Privacy Policy

1. What We Collect

When you create a Real Is Sweet account we collect:

• Your email address and display name
• Authentication data (password hash stored by Firebase, or Apple ID token)
• Feedback you receive through your link
• Your in-app preferences (mood mode, profile settings)

When someone submits feedback through your link we collect:

• Their answers to the feedback questions
• A one-way hash of their IP address (for spam prevention — we cannot reverse this to identify them)

We do not collect the submitter's name, email, or any identifying information.

2. How We Use Your Data

We use the data we collect to:

• Deliver feedback to your inbox
• Run AI safety checks and constructive rewrites on submitted feedback
• Prevent spam and abuse
• Send account-related emails (password reset, etc.)
• Improve the service

We do not sell your data. We do not use it for advertising.

3. AI Processing

Feedback text is sent to our AI service for toxicity screening and optional rewriting. This processing happens on our own infrastructure. Feedback text is not sent to third-party AI providers.

4. Data Sharing

We share data only with the following service providers, solely to operate Real Is Sweet:

• Google Firebase — Authentication and database storage
• Google Cloud Run — Hosting our API and AI services

We will disclose data if required by law or to protect the safety of users.

5. Anonymity of Feedback Givers

Real Is Sweet is built around anonymity for feedback givers. We do not display, share, or reveal any identifying information about who submitted feedback to the person receiving it — ever. Even Real Is Sweet staff cannot link a specific submission to a specific person without a legal order.

6. Data Retention

Your account data is retained while your account is active. Feedback items are retained indefinitely unless you delete them or close your account. You may request deletion of your account and all associated data by emailing support@realissweet.com.

7. Security

We use industry-standard security practices: HTTPS for all data in transit, Firebase security rules for data at rest, and IP hashing instead of raw IP storage. No system is perfectly secure — if you discover a vulnerability please report it to security@realissweet.com.

8. Children's Privacy

Real Is Sweet is not directed at anyone under 18. We do not knowingly collect data from minors. If you believe a minor has submitted data, contact us and we will delete it promptly.

9. Your Rights

Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to certain processing. To exercise these rights, email support@realissweet.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notice. Continued use after changes are posted constitutes acceptance.

11. Contact

Privacy questions or requests: support@realissweet.com or call us at (443) 461-4754.