betaprivacy notice
plain english, no dark patterns. eu hosted, gdpr shaped.
who's behind it
lowkey social is an independent beta project run by alfred murray. i'm the data controller. questions, complaints or requests go straight to me.
what gets stored
your email and password hash (handled by the auth service), your profile (handle, name, bio, avatar colour, pronouns and city if you add them), your interests, vibe, feed pace and daily limit, your posts, likes, comments, follows, chats and messages, your daily minutes used, and your age band with the method used to verify it.
the age check never leaves your device
the free face age check downloads a small open-source model into your browser and estimates an age locally. no photo, video, frame or face template is uploaded or stored, ever. we only save the result: 'under 18' or '18+', plus which method produced it. eu eid options (mitid, altid, eu identity wallet) return an age band only — never your name, address or id number. eid handshakes are simulated in this beta.
legal bases (gdpr art. 6)
contract: running your account, feed, chats and streaks. legal obligation and protection of minors: verifying your age band and keeping under-18s and adults apart. consent: using your camera for the face age check, which you give before the camera opens and can refuse by using an eid instead. legitimate interest: keeping the beta secure and abuse-free.
the age split
your age band is enforced in the database itself, not just in the app. under-18 accounts cannot read adult profiles, posts, comments or messages, and adults cannot read under-18 content. bands are immutable once verified — ask me if a verification went wrong.
where it lives and who sees it
data is stored in the eu on managed postgres infrastructure. no data is sold, no ad networks are wired in, and no third-party trackers or analytics run in the app. only i can access the database, for support and moderation.
how long it's kept
until you delete it. deleting your account wipes your profile, posts, likes, comments, follows, memberships, messages, usage rows and consent records immediately. as this is a beta, i may reset all demo data between presentations.
your rights
access, rectification, erasure, restriction, portability and objection. 'export my data' in settings gives you a machine-readable json copy instantly, and 'delete my account' erases everything. you can also complain to your national data protection authority (in denmark, datatilsynet).
children
under-18 accounts are supported on purpose and are separated from adult accounts by design. we ask for no more data from minors than from adults, and there's no profiling for advertising.
beta caveat
lowkey social is an early beta shown at demos. features, wording and data handling can change, and age estimates can be wrong. tell me anything that looks off.
contact and beta feedback: alfredcasper1010@gmail.com