Privacy Policy

Last updated: August 2026 · Applies to the Experiencer iOS app and experiencernetwork.com

Who we are

Experiencer Network ("Experiencer," "we") is operated by ExoArcade LLC. Questions about this policy: see Support.

Account data

You sign in with your Apple ID through Sign in with Apple. Our authentication provider (Supabase) processes that sign-in and gives the app a random account identifier. Your public identity inside Experiencer is a pseudonymous profile — a username and display name you choose. Your legal name is never required, and your Apple ID email is not shown anywhere in the product. If you use Apple's "Hide My Email," we never see your real email at all.

Your experience reports

• Testimony is yours, verbatim. What you write is stored and displayed exactly as written. No AI system ever rewrites, edits, or "improves" your account.
• You choose visibility per report: public, members only, followers only, or only you. Private reports are readable by no one else — including in search, maps, and similarity features.
• Anonymous publication hides your identity from everyone else while you keep full ownership and control. Placement is designed so anonymous reports cannot be linked back to your profile.
• Edits keep history. If you edit a published report, prior versions are retained privately for your own records, and other people see that the report was edited.

Location: precise versus public

If you attach a location to an experience, we store two separate things:

• Your precise location (if you provided one) — visible only to you. It is never included in any response shown to another person, at any privacy level, unless you explicitly chose "exact" visibility.
• A public display location derived on our servers at the precision you chose — a city-level or region-level area, a country, or nothing at all. Maps and search use only this derived location.

Device location is used only when you tap "Use my current location" while documenting an experience — never in the background, never for tracking. We also record how a location was captured (typed, searched, device, map pin) for your own records; that detail is not shown to others.

Photos and media

Images you attach are quarantined and re-encoded server-side before anything becomes visible to anyone else. This processing removes hidden metadata — including embedded GPS coordinates, camera serial data, and similar EXIF fields. Original uploads are never publicly served. Profile photos go through the same pipeline.

AI processing

• When you publish, we may send your report's title and testimony only — never your identity, email, precise coordinates, or other users' content — to an AI provider (currently Anthropic's Claude API) to suggest structured details (like "Triangle" or "Missing time") and produce a neutral summary.
• Suggestions are never added to your report unless you accept them. You can ignore or correct any suggestion. Provenance (human vs. AI-suggested) is stored permanently.
• To power "Others Experienced This," we compute a numerical representation (embedding) of the same title-and-testimony text, via a configured embedding provider. Similarity results always come with a plain-language explanation and are never presented as proof that events are related.
• If AI processing fails or is unavailable, your report publishes normally — AI is never in the critical path.

Notifications

Push notifications are opt-in. Lock-screen copy is deliberately generic (for example, "Experiencer found similar reports") and never contains your report titles, story text, or other users' names. The in-app inbox holds the details.

Analytics and tracking

The app currently contains no third-party analytics or advertising SDKs and does no cross-app tracking. If we add product analytics later, events will be limited to product usage (for example "report published") and will never include testimony, precise location, or your identity beyond a pseudonymous identifier; this policy will be updated first.

Moderation

Reports you file about content or accounts are reviewed by moderators, who see the reported content and minimal context — not your private archive. Moderation actions are recorded. Content removed by moderation is retained internally for audit purposes.

Where data lives

Application data is stored in a managed PostgreSQL database and object storage operated by our infrastructure providers (currently Supabase and our API hosting provider). The marketing site's waitlist stores the email address you submit, used only to contact you about availability.

Export

Settings → "Export my data" produces a JSON file of your profile, reports (including your private location data and edit history), comments, saves, and collections. Exports contain only your own data — never other people's.

Deletion

Settings → "Delete account" permanently deletes your account and its content: profile, reports (including private ones), comments, media, follows, saves, collections, notification history, and device tokens. Two narrow categories survive, without your identity attached: abuse reports you filed (so moderation history stays coherent) and internal audit entries. Deletion is executed immediately by the system, not queued for a support team.

Third-party processors

• Apple — Sign in with Apple, push notification delivery
• Supabase — authentication and managed database infrastructure
• Anthropic — AI suggestion/summary processing (title and testimony only)
• Embedding provider — semantic similarity processing (title and testimony only); named here once finalized
• Vercel & Neon — marketing website hosting and waitlist storage

Age

Experiencer is for users 17 and older.

Changes

We will update this page when practices change, with the date above. Material changes will be announced in the app.