Privacy Policy

1. Scope

This policy explains how Prophet handles personal information when you visit our public website, request user or investor access, use Google or Apple sign-in, communicate with us, or use an invitation-only service we make available (collectively, the “Services”). A separate notice may apply to a specific relationship or feature.

2. Information we collect

Information you provide

We collect the access category you select, information you submit after approval, and the content and contact details you provide when you communicate with us.

Google and Apple identity information

If you continue with Google, we request the openid, email, and profile scopes. Google may provide a stable account identifier, name, email address, email-verification status, and basic profile fields. If you continue with Apple, Apple may provide a stable account identifier, name, and a verified email address or private relay address when Apple supplies those fields. We retain only the identity, display, access-status, and related timestamps reasonably needed to process your request, authenticate you, administer access, and protect the Services.

We do not receive your Google or Apple password. We do not request access to Gmail, Drive, contacts, calendars, or iCloud content. We do not retain provider access tokens. If you use Sign in with Apple, we retain an encrypted Apple revocation token only so we can revoke Apple authorization when you delete your account or withdraw a pre-membership identity; we do not use that token to access Apple content.

Information collected automatically

When you use the Services, we may process limited network, browser, device, request, authentication, and security-event information, including IP address and timestamps. We use this information only as reasonably necessary to deliver and protect the Services, diagnose problems, and maintain appropriate records.

Sources

We obtain personal information from you, from Google or Apple when you choose the corresponding sign-in method, and automatically from your browser or device when you interact with the Services.

3. How and why we use information

We use personal information to:

• process and evaluate access requests;
• authenticate identities and administer accounts and permissions;
• provide, maintain, and improve the Services made available to you;
• communicate with you and respond to support, privacy, or investor inquiries;
• prevent fraud, abuse, unauthorized access, and other security threats;
• enforce our terms and protect legal rights; and
• comply with applicable law and valid legal process.

Where applicable law requires a legal basis, we rely on steps taken at your request, performance of an agreement, our legitimate interests in operating and protecting the Services, compliance with legal obligations, or consent. We do not use personal information to make solely automated decisions that produce legal or similarly significant effects.

4. When information is disclosed

We may disclose personal information to vendors and professional advisers that process it for us under appropriate obligations; when required by law or valid legal process; when reasonably necessary to prevent harm, fraud, abuse, or unauthorized access; or in connection with a financing, reorganization, acquisition, or transfer of the relevant business, subject to applicable legal requirements.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use it to serve targeted advertising.

5. Google user data

We use Google identity information only for sign-in, access administration, account security, and support. We do not sell it, use it for advertising or lending, or use it to train a generalized artificial-intelligence or machine-learning model. Prophet’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

6. Cookies and similar technologies

We use cookies and comparable browser storage only when reasonably necessary for authentication, request integrity, session continuity, access-request status, security, or a feature you request. We do not use advertising cookies or cross-site behavioral tracking.

7. Retention

We retain personal information only for as long as reasonably necessary for the purposes described above, including while an access request or account remains active and for an appropriate period afterward to protect the Services, resolve disputes, enforce agreements, and meet legal obligations. Retention depends on the nature of the record, the relationship, and applicable requirements. We may retain information that has been de-identified so that it no longer identifies you.

8. Security

We maintain reasonable administrative, technical, and organizational safeguards appropriate to the information we process. No system, transmission, or storage method can be guaranteed completely secure.

9. Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or an appeal; to object to certain processing; or to withdraw consent. You may also ask us to deactivate your access. We may verify your identity and may retain information where permitted or required by law. We will not discriminate against you for exercising an applicable privacy right.

You may review or revoke Prophet’s connection through your Google Account or Apple Account. Provider revocation prevents future sign-in through that connection but does not automatically delete records already held by Prophet. Where available, you may start account deletion inside the native app. An authenticated applicant, approved setup identity, or investor may also withdraw the identity and access request tied to that sign-in before a member account exists. These actions pseudonymize the associated provider and contact details, revoke active device sessions, and may retain deidentified security or operational records required for integrity. You may also contact us with a deletion request. You may have the right to complain to the privacy or data-protection authority where you live.

Account deletion

To delete your Prophet account, sign in to the native app, open Profile, scroll to Delete account, and confirm the deletion. This pseudonymizes the provider and contact details associated with your account and revokes active device sessions. We may retain deidentified security or operational records where necessary for integrity or to meet legal obligations.

If you cannot sign in, email hello@prophetapp.co from the address associated with your account and request deletion. We may verify your identity before completing the request.

10. International processing

We and our vendors may process personal information in countries other than the country where you live. Where required, we use legally recognized safeguards for international transfers.

11. Age requirements

The Services are not directed to children. You must be at least 16 years old and satisfy any higher age requirement applicable to the Services where you live. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy. We will post the revised version here and update the effective date. If a change materially affects how we use personal information, we will provide additional notice or obtain consent where required.

13. Contact

Questions or privacy requests can be sent to hello@prophetapp.co.