CommonGround

Privacy Policy

Draft — last updated 2026-07-26, pending legal review before public launch.

This is a health-adjacent app, and we treat status data with the same rigor as sensitive health data as a matter of trust — regardless of what any specific regulation requires.

What we collect

Your profile information (name, age, city, gender, orientation, bio, photos), your status (HIV+/HSV-1/HSV-2, self-reported), your prompt answers, and your messages with matches. We collect only what the app needs to function — no location beyond city/metro level, ever.

How it's protected

Status and message content are encrypted at rest and in transit, to the same standard — message content isn't treated as less sensitive than your status. Photos are stored with signed, access-controlled URLs, never a public bucket.

Who can see it

Your status is visible to other members within the app, the same way your city is — never hidden, never indexed by search engines, never accessible outside an authenticated session.

What we never do

We never sell or share your status data with third parties — no ad-tech, no data brokers, no "anonymized" data sales. No ads, ever.

Account existence

Signup, login, and password reset all return identical responses whether or not an email is already registered. On most apps that's a minor hygiene detail; here, confirming an account exists would effectively confirm someone's status to whoever tried the address, so we treat it as a hard requirement.

Your data, your control

You can permanently delete your account and all of your data at any time, from your account settings — a real, immediate purge, not a soft deactivation.

Legal review

Several states have specific statutory confidentiality protections for HIV/STI status. This policy is a draft pending legal review before public launch, not a final legal document.