Privacy Policy

1. What IVY Is

IVY is a verified campus community platform exclusively for students with valid .edu email addresses. We connect students within the same university campus through features including a student exchange, event board, housing listings, course reviews, local deals, a daily pulse poll, lost & found, and direct messaging.

2. Information We Collect

• .edu email address — used for verification and account identity. We confirm you are a student before granting access.
• Name — your first and last name as provided during signup. Your real name is displayed on all posts, listings, and comments outside The Vault.
• Campus — derived from your .edu domain. Used to filter all content to your university.
• Profile photo — optional. Stored securely and used as your avatar throughout the platform.
• Content you post — listings, events, reviews, messages, lost & found posts, and Vault posts.
• Usage data — page visits, feature interactions, and timestamps for moderation and platform improvement.

3. The Vault — Anonymous Posts

The Vault allows students to post without their name visible to other users. However, your identity is retained server-side and is accessible to IVY administrators for moderation purposes. We do this to prevent abuse, harassment, and illegal content. Vault posts are anonymous to other students — not to IVY. If you post content that violates our Terms of Service, your account may be actioned regardless of whether the post was made anonymously.

4. Direct Messages

Messages are stored in our database and may be reviewed by administrators in response to user reports. We do not proactively read private messages. Messages are campus-isolated — you can only message other students at your institution.

5. How We Use Your Information

• To verify your student status and maintain campus isolation
• To display your name and profile on the platform
• To send you platform notifications (if enabled)
• To moderate content and enforce our Terms of Service
• To improve platform features and performance

6. Data Sharing

We do not sell your data. We do not share your personal information with third parties for advertising or marketing. We use Supabase (database and authentication), Vercel (hosting), and Expo (mobile app delivery) as infrastructure providers — each bound by their own privacy policies and data processing agreements.

7. Data Retention and Deletion

Your account and associated data are retained until you request deletion. To delete your account, email support@tryivy.app from your registered .edu address. We will delete your profile, posts, and messages within 30 days, except where retention is required for ongoing moderation investigations or legal compliance.

8. Security

All data is encrypted in transit (TLS) and at rest. Authentication is handled by Supabase Auth with email verification. Row-level security policies enforce campus isolation at the database layer.

9. Contact

Questions about this policy? Email us at support@tryivy.app.