Privacy (Internal MVP)

Internal draft summary of data handling. Replace with finalized policy before public launch.

What we store

Account data: email, password hash, session identifiers.
Profile data: display name, bio, attributes, and location (city/region/country + coordinates).
Media references: photo/video storage keys; moderated status.
Payments: order records, deposit addresses, credit ledger entries (no private keys stored).

Media storage

In development we use MinIO; in staging/prod we use Cloudflare R2.
Uploads use presigned URLs; the app stores only references (keys/URLs), not raw files in the DB.

Deactivation

Deactivated accounts do not appear in Search.
Logging in reactivates the account.
Credits remain on the account across deactivation/reactivation.

Contact

Questions? Email privacy@sugarconnections.local.