Draft Privacy Policy
Updated August 31, 2026
How Overlap currently handles account, social, availability, event, and safety information.
Pre-launch draft
This placeholder needs legal review and completed operator details before public release.
Draft status
This is a transparent pre-launch draft, not a final legal policy. The operator’s legal name, address, jurisdiction-specific rights, retention schedule, and minimum age must be confirmed before public release.
The descriptions below reflect the current product and code. They must be reviewed whenever Overlap adds analytics, advertising, payments, push delivery, messaging, or new service providers.
Information Overlap handles
•
Authentication information supplied through Google, Apple, and Supabase, such as an account identifier, email address, display name, and avatar when available.
•
Profile information you provide, including display name, biography, optional phone number, and interests.
•
Social information such as friend requests, friendships, private circles, memberships, blocks, invite codes, swipes, and matches.
•
Free-time windows and optional event intentions. Exact free time is private to its owner; other members receive server-created overlap results.
•
Event information, including titles, descriptions, dates, locations, invitees, attendance, join requests, photos, and share-link settings.
•
Safety and service information, including in-app activity, event reports, and basic operational request logs processed by infrastructure providers.
Contacts and photos
Overlap does not upload your entire address book. If you choose a person with the system contact picker, the app reads that selected contact locally. A selected phone number may be sent to Overlap to look for an exact account match or passed to your messaging app so you can send an invitation.
Event photos are optional. A photo you choose is uploaded to private event storage and is made available only through time-limited access checks for eligible attendees. Anonymous public previews use bundled artwork instead of private event photos.
How information is used
•
Authenticate accounts and maintain sessions.
•
Show friends and circle members the information needed for planning and matching.
•
Create availability matches, event invitations, attendance, join approvals, and private activity notices.
•
Provide revocable event-preview links when a host explicitly enables sharing.
•
Prevent abuse, enforce blocks and access rules, investigate reports, maintain security, and operate the service.
Who can see or process information
Other Overlap members see information only according to friendship, circle, event, block, and host-approval rules. A host-enabled public event preview can show the event title, description, host name, date, and attendance count to anyone with the link; it does not show the exact address, guest list, or private photos.
Current service providers include Supabase for authentication, database, and storage; Vercel for public web hosting; and Apple or Google when you use their sign-in services. These providers may process connection and account data under their own agreements. Overlap does not currently include advertising SDKs or a product analytics SDK.
Information may also be disclosed when reasonably necessary to comply with law, protect people, investigate abuse, or defend the service. This draft does not authorize selling personal information.
Retention, deletion, and choices
Account information is kept while the account is active. Invite links and signed media links expire according to product rules. A final retention schedule for operational logs and safety reports must be approved before launch.
You can edit profile information, remove free time, leave or manage social connections, disable shared event links, block members, and delete your account in Profile. Account deletion removes the authentication account and associated personal rows. Shared circles or plan records may be transferred to another active member or retained without association when needed to preserve other members’ shared records.
You may also use the public Account Deletion page or contact admin@sodhera.com. Requests may require identity verification. Certain records may be retained only when required for security, fraud prevention, dispute resolution, or law; the final policy must specify those periods.
Security, children, and regions
Overlap uses authenticated database functions, row-level access controls, private storage, encrypted network transport supplied by its providers, and secure device storage for native sessions. No security measure is perfect.
The final minimum age, parental-consent rules, operator jurisdiction, international-transfer language, and region-specific privacy rights have not yet been selected. Overlap must not be marketed to children until those decisions and safeguards are complete.
Contact and changes
Questions or deletion requests can be sent to admin@sodhera.com. Replace this draft with legally reviewed operator details and an effective date before public launch. Material changes should be announced in the app or by another appropriate channel.