Privacy policy

The short version: your Northeastern address, the tags you choose, and whatever you write. Nothing is sold, nothing is shared with anyone outside your campus beyond what Apple needs to deliver a notification, and there are no advertising or analytics trackers in this app at all. The rest of this page is the long version, written against the actual database rather than from a template.

What is stored

• Your Northeastern email. It proves you go here. It’s never shown to other students.
• A password, stored as a hash by Supabase. Nobody including us can read it.
• Your name and photo, if you add them.
• Your tags. Country, secondary school, course, class year, interests. Every one is opt in, and every one can be removed.
• A personal email, only if you add one. It’s there so there’s still a way to reach you once the university takes your student address away. Being straight about a limit: password resets currently go to your Northeastern address, not this one, so if you’ve already graduated and lost it you’ll need to email instead. Fixing that properly means verifying both addresses, and it’s on the list.
• Your class sections, if you add them. Only people in the same section can see that you’re in it. Take one off in Tags and it’s gone.
• Your gender, only if you answer. It’s used for one thing, matching groups, and nobody else ever sees it. Clear it any time in Settings, under Groups and gender.
• A notification token for your phone, if you allow notifications in the app. Notifications are delivered through Apple, which is the only way an iPhone receives them, so the short text of one (who, and what kind of thing) passes through Apple on its way to you.
• Connections, messages, posts, photos on posts, replies, asks, groups and meetups, which is to say the things you do here.
• Saved searches, so we can tell you when one fills up.
• Your saved password, on your phone only. After you sign in, the app can ask iOS to keep your password in iCloud Keychain. That’s Apple’s, on your device, and only if you tap Save Password. Ruggles doesn’t keep a copy.
• Reports and blocks. A report is kept so it can be read. The person reported is never told who reported them. If you report somebody you’ve been messaging, your latest messages with them go with the report, so it can be checked.

What isn’t collected

• Your location. Never asked for, never stored. Meetups use a place name you pick from a list, not a map or a GPS reading.
• Your contacts.
• Who looked at your profile. That’s not recorded anywhere, so nobody can be told and no feature can be built on it without this page changing first.
• Anything from other sites. No advertising pixels, no analytics, no third party scripts.

Who can see what

Only people with a verified Northeastern address can see anything, and only within your own campus.

• Your name, photo and tags are visible to other students here. Every tag is opt in one at a time, so you’re found by exactly what you chose to put up, and removing a tag takes you out of every search that used it.
• Messages go only to the person or group they were sent to. Nothing reaches anybody who hasn’t accepted you. The one exception is a report: if you report somebody, your latest messages with them go with it.
• Who is coming to a meetup is shown as a number. If you say no, nobody’s told, and no reason is asked for.
• Blocking works both ways at once. Neither of you can see or reach the other anywhere, and they’re not told.

Where it lives

On Supabase and Vercel, in the United States. Your browser never talks to the database directly; every read and write goes through this app’s own server. Emails from us, like the sign up link and password resets, are sent through Resend, which sees your address and the email and nothing else.

Deleting it

Remove any tag from the Tags tab, or your photo from your profile, yourself. For the whole account there is a Delete my account button at the bottom of Settings, the gear at the top of the app. It takes your name, photo, tags, posts, comments, messages, groups and rsvps immediately, and none of it can be brought back. You can also delete a message you sent at any time, for both of you.

Two things survive. A report you filed about somebody else, because deleting your own account should not erase a complaint about another person. And, only if an account was suspended, its email address, so the suspension cannot be undone by signing up again.

Contact

Questions about your data, or anything on this page: support@ruggles.app.

Changes

If this page changes in a way that affects what is collected, the date at the top changes with it.