Draft for review — not yet approved by counsel.

Privacy policy

Last updated November 3, 2026

brand.ish lets you follow brands and see their products. This policy explains what we collect, why, and the choices you have. It covers our website and Android app.

What we collect

• Account details — email address, password (stored hashed by our auth provider), username, and optionally a display name, bio and profile photo.
• What you do — brands you follow, products you like, brands and products you add, photos you upload, reports you file, and brand claims (including the work email and proof link you give us).
• Technical data — a session cookie (web) or token (app) that keeps you signed in, and standard request logs kept by our hosting providers.

We don't collect your location, contacts or device identifiers, and we don't use advertising trackers.

How we use it

• To run your account and show your feed, follows and likes.
• To suggest related brands and products, based on tags and what people follow.
• To send account emails such as sign-up confirmation and password resets.
• To review reports and brand claims, and to keep the service safe.

Who can see it

Your username, display name, bio, photo, the brands you follow and the products you like are public. Brands and products you add are public. Your email, reports and brand claims are private to you and our team.

Service providers

We use these providers to run brand.ish. They process data only on our behalf:

• Supabase — database, sign-in and photo storage.
• Vercel — website hosting.
• Resend — account emails.

We don't sell your personal information or share it for advertising.

Keeping and deleting your data

We keep your data while your account exists. You can delete your account at any time from Settings → Delete account on the web or You → Delete account in the app (see how to delete your account). Deleting removes your profile, follows, likes, photos, reports and claims. Brands and products you added stay for others, without your name attached. Server logs expire on our providers' normal schedules.

Children

brand.ish isn't meant for children under 13, and we don't knowingly collect their data.

Changes and contact

We'll post changes here and update the date above. Questions or requests: brandish@aeons.com.