Privacy Policy

Tide is a students-only, multi-campus social app. Access is gated to verified .edu campuses: you sign in with your school email, and your campus feed, events, and class chats stay inside your own school. Matches and friendships can reach students at other campuses, which is deliberate and described in section 5. This policy explains what data Tide collects, why, where it is stored, who processes it, and the rights you have over it.

1. Who we are

Tide ("Tide," "we," "us") operates this app and the website at tidecampus.com. For any privacy question, deletion request, or concern, contact us at [email protected].

2. What we collect, why, and where it lives

We collect only what the app needs to work. Nothing is sold, and there is no third-party advertising or analytics SDK in Tide.

We do not collect: your contacts, your browsing activity, advertising identifiers, or any payment information. We do not track you in the background and we do not build a location history.

Location (Campus Deals only). Campus Deals is the one feature that uses your location, and only while you're using it. When you open the deals map, your device location is used to show what's near you. When you redeem a deal that requires you to be at the store, it's used once to check that you actually are. Your coordinates are not retained: they're used in the moment and then discarded, never written to your profile. The only thing kept alongside a redemption is a coarse distance result, a bucket such as "within 100 m", which is enough for a vendor to trust the redemption without us keeping any record of where you were. Location is optional, deals that don't require it work without it, and you can turn the permission off at any time in your device settings.

Daily Tide prompts, answers and hi notes.

• Your prompts. Your written prompts are shown to your Daily Tide match after they open their card, and nowhere else (not your profile, the feed, class rosters or friends). Tide's moderators may review them, and see them if someone reports one.
• Daily question answers. They are shown only to that day's match, and only after you both answer. They are deleted after 30 days, except an answer quoted in a hi (see the next point).
• Hi notes and quotes. A hi note or a quoted answer is shown to your match. If you both say hi, it becomes the first lines of your chat and stays there as part of the chat, like any message.
• Matching and quick taps. Matching uses your prompts' words, your interests and your quick taps. Your Daily Tide match can see your quick-tap picks, including the ones that differ from theirs, unless you hide them in Edit profile. Hidden quick taps never show on your card.
• The optional AI helper. When Tide's optional AI helper is turned on: to suggest a conversation question, Tide sends the parts of two matched students' cards that each would see on the other's card (prompt answers, shared interests, shared quick taps; never names, handles, emails, majors, years, classes, locations, chat messages or photos) to a computer run by Tide's founder that uses an open-source model locally. It is not sent to an AI company, nothing is kept on that computer after the question is written, and the question is shown as written by Tide.

3. Student ID verification

Getting the Verified badge is optional. You can sign up, get your daily match, chat, make friends, and post without it. It unlocks a few extras: putting a photo on a post, redeeming a Campus Deal, where the local business wants to know the discount is going to a real student, and earning extra entries in a campus giveaway.

If you do want the badge, here is exactly what happens. In the mobile apps, your phone checks the ID on the device before upload. In the browser, you choose a student ID photo; the browser resizes it and removes image metadata before upload. The photo is uploaded to a private storage bucket that no other student can read. A person at Tide (today that is the founder) looks at it and decides yes or no. Once that decision is made, the photo is deleted. That deletion is automatic, not something anyone has to remember: an hourly job removes the photo of any request that has already been decided. What we keep afterwards is the outcome: a yes-or-no flag on your account, the date it was decided, a one-line note from the on-device check (something like "campus name found: yes"), and, if the answer was no, a short reason so you know what to fix. We do not keep your ID number, your photo, or anything else printed on the card.

The photo is never shown to other students, never used for matching, and never shared with advertisers or anyone outside Tide. If you change your mind before a decision is made, email us and we'll delete the upload.

Optional Discord community. Connecting Discord links your normal Discord account to your Tide account; their email addresses do not need to match. We request permission to identify your Discord account and join the Tide Campus server. Discord does not receive your school email or ID photo from Tide. Members can see your Discord profile and student access role under Discord's own privacy settings and policy. Emoji reactions on the role card are visible to other server members. First-time connection confirmations include a clearly labeled Show my college and join its chat option, selected by default. Reconnecting preserves your saved Show or Hide choice. If you leave it selected when confirming, Tide derives your college from your verified Tide account and adds a college role that other Discord members can see and joins you to that college’s private Discord chat. You can turn it off before connecting or click the emoji reactions in #roles to show or hide it later. Existing connections stay hidden until you choose to show your college. Hiding removes the college role and leaves the private college chat once Discord applies the update; it cannot undo information someone already saw or messages you posted. We store the connection privately and use encrypted, temporary OAuth credentials to complete joining. Disconnecting or losing Tide eligibility removes student access. Account deletion queues this removal before deleting your Tide records; minimal identifiers remain only as needed to finish external access cleanup. Disconnecting does not delete messages you posted on Discord or your Discord account.

Optional Minecraft access. If you connect Minecraft, Tide stores your game account identifier, edition and display name privately to link the account you control to your student approval. The one-use code shown by the game server proves that account connection; Tide does not ask for your Microsoft password. The Minecraft server receives game identifiers, display names and current admission decisions, never your school email, student ID photo or Tide account ID. Other players and server operators can see your game name and normal game activity. Disconnecting Minecraft or Discord, losing student eligibility, or requesting Tide account deletion stops Minecraft admission; the running server removes access during its next check. Disconnecting does not erase builds, inventory, messages or other history already stored in the Minecraft world. Expired linking codes and request metadata are kept only briefly for replay protection and cleanup.

Optional Minecraft college participation. The separate “Show my college in Minecraft and join Campus League” choice is off by default. Enabling it allows Tide to share your verified college name and linked Minecraft identity with the Tide Minecraft server for a public school tag and team, optional league-base access, and monthly league leaderboards when available. Other players can see your college and game identity. Your school email, student ID photo, Discord account ID and Tide account ID stay private. The Discord 🎓 college-visibility reaction and 🧱 update role do not enable this choice. College participation also requires current student approval, the current verified college role in Discord and your Discord college-visibility choice. Turning the Minecraft choice off stops future college participation on the next server refresh; past match results may remain. Regular Minecraft access stays available when this choice is off. We store this consent and its version privately so the server can honor changes and prevent an old account connection from receiving a new owner's college information.

4. Who processes your data

Tide uses these services to run the app and the optional Discord community. The Discord community also follows Discord’s own terms and privacy policy:

• Supabase, hosts our database, file storage, and authentication. Your profile, posts, chats, matches, push token, and crash diagnostics are stored here.
• Apple (APNs), Apple's Push Notification service delivers notifications to iPhones. Apple receives only the payload needed to deliver the notification.
• Google Firebase (FCM), does the same job for Android phones. Every Android notification from Tide goes through it, and Google receives only what's needed to deliver the notification.
• Cloudflare, hosts tidecampus.com and the web app and sits in front of our traffic. Like any web host, it processes the network requests your browser makes, including your IP address.
• Resend, our email delivery provider. It sends the email Tide sends you, such as your sign-in code and waitlist mail, so it handles your email address and the contents of that message.
• Discord, where place suggestions you send from the Deals map arrive (the place, your note, your campus, which app you used and a short reference number; not your name, handle or email) so we can follow up with the business.
• Discord, for the optional community, processes your Discord account identity, server membership, student access role, and college role and private college-chat membership if you choose to show your college and join its chat. Other members can see visible roles under Discord's own privacy policy; Tide does not send Discord your school email or student ID photo.
• OpenStreetMap, supplies the map tiles behind Campus Deals on the web app and on Android. When the map draws, your device requests those tiles directly from OpenStreetMap's servers, so they see your IP address and which part of the map you're looking at. We send them nothing else, and the map only loads if you open Campus Deals.
• Apple Maps, draws the Campus Deals map on iPhone instead of OpenStreetMap. Same shape: your device talks to Apple to draw the map, and only when you open Campus Deals.
• Google Fonts, serves the typefaces this site and the web app use. Your browser fetches them from Google on page load, so Google sees your IP address.

We do not sell your data, we do not share it for advertising, and we use no third-party advertising or analytics SDK.

5. How we protect your data

• What your account can reach. Row Level Security on the backend decides what every request is allowed to touch, so you can only read and write the data your own account is part of. You can't pull another student's private data, and you can't read a chat you're not in. Campus feeds, events, and class group chats are scoped to your own school.
• Meeting people at other campuses. Matches and friendships are the deliberate exception, because a nearby school is still a place you can meet people. Your daily match can be a student at another campus, and anyone can send you a friend request with your 5-digit code. The Only my campus can add me toggle where you add friends limits who can add you by code. It does not limit your daily match, which can still be someone at another school.
• Session security. Your sign-in session is stored securely on your device (the Keychain on iOS).
• Encryption in transit. All traffic between the app and the backend uses HTTPS.

6. Data retention & your rights

• Sign out at any time from the Profile tab.
• Disable reminders at any time; this stops collection and use of your push token.
• Request deletion of your account and associated data by emailing [email protected]. We'll delete your profile, posts, chats, match data, and push token, subject to any legal retention we're required to keep.
• Reported messages. If another student reports a message you sent, or reports a conversation you are in, we keep a copy of that message, or of up to the last 50 messages in that conversation, so we can finish the review, even if you delete your account. The copy is deleted automatically 90 days after the report, or 30 days after we finish reviewing it, whichever comes first. Reporting does not keep anything else from your account.
• Your own reports. If you report something and later delete your account, we keep the report without your name until our review is done.
• Removed content. If we remove something for breaking our rules, we keep a record of the action; the removed content itself is cleared after one year.
• Deal redemptions and store counts. Your deal codes and redemption records are deleted with your account. Each store sees daily counts of how often its deals were opened, opened again, or confirmed by its staff. A count never holds your name, email, or account ID, and it can note whether a deal was opened near the store but never where you were. Once you delete your account, nothing links those counts back to you.
• Access / correction. You can edit your profile (name, bio, major, interests, avatar) in-app at any time, and you may request a copy of your data via the contact email.

We retain your data for as long as your account is active. Crash diagnostics are retained only as long as needed to investigate and fix the underlying issue. They are not deleted when you delete your account; instead the link back to your account is cleared, so a retained report is no longer associated with you.

7. Students & age

Tide is gated to verified .edu campus email holders and is intended for college/university students. It is not directed at children under 13. If you believe a child has provided us data, contact us and we'll remove it.

8. Browser extension (Tide Campus for Chrome)

Tide Campus is an optional Chrome extension. It is a read-only companion to the web app: it cannot post, comment, vote, or send messages, and it never signs you in.

• How it gets access. A script that runs only on tidecampus.com/app pages reads the session you already created by signing in there, and hands the extension your access token, its expiry, and your user id. Your refresh token is deliberately never stored by the extension.
• What it keeps on your device. In your browser's local extension storage: that access token, a cached copy of up to 20 recent chat rows (including the one-line preview of the most recent message), two bookkeeping timestamps, a "last seen" marker used to count unread chats, your on/off choice for the 8pm reminder, and the id of the Tide window it opened. None of it is uploaded, and nothing is written to Chrome's sync storage.
• Where data travels. The extension makes read-only HTTPS requests to Tide's own backend (hosted on Supabase, see section 4) to fetch your daily match, your chats, and your campus feed. It sends data nowhere else: no ad networks, no data brokers, no third-party analytics.
• Notifications. At most one local notification a day, at 8pm your time, when the daily drop goes live. It is generated on your own device, no push service is involved, and you can switch it off in the extension's popup.
• Clearing it. Signing out of Tide on tidecampus.com in that browser clears the cached chats. Removing the extension deletes everything it stored. An install left unused clears its cached chats once the stored session is more than seven days past expiry.

9. Changes to this policy

We may update this policy as Tide evolves. Material changes will be reflected in the effective date above and, where appropriate, surfaced in-app.

10. Contact

Privacy questions or requests: