Burdn Privacy Policy

Ekuty LLC ("we", "our", or "us") operates Burdn, an anonymous venting app where people post under personas and receive real replies ("Burdn" or the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Burdn, you agree to the practices described here.

We collect only what we need to run Burdn safely: • Sign-in identifiers: When you sign in with your email address, we store your email address and a short-lived, single-use sign-in code so we can confirm the address is yours. When you sign in with Apple or Google instead, we receive a stable account identifier from that provider (a provider subject) and, when you choose to share it, your email address. These are used to recognize your account on future sign-ins. • Content and activity you create: the Burdns and replies you post, likes, reactions, saves, follows, reports you submit, blocks you set, and related usage activity such as which Burdns you have read and your daily limits. • Settings: your notification preferences, content-language preferences, and the time zone and language of your device, which we use to send notifications at sensible times. • Location: the Burdn app does not request or collect your device location. If we add optional location-based features later, we will update this policy and ask for permission before using them. • Device and push information: if you enable notifications, we store the push token needed to deliver them, together with your device platform, app version, and a device identifier. For sign-in sessions we keep a hashed device identifier and a general device label. • IP address: our servers receive your IP address with each request. The Burdn service uses it only in hashed form, held temporarily in memory, to limit repeated sign-in attempts. It is not stored with your account, and our public web proxy does not keep request logs. • Crash reports: if crash reporting is on, the app sends a report to Sentry when it crashes or hits an error. A report contains technical details of the error, your device model and operating system, and the app version. We configure it so reports are not linked to your Burdn account and to strip personal information it can identify before a report is sent. You can turn crash reporting off in the app's Safety Center (Send crash reports).

• We do not require a public, real-name profile. Your posts appear under a persona. • We do not upload or import your contacts or address book. • We do not collect your device location. • We do not show ads, and we do not track you across other companies' apps or websites. • We do not expose your real account identity to other users through your personas.

Burdn is built so you can be honest without being identifiable to other users. • Public posts and replies appear under a persona, not your real account. • Your real account identity — including any email or sign-in identifier — is never shown publicly to other users. • Internally, our backend keeps the minimum account references needed to operate the Service: to authenticate you, support account deletion, enforce limits, and power reports, blocks, moderation, and abuse prevention. These internal references are not part of your public persona.

Burdn runs its own sign-in. There is no password on a Burdn account, and we never ask you to create one. • Email: you enter your email address and we send you a short-lived, single-use code. Entering that code signs you in. The code expires shortly after it is sent and can only be used once. • Apple or Google: if you sign in with Apple or Google instead, that provider confirms your identity to us and sends us a stable account identifier for you, plus your email address if you choose to share it. We verify what the provider sends before signing you in. Once you are signed in, Burdn issues your device a session directly. Sessions expire on their own and can be ended by signing out or by deleting your account. Because there is no password, there is no password for us to store or for anyone to leak or reuse.

We use the information above to: • Operate, maintain, and improve the Service. • Authenticate you and keep your account secure. • Show feeds, Burdns, and replies, and enforce posting and usage limits. • Prevent, detect, and respond to abuse, and support reports, blocks, moderation, and user safety. • Send notifications, only if you have enabled them. • Find and fix crashes and errors, if crash reporting is on. We do not sell your personal data. We do not use your data to build advertising profiles.

Burdn authenticates you itself rather than through an outside identity provider. Beyond that, we rely on a small number of providers to deliver the Service: • Amazon Web Services, which hosts the Burdn servers and database, and whose email service (Amazon Simple Email Service) delivers the sign-in codes we send to your email address. Your email address is shared with this email delivery service for that purpose. • Apple and Google, if you choose to sign in with one of them. That provider confirms your identity to us and shares a stable account identifier, and your email address when you choose to share it. • RevenueCat, which manages Burdn Premium subscription status on our behalf. It receives an identifier for your account and your subscription state. Your payment details are handled by the Apple App Store or Google Play and are never received by us. • Expo push services, used to deliver notifications if you enable them. Expo receives your push token and the text of the notification. • Sentry, which receives crash reports from the app if crash reporting is on, as described above. • Cloudflare, which serves this website. It does not receive your Burdn account data or the content you post in the app. These providers process information only as needed to provide their service to us, under their own terms and privacy commitments.

We keep information for as long as your account is active and as long as we need it for the purposes described in this policy. Specifically: • Account and profile information, your content, and your activity: until you delete them or delete your account. • Email sign-in codes: each code expires shortly after it is sent and can be used only once. The record of a code we sent, including the email address it was sent to, is not currently deleted on a fixed schedule, including when you delete your account. • Sign-in sessions: sessions expire on their own and are ended when you sign out or delete your account. Records of expired or ended sessions are not currently deleted on a fixed schedule. They do not contain your email address. • Reports, moderation, and abuse-prevention records: kept for as long as they are needed for safety, abuse prevention, and legal reasons, including after an account is deleted. • Server logs: our servers' operational logs are rotated automatically by size, so older entries are overwritten as new ones are written. • Backups: our database backups are encrypted. Daily backups expire after 35 days and monthly backups after about 13 months, and backup copies are fully gone within about 14 months. • Purchase and subscription records: kept by Apple, Google, and RevenueCat under their own policies.

You can delete your account at any time in the app (You → Account actions → Delete account). If you cannot sign in, you can ask us to delete it by email, as described at burdn.app/delete-account. When your account is deleted: • Your email address and other personal details are removed from your account, and all of your sessions are signed out. • The Burdns and replies you posted are removed from Burdn and their text and persona are erased. • Your likes, reactions, saves, reads, follows, drafts, push tokens, notifications, and notification settings are deleted, and notifications about your content are removed from other people's inboxes. • Replies other people wrote under your Burdns are no longer shown. Their text belongs to them and is not deleted with your account. • We keep a minimal record that the account was deleted, so it cannot be signed in to again, along with reports, moderation, block, and abuse-prevention records. These records are linked to an internal identifier rather than to your email address. • Where the law requires it, content that is the subject of an open child-safety report may be preserved under restricted access, even though it is no longer shown. • Purchase records are kept by Apple, Google, and RevenueCat under their own policies. Apart from the records described above, your data is removed from our live systems when you delete your account. Copies in our encrypted backups expire on a fixed schedule within about 14 months. Deleting your account does not cancel a Burdn Premium subscription bought through the App Store or Google Play. Cancel it in the store to stop future charges.

Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to or limit certain processing. You can delete your account in the app at any time, or ask us to delete it at burdn.app/delete-account. For any privacy request or question, contact us at support@burdn.app and we will respond as required by applicable law.

Burdn is not intended for anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, please contact us at support@burdn.app so we can take appropriate action.

We use reasonable technical and organizational safeguards to protect your information, including encryption in transit and restricted internal access. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we work to protect your data and to address issues promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and post the revised policy on this page. Your continued use of Burdn after changes take effect means you accept the updated policy.

If you have questions about this Privacy Policy or how we handle your data, contact us at: Ekuty LLC support@burdn.app