your account inside the app, in Settings. Your profile, your plans and your messages leave the product straight away, and nobody else can see you or reach you. We hold the data for 30 days in case you change your mind: sign in again inside that window and your account comes back as it was. After 30 days it is erased for good, including anything held by the services listed in Section 10, and signing in creates a new account. The only exceptions are the narrow records Section 8.3 already allows us to keep: what the law requires us to retain, and what we need to prevent fraud and abuse, such as a record that an account was removed for breaking our terms.

8.4 Data Refresh and Retention

We refresh your YouTube data every 30 days to ensure it remains current. If authorization is revoked or expires, we delete all stored YouTube data within 7 calendar days. You can delete your YouTube data at any time from within the app (YouTube Data Review / Settings) or by contacting privacy@thenetwork.life.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect your information.

Safeguards may include encryption in transit (e.g., TLS) and access controls limiting internal access to authorized personnel.

No system is perfectly secure. We work to protect your information, but we cannot guarantee absolute security.

If a data breach occurs, we will notify affected users as required by applicable law.

10. Third-Party Integrations

Our integrations with YouTube and other platforms comply with applicable API terms and policies. You can revoke connections at any time. We do not collect or store passwords for third-party platforms.

Please refer to Google's Privacy Policy for more information.

We also rely on a small set of service providers to run the Services: hosting and database, product analytics and session recording, crash reporting, push notifications, map tiles built from OpenStreetMap data, and the model providers behind the Curator. They process data only to provide those functions for us, never to sell it or build their own profile of you, and they are bound by contract to do so. We do not sell your personal data, and we do not share it with advertising networks or data brokers.

11. International Data Transfers

If you access the Services from outside the United States, your data may be transferred and processed in the U.S. or other jurisdictions. Where required, we use appropriate safeguards to protect transferred data.

12. Children's Privacy

TheNetwork does not knowingly collect personal data from children under 13 (or under 16 in the EEA/UK).

If we learn we have inadvertently collected such data, we will delete it.

13. Your Rights

Depending on your location, you may have rights to:

• access, correct, or delete your data
• export your data
• object to or restrict certain processing
• withdraw consent where processing is based on consent

To exercise these rights, contact privacy@thenetwork.life.

14. Changes to This Policy

We may update this Privacy Policy to reflect product or legal changes. When we do, we will update the "Last Updated" date and may notify users via email or in-app notice where appropriate.

15. Contact Us