Your data, plainly

• No selling your data. Your content and account data are never sold, licensed, or shared with data brokers.
• Advertising. Currents doesn't currently show ads, include advertising, analytics or data-broker SDKs, or track you across other apps and websites. If we introduce advertising, we'll update this policy and tell you in the app before it takes effect, and we'll ask for any permission the law or your device requires.
• No engagement algorithm. Your feed is chronological. We don't profile your behavior to decide what you see.

Account information

Your display name, bio, optional avatar, optional city and state, and birthday (to confirm you meet the minimum age). Your display name, bio, avatar and city are visible to other users according to your profile visibility setting. Your birthday is never shown to anyone.

Email and phone number

Used for sign-in, account recovery, and — for phone numbers — letting friends find you in their contacts. They're stored in a private part of your account that other users can't read, and they're never shown publicly unless you share them yourself.

Content you create

Moments, Studio posts (including drafts, scheduled posts, music, memes and collages), recipes, ratings and reviews, notes, meal plans, grocery lists, dreams and their updates, comments, messages, feedback you send us, and the photos, video and audio attached to them. We store these so we can show them to you and the people you choose to share them with. Places you add to a Moment or dream are names you choose; the apps don't read your device's GPS location. We remove location data embedded in photos you upload.

Your social graph and activity in the app

Friendships, family labels, follows (of people, Creator Profiles and news sources), households, Creator Profile memberships, mutes and blocks — used to decide whose content you can see and whose appears in your feed. We also store hearts, favorites, saved articles, which messages you've read (shown to the other people in a conversation as read receipts), and how far you've scrolled your feed (so we can show “You're all caught up”).

Contacts (only if you allow access)

If you give Currents access to your contacts, the app reads the phone numbers in them (never names, emails or other details are uploaded) and uses them in two ways:

• Finding friends. The numbers are sent securely to our servers to check which of them belong to Currents accounts. They're used only for that check and aren't stored.
• Join alerts. So we can tell you when someone you know joins later, the app converts each number on your device into a hashed code and uploads only those codes. They're stored privately on your account and readable only by our servers. Because phone numbers are short, a hashed number isn't impossible to reverse for someone who has both the codes and the app's hashing key, which is why we never expose the codes to other users. Turn off Notify me when contacts join in notification settings and we delete them.

You can revoke contacts access at any time in your device settings. The web app doesn't access your contacts.

Search

When you search for people, Creator Profiles, recipes or news sources, your search text is sent from your device directly to our search provider, Algolia, to return results.

Push notifications

If you allow notifications, we store a device token to send alerts about hearts, comments, messages and requests. Notifications are delivered through Apple and Google's push services and can include the sender's name and a short preview (for example, the first line of a message). You can turn individual notification types off in the app, or revoke notifications in your device settings.

Security and abuse-prevention logs

When you open the app, sign in or out, or create, edit or delete a post, comment or message, we record the event with your IP address, browser or device type, operating system and app version, a random device identifier, sign-in method, locale and time zone. For posts and comments the log also keeps a copy of the text at that moment, so we can investigate abuse even if it's later edited or deleted (messages are logged without their content). These logs are used only to protect accounts, investigate abuse and respond to legal requests — never for advertising or profiling — and are deleted after 180 days.

Crash and error reports

The iPhone and Android apps use Firebase Crashlytics. If the app crashes or an action fails, it sends a diagnostic report — device model, operating system and app version, the code location of the problem and the time — tied to your account ID (not your name, email or phone number). We use it only to find and fix bugs.

Nearby grocery sync

To keep a shared grocery list in sync with people next to you, the apps can connect directly to nearby devices over Bluetooth and Wi-Fi. This is why the apps ask for local network or nearby-devices permission (and, on older Android versions, location permission, which Android requires for Bluetooth scanning — we don't collect your location). Nearby devices can see an identifier for the list and account being synced.

Information stored on your device

To keep you signed in and make the Service fast, the apps and browser store your sign-in session, a copy of recently viewed data (so it works offline), your appearance and layout preferences, and a random device identifier used in the security logs above. On the web this uses a first-party cookie and your browser's local storage. We don't use advertising or cross-site tracking cookies, so there is nothing to opt out of; we treat browser “Do Not Track” and Global Privacy Control signals as already honored.

Every post has an audience you choose:

• Only Me, Specific People, Friends, Family, Friends & Family, or Public.
• Moments let you narrow the audience for individual sections — your words, location, gratitudes and things to improve. Photos and videos follow the post.
• Dreams are always private unless you share one with specific people.
• Creator Profiles can post to Public, Followers, or Members only. Every member of a Creator Profile can see and manage its posts.
• When you edit a published Studio post, its edit history (earlier versions) may be visible to the people who could see the post, and the post is marked “Edited.”

These choices are enforced on our servers, not just in the app. Public posts can be seen by anyone signed in to Currents, and public recipes, public profiles and Creator Profile names are searchable. People you share with can always take a screenshot, so share thoughtfully.

We use a small number of providers to run Currents. They process data only on our instructions and only to provide their service:

• Google Firebase and Google Cloud — authentication, database, file storage, server functions, security logs, push notifications and crash reporting.
• Apple Push Notification service — to deliver notifications to iPhones.
• Algolia — search over public recipes, news sources, and the names and avatars of people and Creator Profiles.
• Apple and Google sign-in — if you choose them, to authenticate you.
• Google Gemini (Google's AI service) — when you create or import a recipe (whatever its audience), its title, description, ingredients and steps, or the text of the web page you import, may be sent to Gemini to suggest cuisine, diet and meal-type tags or to read the recipe from the page. No account details are sent, and Google does not use this data to train its models under our paid plan. Suggested tags are generated automatically and may be wrong.

Content loaded from other websites

Some things you see in Currents are loaded straight from the website that hosts them — news and recipe images, publisher logos, GIFs, meme templates (imgflip, memegen) and site icons (Google and unavatar). When that happens your device connects to that site, which can see your IP address and device type, but not your Currents account. To show a recipe's source, the apps may also load the source website in the background. When you import a recipe or add a news source, our servers fetch the page or feed you provided (and may use Google News and site-icon services to find its feed and logo). When you open a news article or a recipe's original source, you leave Currents and that site's own privacy policy applies.

We disclose information only when required by law (for example, a valid subpoena or court order), to protect someone's safety, to investigate abuse of the Service, to report child sexual exploitation to the National Center for Missing & Exploited Children as U.S. law requires, or as part of a merger or acquisition — in which case this policy's promises continue to apply to your data. Where the law allows, we'll tell you before disclosing your information.

Currents is a social app, so people can post content. To keep the community safe we provide tools to:

• Block any user so neither of you can see the other's content, comments or messages.
• Mute people, or just their Moments or Studio posts — mutes are private.
• Report abusive content and profiles.

Our moderators review reports within 24 hours and remove content that breaks our Community Guidelines. When you report something, the reported content (including, for a comment or message, an excerpt of its text) and your notes are shared with our moderators. The person you report isn't told who reported them.

We keep your information while your account is active. You can delete any post at any time. Grocery list activity history expires automatically after 90 days, and security logs after 180 days.

Delete your account from Settings → Privacy in the iPhone or Android app, or Settings → Account on the web. Deletion starts immediately and usually finishes within a few minutes: your profile, phone number, email, settings, recipes, moments, Studio posts and music, dreams and dream updates, photos, videos, audio, comments, ratings, hearts, recipe notes, favorites, feedback and connections are removed, including posts you made on behalf of a Creator Profile. Creator Profiles, households and shared grocery lists you belong to stay with their other members and pass to one of them.

Messages: conversations belong to everyone in them, so messages you sent stay in the other participants' threads. Your name and photo on them are replaced with “Deleted User,” and photos you sent are deleted. Reports you filed, or that were filed about your content, are kept as a moderation record and may include an excerpt of the reported content. We keep a minimal record that an account ID was deleted. Security logs are deleted on their normal 180-day schedule, and we may keep information longer where the law requires it.

• Access and edit your profile and content in the app at any time.
• Change who can see your profile and each post.
• Turn individual notification types on or off.
• Request a copy of your data, or ask us to correct or delete it, by emailing support@currents.love. We'll verify the request comes from you and respond within 30 days.

Depending on where you live (for example, the EU/UK under GDPR or California and other U.S. states with privacy laws), you may have additional rights, including to receive your data in a portable format, to object to or restrict processing, to appeal a decision we make about your request, and to complain to a data-protection authority. We honor these rights for everyone, wherever you live, and won't treat you differently for using them. We do not “sell” or “share” personal information or use it for targeted advertising, as those terms are defined under California and other state laws.

Our legal bases for processing (where GDPR applies) are: performing our contract with you (running your account and showing your content to the people you choose), our legitimate interests (keeping the Service safe and working, including security logs and crash reports), and your consent (contacts access, push notifications and nearby sync), which you can withdraw at any time.

Data is encrypted in transit and at rest on Google Cloud. Access rules on our database enforce who can read each document — including keeping email, phone and birthday in an owner-only record. No system is perfectly secure; if we learn of a breach affecting you, we'll notify you as required by law.

You must be at least 13 years old to use Currents — or older if the law where you live sets a higher age for using services like ours without a parent's consent. Because Currents hosts user-generated content, direct messaging and links to the open web, the apps carry a mature store rating. We don't knowingly collect information from children under 13; if we learn that an account belongs to one, we delete it. Parents can contact us at support@currents.love.

Currents is operated from the United States and our providers may process data in the U.S. and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for international transfers.

If we make material changes, we'll tell you in the app before they take effect, and we'll ask for your consent where the law requires it. We will never change this policy to allow selling your personal data.

Omevi, LLC · support@currents.love