Who we are
Skiix is a mood-based social platform, built to make sharing feel intentional instead of compulsive. It exists because scrolling shouldn't feel like a chore or an addiction. Skiix uses mood tags, a Vibe Slider, and a Focus Mode to put you back in control of how you use social media.
This Privacy Policy explains, in detail, what data we collect across the Skiix app and skiix.app, why we collect it, who we share it with, and what rights and controls you have over it. It applies to anyone who creates a Skiix account, visits our waitlist site, or otherwise interacts with our services.
Skiix is operated by the Skiix team, based in Karachi, Pakistan. If anything here is unclear, reach out, contact details are at the bottom of this page.
Info we collect
We collect information in three ways: what you give us directly, what we generate from your activity, and what comes in automatically from your device.
Account information
When you sign up, we collect your email address, a username, and a securely hashed password through Firebase Authentication. We never see or store your password in plain text. If you add a display name, profile photo, or bio, that's stored too.
Content you create
Anything you post, like text posts, mood tags, comments, direct messages, photos, and video, is stored so the app can function. Media files (photos and videos) are hosted through Cloudinary; everything else, including your post metadata and mood history, lives in our Supabase database.
Usage & behavioral data
We log how you interact with the app: which moods you select, how you move the Vibe Slider, how long Focus Mode sessions last, what you scroll past versus linger on in Discovery Shuffle, and what you bookmark. This is what lets your feed actually reflect you instead of showing the same content to everyone.
Device & technical data
We automatically collect basic technical details: device model, operating system and version, app version, general crash and performance logs, and IP-based approximate location (city/region level, not precise GPS unless you separately grant location permission for a specific feature).
| Category | Examples | Source |
|---|---|---|
| Account | Email, username, password hash | You, at signup |
| Profile | Display name, bio, profile photo | You, anytime |
| Content | Posts, comments, DMs, media | You, when posting |
| Usage | Mood picks, Vibe Slider, Focus Mode time | Generated by app use |
| Device | OS, app version, crash logs | Automatic |
How we use it
- Running the core app: authentication, your feed, direct messages, mood features, and everything that makes Skiix work day-to-day.
- Personalizing your experience: shaping your feed, Discovery Shuffle, and Spark suggestions around what you actually engage with, not just what's popular.
- Keeping the platform safe: automated and manual review to catch spam, abuse, impersonation, and policy violations before they spread.
- Communicating with you: account verification, password resets, and security alerts, sent via our email provider Resend.
- Improving Skiix: looking at aggregated, de-identified usage trends to understand what's working and decide what to build next. We don't use this to profile you individually outside the app experience.
- Meeting legal obligations: responding to valid legal requests, enforcing our Terms, and protecting the rights and safety of our users.
Legal basis for processing
If you're in a region where this applies (like the EU/UK under GDPR), here's the legal basis we rely on for each type of processing:
- Contractual necessity: processing needed to create your account and deliver the core Skiix experience.
- Legitimate interest: safety monitoring, spam prevention, and product improvement, balanced against your rights.
- Consent: optional features like location-based content, which you can withdraw at any time.
- Legal obligation: retaining certain records where the law requires it, such as responding to lawful requests from authorities.
Your choices
- Edit anytime: update your profile, posts, and account details directly in-app.
- Download your data: request an export of your account and content data by contacting us.
- Delete your account: permanently removes your profile and content from our active systems, subject to the retention exceptions in Section 10.
- Manage notifications: control what Skiix emails or pushes you, from your account settings.
- Ask us anything: reach out for a plain answer about what data we hold on you and why.
Security
We take reasonable technical and organizational measures to protect your data, including: encrypted authentication via Firebase, row-level security policies on our Supabase database restricting who can query what, secure SMTP with DKIM/SPF/DMARC for account emails, and access controls limiting which team members can reach production systems.
No system is perfectly secure, and we can't guarantee absolute protection against every possible attack, but we treat security as an ongoing responsibility, not a one-time setup.
Data retention
We keep your data for as long as your account is active. If you delete your account, we remove your profile and content from our active, user-facing systems.
Some data may be retained longer where necessary, for example, fraud-prevention logs, records needed to comply with a legal obligation, or backups that roll off on a fixed schedule rather than being individually purged on request.
International transfers
Skiix's infrastructure providers (Firebase, Supabase, Cloudinary) operate data centers in multiple regions. As a result, your data may be processed or stored outside the country you live in, including in jurisdictions with different data protection laws than your own. Where required, we rely on our providers' standard contractual safeguards for these transfers.
Your rights by region
If you're in the EU/UK (GDPR): you have the right to access, correct, delete, restrict, or port your data, and to object to certain types of processing. You can also lodge a complaint with your local data protection authority.
If you're in California (CCPA/CPRA): you have the right to know what personal information we collect, to request deletion, to correct inaccurate data, and to opt out of the "sale" or "sharing" of personal information, though as noted, we don't sell your data.
If you're elsewhere: we aim to honor the spirit of these rights for all Skiix users, regardless of location: access, correction, and deletion of your data. Contact us to exercise any of these.
Children's privacy
Skiix isn't built for anyone under 13 (or the minimum age required in your country, if higher). We don't knowingly collect personal information from children below that age. If we learn we've inadvertently collected data from a child under the applicable minimum age, we'll delete it.
Third-party links
Posts or profiles on Skiix may link out to third-party websites or services. We're not responsible for the privacy practices of those external sites, once you leave Skiix, their own privacy policy applies.
Data breach notification
In the unlikely event of a security incident that puts your personal data at risk, we'll notify affected users and relevant authorities as required by applicable law, without undue delay, along with clear guidance on what happened and what to do next.
Changes to this policy
Skiix is still evolving, and this policy will evolve with it. When we make material changes, we'll notify users through the app or by email, and update the "last reviewed" context on this page.
Contact us
Questions about this policy, or want to exercise any of the rights described above?