Privacy policy

1. AGREE DISAGREE LIMITED, registered in England and Wales under number 17452567, is the controller of personal data processed for the Agree Disagree app, related account services and our company website. Use Contact us and mark privacy correspondence “Privacy”. Company particulars and contact information are available at Company information. This notice explains our own processing; an app store or an external site may separately process information under its own notice.

2. We collect the information you provide to create and maintain an account: email address, username, display name, sign-in information, date of birth and country of residence. Adults are asked for a gender selection; it is not displayed on your public profile. We do not collect gender from 16–17-year-olds. When they turn 18, we ask them to add their gender and review the current Terms of Use and Privacy Policy before adult demographic contributions begin. You may provide a biography, website, interests and profile or cover photos. Authentication providers handle password and session information. Required fields are identified at collection; without information needed to establish an eligible, secure account, we cannot provide that account. Optional profile fields need not be completed.

3. We hold questions, statements, votes, comments, replies, follows, reposts, saved questions, audience settings, blocks and mutes associated with your account. We also process drafts and preferences stored for the relevant feature. Reports, appeals, support correspondence and information submitted by another member can refer to you. Where another person supplies your information, sources can include their posts, reports or correspondence; we will provide the information required by law unless an applicable exception permits otherwise.

4. When you use the app or website, our systems and providers process connection and operational information such as IP address, request time, app or browser version, device information, session identifiers, error records and security events. We record activity needed to operate votes, feeds, entitlements, reports and account controls. If you enable push notifications, we process the device delivery identifier and your notification preferences for that purpose. The contents of service notifications can be visible on your device’s lock screen according to its settings. Expo stores push delivery tokens; notification contents are queued only while being delivered. A token does not expire automatically just because time has passed. Notification controls affect delivery; removing tokens from our account records and handling provider-held copies are separate steps.

5. If you purchase a paid feature, the payment provider processes the payment under its own arrangements. We process transaction references, product and billing-period information, entitlement status and refund or cancellation events needed to supply and support the purchase. We do not receive your complete payment-card details through an app-store purchase. Any different payment method will be explained before it is used. We use RevenueCat to manage app-store subscription status. The app shares an internal account identifier with RevenueCat when you sign in, including before you make a purchase, along with purchase, entitlement and related technical information needed for this service.

6. Your published profile and content are visible according to the audience controls supplied with each feature. Individual voting history, saved lists and private account controls are not published as a public profile list. Votes change displayed totals, however, and a small number of answers can allow another person to infer a choice. Restricting an audience or blocking an account cannot recover screenshots or prevent disclosure by someone who already viewed the content. Report and appeal information is restricted to those who need it for the relevant process, subject to lawful disclosures.

7. We process account and feature information objectively necessary to provide the service you request on the basis of contract under Article 6(1)(b) of the UK GDPR and EU GDPR where applicable. This includes secure access, publishing your submissions, recording ordinary votes, preventing duplicate votes, changing your answer and supplying a paid entitlement. Contract does not cover unrelated analytics, research or advertising. Sensitive answers require an additional condition as described below.

8. We rely on legitimate interests under Article 6(1)(f) for necessary and proportionate security, abuse prevention, moderation, complaints and reliability. For eligible adults’ ordinary votes, we also assess legitimate interests for producing protected group statistics offered through Plus: helping members understand different perspectives and funding the Service. We provide advance information, use an age band, country and self-reported gender for those statistics, and honour an objection without requiring a reason. This is separate from the basis for recording your vote. It does not authorise sensitive profiling or unrelated commercial reuse.

9. We rely on Article 6(1)(c) where a specific legal obligation requires processing, such as applicable accounting, regulatory or lawful disclosure duties. Where we must keep or use information for legal claims, the applicable basis can be legitimate interests and, for sensitive information, the legal-claims condition where its requirements are met. We limit such processing to the relevant obligation or claim.

10. Where an activity requires consent, we obtain the appropriate separate choice before it starts and rely on Article 6(1)(a), together with any additional sensitive-data condition required. Choices identify their purpose, version and date. The optional sensitive-vote saving choice is offered during account setup and in Settings → Voting preferences, separately from the Terms agreement. Existing withdrawal and data-rights controls remain in Settings → Privacy and data → Privacy request. Accepting our terms, acknowledging this policy or continuing to use the app does not give consent to sensitive voting, marketing or another activity requiring its own choice.

11. An answer can directly reveal political opinions, religion or philosophical beliefs, health, ethnicity, trade-union membership, sex life or sexual orientation. Saving such answers with your account requires the separate explicit permission described in Voting preferences under Article 9(2)(a) where applicable. The choice starts unselected. If permission has not been given, sensitive or unreviewed votes cannot be saved; the app directs you to Voting preferences. Ordinary voting does not need that separate permission. Sensitive and unreviewed answers are excluded from demographic Insights in this version, even when someone has permitted us to save them. We classify the question, not the person, and do not infer sensitive characteristics from voting history.

12. Use Settings → Privacy and data → Privacy request for access, export, vote removal, privacy requests and existing permissions. Account deletion and deactivation are under Your account. Ordinary demographic contributions do not require an opt-in or accept/decline prompt. Use Privacy request → Object to how my information is used → Stop demographic contributions to apply an objection immediately in the app. We stop future contributions, remove linked contributions and keep your ordinary saved votes. You can also contact us. Any earlier objection is respected. Existing sensitive-insights permissions can still be withdrawn, although no new sensitive contributions are collected. Withdrawing permission to save sensitive answers removes saved sensitive and unclassified answers and their contributions; recorded ordinary answers remain. Remove all my votes deletes all saved answers. These actions update affected totals and take affected demographic reports offline; copies already seen cannot be recalled. Private choice history and your data download include available versioned wording and dates. Restricted accounts retain access to withdrawal and rights requests. Withdrawal does not make earlier lawful processing unlawful.

13. Plus demographic insights use separate adult age-band, self-reported gender and country-of-residence breakdowns. Age bands are derived from a declared date of birth; this is not identity verification. Missing age information, known under-18s and accounts known to be ineligible are excluded. A person who turns 18 must first complete their deferred adult details and review the current policies. Their old under-18 votes are not backfilled into demographic Insights. Gender and country are self-reported. Before ordinary contributions begin we provide a short explanation; you can object in Privacy request or through our privacy contact. Sensitive and unreviewed answers are excluded from demographic analytics. Linked contributions are personal data restricted to the backend and kept for up to 90 days. The private-test statistics configuration includes the UK, Ireland and United States. This does not open registration in Ireland; public launch registration is planned for the UK and United States. Plus receives aggregate outputs only: no names, usernames, emails, account IDs, exact dates of birth, precise locations, individual vote records or followers’ choices. Reports are generated automatically when suitable data exists, with separate dimensions, a minimum of 20 per group and five answers on each side, broad participant ranges, and suppression of small remainders. Percentages include a small random privacy adjustment and are rounded to the nearest 5%; they are estimates, not exact counts. Each report is fixed so repeated requests cannot average away that adjustment. Changed or withdrawn contributions take affected reports offline rather than generating a slightly different replacement. These controls reduce disclosure risk; a group of 20 alone does not establish anonymity. Results describe eligible participants and are not a representative population survey.

14. A separate personal-data research programme or commercial research export is not part of the launch service described by this notice. If we introduce one, we will explain its purpose, data, recipients and legal grounds before collection or reuse begins, obtain separate consent where required and provide the relevant rights and safeguards. Existing votes will not automatically be added to it because a notice has changed. A programme’s label as “research” does not itself establish a legal exemption.

15. We do not build inferred profiles of a person’s politics, religion, sexuality, health, ethnicity or similar sensitive characteristics from their voting history. For adults with personalisation enabled, recommendations use chosen categories and subcategories, country of residence and recent topic engagement from votes, comments, saves and views. The choice of Agree or Disagree is not used to learn interests. Automatic learning excludes sensitive and unreviewed answers and sensitive topic families; other topics remain discoverable. You can edit your interests or switch personalisation off in Settings. Viewing signals are retained for up to 30 days and temporary ranking snapshots for up to two hours, with expired records cleared hourly. Turning personalisation off clears these viewing signals and ranking snapshots. This feed-ranking model is separate from automated content screening described above; screening outcomes can be challenged through support. We do not use sensitive vote profiles for advertising. Under-18 demographic contributions, personalised feeds and optional marketing are disabled under our launch policy. Ordinary voting remains available subject to account eligibility.

16. Providers process information needed for their roles. These include Supabase for account, database and photo storage; Expo for app delivery, updates and optional push notifications; RevenueCat for subscription management; Microsoft 365 for correspondence; Resend for transactional account messages and contact-form notifications; OpenAI for AI screening of question and comment text, submitted profile text and new profile or cover photos; OpenAI Sites and Cloudflare for the company website, contact inbox, hosting, network and security; and the relevant app store and payment provider for distribution and purchases. Providers acting as processors must follow contractual instructions and appropriate safeguards. Some providers act as independent controllers for their own account, payment or platform operations. An optional identity-check provider will be identified, with its own data and retention information, before you start a Verified check. It is separate from ordinary signup. Authorised Company personnel have access where needed for support, security, administration and moderation.

17. We may disclose limited information to professional advisers, courts, regulators or law-enforcement authorities where legally required or otherwise lawfully necessary to protect rights or safety. We assess the request and disclose only what is appropriate. Details of a complaint may be shared where necessary for a fair response or a legal process; reporter identities are not routinely published to the wider membership.

18. Providers and their subprocessors may process information outside the United Kingdom, including in the United States and Singapore, with other locations used by relevant subprocessors and support services. Where a restricted international transfer is involved, it must be supported by an applicable adequacy arrangement or appropriate contractual or other legal safeguards, with the assessment required by law. For AI content screening, we use a US-based processor under standard contractual clauses supplemented by the UK Addendum. Its processing agreement also requires safeguards for onward processing by its subprocessors. You may request information about relevant locations and a copy or explanation of the safeguards at the privacy contact, subject to necessary redactions. A provider’s primary database location does not mean all its processing takes place there.

19. We keep account information and activity while needed to maintain your account and the features you use, subject to your deletion choices and any necessary legal or safety retention. Published content is kept while it remains published unless removed earlier. Deactivation preserves information for reactivation and is not deletion. We do not retain entire voting histories indefinitely merely because they might have future commercial value.

20. A deletion request starts removal of your account and the linked information covered by that process, including private activity and uploaded personal content where applicable. Limited evidence may be retained where necessary for a specific legal duty, unresolved safety concern, dispute or legal claim. Retention is determined by the purpose, seriousness and status of that matter, relevant limitation periods and the minimum information required. Deletion from active systems does not necessarily remove a separate provider backup immediately. Any retained backup copies remain restricted and follow the applicable provider retention arrangements; a restoration must reapply deletions before returning records to ordinary service use. We do not promise one fixed deletion period across database backups, stored photos, email systems and provider logs.

21. Operational logs are retained for the period needed to diagnose faults, detect abuse and resolve security events, taking account of the incident lifecycle and the settings applicable to each provider. Correspondence and complaint records are reviewed when the matter closes and kept only while needed for necessary follow-up, a legal obligation or a claim. Deleting a message from an inbox may leave a recoverable copy for the mailbox’s configured recovery period or a lawful hold; these copies are separate from the website inbox and delivery logs. Purchase and financial records are kept for applicable accounting and tax requirements. Consent and policy-acceptance evidence is retained as needed to demonstrate the relevant choice and handle legal obligations or claims. When a purpose ends, information is deleted or genuinely anonymised unless a further lawful retention requirement applies. Our automated screening receipts are normally removed after 48 hours, or 49 hours for contextual-check receipts, on the next successful hourly cleanup. Held-question review entries are normally removed after 30 days from creation, or earlier through account deletion. A monthly aggregate screening-cost total is separate from the per-request records. These periods do not describe the retention of the published question itself or a separately justified safety or legal case. Comment and profile approval records contain account-linked fingerprints of the checked text, rather than extra copies of the text; approvals expire after five minutes and records are cleared after 48 hours on the next successful hourly cleanup. A successful photo check does not create an additional copy of the photo in our screening-receipt store.

22. The app uses local storage for sign-in sessions, preferences and unfinished drafts, and selected features create files you choose to save or share. Website cookies and similar technologies may support necessary access or requested functionality. We provide information about their use and apply the relevant storage/access rules. Any optional tracking or other use requiring consent will be subject to a separate choice before activation. A general privacy-policy acknowledgement is not cookie or tracking consent.

23. Photo access is limited to the selection and upload features you use. We do not request access to your contacts, microphone or precise location as part of this launch model. Any materially different permission or use will be explained when requested. You can control permissions and notifications through your device, although turning off a permission needed for a particular feature can prevent that feature from working.

24. We use proportionate technical and organisational measures to restrict access, protect accounts and safeguard information. No system can guarantee absolute security. We assess incidents, take necessary remedial action and notify regulators and affected people where the legal requirements are met. Do not include passwords, full card details or unnecessary identity documents in support messages or public posts.

25. Your right to object. Subject to the conditions and exemptions in applicable law, you can request access, correction, erasure, restriction and portability of your personal data. You may withdraw consent and object to processing based on legitimate interests on grounds relating to your circumstances. Such processing must stop unless we demonstrate overriding compelling grounds or it is needed for legal claims. You can object to direct marketing at any time, and that marketing must stop. These rights are not waived by accepting our terms.

26. Use Your account to correct your birthday, country of residence or gender, and Privacy request for data downloads, vote removal and demographic objections. Birthday corrections require your current password and are normally limited to once every 90 days. Corrections that could bypass an age restriction need review. Contact us if a correction cannot be completed in the app; this does not remove your right to correct inaccurate data. Changes to these demographic details remove linked contributions and withdraw affected reports; they do not relabel past votes or reveal a before-and-after comparison. Ordinary saved votes are kept. You may also use Contact us, marked “Privacy”, to exercise a right. We may request proportionate information to confirm identity. We respond within the applicable statutory period, normally one month, and explain any lawful extension or refusal and available complaint routes. You can complain to the UK Information Commissioner’s Office at ICO complaints or a competent authority where you live. You need not complain to us first.

27. Accounts are for people aged 16 and over. Planned public registration is limited to the United Kingdom and United States; public registration remains closed during private testing. We collect a declared date of birth to determine eligibility and age-related settings. This is not independent age verification. Accounts declared as 16–17 start private and can be made public in Settings; profile details and comments on other people’s questions can still be visible. Their votes count towards question totals but do not contribute to demographic Insights, and behavioural feed personalisation is disabled. Gender is deferred until 18. At 18, the existing account-details process asks for gender, acceptance of the current Terms and acknowledgement of the Privacy Policy. This does not backfill old teen votes or switch on sensitive-vote saving, personalised recommendations or marketing. On supported iOS versions, we check whether Apple’s regional age requirements apply. For covered accounts, we use Apple’s age category to apply age restrictions and check consistency with the declared birthday. We verify the signed Apple app transaction and retain a protected reference linked to the app account so we can respond to withdrawal of parental permission. We do not use Apple’s age or permission information for demographic Insights. These regional-check provisions apply to current private app testing as well as launch when available. Do not send identity documents or selfies to support. Use Contact us to report a suspected underage account or challenge an incorrect age decision. We restrict ineligible accounts and handle their information according to applicable law.

28. We will publish a revision date and explain material changes before a new use begins where required. Fresh consent is obtained where needed. This notice does not authorise undisclosed advertising, use of private content by an external AI service beyond the content screening described in this notice, training of a general-purpose AI model on your personal submissions or unrelated sale of identifiable data. Such a proposal requires its own assessment, lawful grounds and information before it can operate.

29. If EU or EEA data-protection law applies, references to the GDPR include the EU GDPR and you may complain to the supervisory authority in your country of habitual residence, workplace or the alleged infringement. Any representative required for our EU services will be identified in the company information before those services open. UK governing-law provisions do not remove mandatory local privacy or consumer rights.

30. Where an applicable US state privacy law grants you rights, you may request access, correction, deletion or a portable copy, and exercise applicable rights to opt out of sale, sharing for cross-context behavioural advertising, targeted advertising or certain profiling. We do not sell personal data or share it for cross-context behavioural advertising under this launch model. We do not penalise you for exercising a protected right. Send requests or an appeal of a refused request to Contact us. We verify requests proportionately, support authorised agents where required, respond within the applicable statutory period and explain any exemption or appeal route. The categories of information, purposes, recipients and retention criteria are set out in this notice.