Privacy Policy

Tag, You're It is developed and operated by Layer One IT Consultants LLC in partnership with Ghostweave Labs LLC.

In this Privacy Policy, “we,” “our,” or “us” refers to that operating team. This Privacy Policy explains how we collect, use, and protect your information when you use the Tag, You’re It mobile application and website (the “Service”).

Information We Collect

• Account information: Name, email address, username, and password when you register.
• Profile content: Photos, videos, posts, interests, and other content you choose to upload.
• Camera & media access: With your permission, the app may access your device camera and photo library to let you upload profile pictures, spotlight media, and wall posts.
• Usage data: Basic analytics such as last active time to show online status to friends.
• Optional Pulse preferences:If you use Settings → The Pulse, we store choices such as your Pulse mood and whether to show the “Your mod” line. You can change or withdraw these anytime.
• Optional Spotify connection:If you choose Connect Spotify, we complete OAuth with Spotify AB (“Spotify”) and store encryptedSpotify access and refresh tokens on our servers. With your authorization, our servers call Spotify’s Web API using those tokens to read your currently playing track, general playback state (for example playing versus paused), and recently played tracks, within the scopes you approve at connect time. We may store a normalized playlist identifier if you pin a playlist to your profile. We may store basic Spotify profile identifiers returned by Spotify’s “me” endpoint as needed to maintain the connection. Spotify’s own privacy policy and terms apply to data processed on Spotify’s systems: spotify.com/legal/privacy-policy.

How We Use Your Information

• To provide and maintain the Service.
• To display your profile and content to your friends and connections.
• To send notifications about friend requests, messages, and wall posts.
• To improve and personalize your experience.
• If you choose to use the optional Pulse feature (see below), to generate or display on-device wellness-oriented copy tied to your preferences.
• If you connect Spotify, to show your listening status on your own dashboard and, when the feature is enabled and Spotify reports active playback, to show approved friends a short summary of what you are listening to (or that playback is paused) inside the Service. You can disconnect Spotify in Settings; revoking access in your Spotify account settings also stops our API access once tokens expire or are invalidated.
• If you separately opt in under Settings → The Pulse to allow Spotify listening context to inform the optional Pulse experience, our servers may derive a brief, non-public summary of recent listening from Spotify’s API to include in a minimal server-side prompt for an optional AI-assisted line, as described in the Pulse section below. We instruct the model not to repeat specific track or artist names in user-visible output. You can turn that option off anytime in Settings.

The Pulse (optional wellness feature)

The Pulse is 100% optional. You are never required to open the Pulse page, select a mood, or use any Pulse copy to use the rest of the Service. You may ignore Pulse entirely with no effect on messaging, your profile, friends, or subscriptions.

Pulse is a calm, in-app surface for daily rhythm and gentle breaks from work-style intensity. It can show a headline and a short line of the day, optional reminders (for example hydration or screen breaks), and an optional “Your mod: …” line that acts as a light tone-setting phrase—not instructions, medical advice, or workplace policy.

Optional display of the “Your mod” line:In Settings → The Pulse you can turn the entire “Your mod: …” line off. When it is off, we do not request an AI-generated mod line for your account on that page, and only the built-in (non–third-party-AI) Pulse copy may still appear elsewhere in Pulse if you visit it. Turning the line off is reversible anytime in Settings.

AI-assisted mod line (Anthropic Claude):If we enable Anthropic’s Claude API on our servers and your account is eligible, then when the “Your mod” line is turned on and you view Pulse, our servers may send a minimal promptto Anthropic PBC (“Anthropic”) to generate that single phrase. The prompt is limited to what is needed for context—for example your first name (or the first name we already store on your profile), your selected Pulse mood category, and your current time-of-day rhythm phase (for example morning or wind-down). We do not send your message history, wall posts, photos, or full profile text to Anthropic for this feature. Requests are authenticated on our servers; your Anthropic account is not required. Anthropic processes the request under their terms and privacy policy as an independent provider.

If Anthropic is unavailable, you turn the mod line off, we have not configured an API key, or you are under 16, you receive a non–AI-generated mod line from our own fixed templates only—we do not call external generative AI for users under 16 for this line.

We may cache a generated mod line briefly on our servers so we do not repeat identical paid API calls for the same user, calendar day, mood, and phase. That cache is not used for advertising and is not sold.

Spotify (optional social sync)

Spotify integration is optional. Nothing requires you to link a Spotify account. When linked, friends you have approved inside the Service may see high-level listening information we receive from Spotify (for example track title and artist, or that you are paused), subject to your in-app settings, our feature design, and Spotify’s own controls such as Private Session. We do not sell listening history. For licensing and developer rules that apply to the integration, see Spotify’s developer and end-user terms.

Camera & Photo Permissions

We request camera and photo library access solely for the purpose of allowing you to upload profile photos, spotlight media, and wall post images/videos. Photos and videos are uploaded to our servers and stored securely. We do not access your camera or photo library in the background or for any purpose other than content you explicitly choose to share.

Data Sharing

We do not sell, trade, or rent your personal information to third parties. Your content is visible only to your approved friends and connections within the Service, unless you choose to make it public.

For the optional Pulse AI-assisted mod line only, we may share the minimal prompt elements described above with Anthropicso their system can return a short phrase. We do not sell that data; Anthropic’s use is governed by their agreements with us and their public policies. You avoid this disclosure entirely by disabling the “Your mod” line in Settings → The Pulse, or by not visiting Pulse.

When you use Spotify, Spotify processes authentication and account data on its own systems. We exchange authorization codes and tokens with Spotify only for the optional features you enable. Listening summaries you choose to show friends are shared within the Service to those friends, not sold to advertisers.

Data Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and secure session management to protect your data. Spotify tokens at rest are encrypted with a server-side key separate from your password hash.

Children’s Privacy

Accounts for users under 16 require parental consent and are subject to enhanced safety features including parental oversight controls, content moderation, and restricted interactions. For those accounts we do not use external generative AI (such as Anthropic) to create the Pulse “Your mod” line; only our built-in templates apply. Pulse itself remains optional for all users.

If Spotify is available to a minor’s account, linking Spotify is still optional; parents and teens should review Spotify’s policies and family controls together. Disconnecting Spotify removes our ability to fetch new listening data (we delete or deactivate stored tokens according to our retention practices).

Data Deletion

You may request deletion of your account and all associated data by contacting us. When a user account is deleted, profile data, posts, photos, themes, and connected integration data such as stored Spotify tokens are permanently removed or anonymized in line with our technical architecture.

Contact Us

If you have questions about this Privacy Policy, contact us at: [email protected]

Published by Layer One IT Consultants LLC, in partnership with Ghostweave Labs LLC.