STAND Privacy Policy

Status: Published at [standrank.com/privacy](https://standrank.com/privacy). Counsel may still refine wording. This page is the public policy for the iPhone app and the website.

Operator: Emre Türkoğlu, individual Apple Developer (not a company).

Contact: team@standrank.com

Last updated: 3 October 2026

STAND is a public ranking and social product for people 18 and older. Profiles are public. There is no private-account mode.

What STAND collects

• Account: display name, username, Sign in with Apple identity token / subject, optional private-relay email, password hash for app-created accounts, city / district you choose, gender, birth date if you add it, profession, interests, bio.
• Profile and UGC: photos, videos, voice notes, public posts, STANDING moments you confirm.
• Social graph: ratings (scores + optional comment), AURA / picks, follows, blocks, reports.
• Messages: text and media you send. Messages are stored on STAND so conversations work. They are not end-to-end encrypted.
• Devices: APNs device token so STAND can send alerts you allow.
• First impression / STANDING AI: a photo or frames you choose, plus first name and profile facts you already entered (gender, age, place, profession). Email, username, and your user id are not sent to the model.
• Identity verification: a photo of an identity document (passport, national ID, or driver’s license) and a live selfie. STAND staff reviews them. There is no third-party identity / KYC provider. After a decision, those files are physically deleted from storage. STAND does not keep a document number. Identity verification does not change Level, SWAY, AURA, or rankings.
• Approximate WORLD pin: the centroid of the city or district on your profile, with jitter. STAND does not collect live GPS and does not run Nearby or background location.

What STAND does not collect

• Live GPS, precise location, or background location.
• Advertising identifiers or tracking pixels. STAND does not use App Tracking Transparency.
• Payment card numbers. POWER purchases are not offered. There is no live In-App Purchase.

Why

Operate the ranking, show public profiles, deliver messages and alerts, prevent abuse (including same-day AURA farm after delete / re-register), and keep the product working.

Who else sees data

• Google Cloud Storage for media bytes. Identity document and selfie files use a private bucket (not the public profile-media bucket) and are deleted after review.
• Apple for Sign in with Apple and APNs.
• OpenAI when you run first impression or confirm a STANDING moment.
• Mapbox tiles for WORLD. STAND does not send your live coordinates.
• Support mail: team@standrank.com.

Retention and deletion

• Deactivate: profile leaves ranks and sign-in is blocked. Media and messages are not removed by this step. Reopening requires an explicit reactivate step on the same Apple identity.
• Delete account: terminal. STAND does not hard-delete the member row. Identity is anonymized (display name becomes a generic STAND member label; username becomes a unique tombstone; email, bio, birth date, photos, Apple subject, and password hash are cleared). Ratings you gave and received become inactive. AURA / picks you sent are removed and the recipient’s AURA is reduced once. Follows both ways are removed. Pending STANDING analysis is cancelled. Device and refresh tokens are revoked. Apple users: Sign in with Apple is revoked first; if revoke fails, deletion does not complete.
• Messages: conversation history for the other person is not erased and is not rewritten as “this message was deleted.” The sender is no longer an active profile. Media you sent (photo / video / voice) is removed from storage and URLs are stripped; text stays.
• Anti-abuse tombstone: a one-way hash of your Apple subject (and email if present) is kept so the same-day free AURA quota cannot be reset by deleting and registering again. The hash is not your name, email, photo, or Apple subject in the clear.

Your choices

• Skip first impression.
• Hide a STANDING moment you own.
• Block another member (stops new interaction; the public profile remains visible).
• Deactivate or delete from Settings → DAHA → SESSION. Deletion cannot be undone.

Contact

team@standrank.com

Governing law: Republic of Türkiye.