Last updated: August 2, 2026

Privacy Policy

Plain-English privacy information for Showdek, including public profiles, user-generated content, Supabase, photos and videos, security, retention, user choices, and account deletion.

Plain-language summary

At a glance

Showdek uses information to operate accounts and public profiles, deliver user content and notifications, support safety and security, and respond to requests. The sections below explain what information is involved, when it may be public or shared, and the choices available to users.

Showdek is designed around public professional profiles and proof-of-work content.
Account, profile, content, interaction, device, session, and support information may be processed as described below.
Service providers may process information when they provide authentication, hosting, storage, notifications, and related services.
Users can manage supported controls, report concerns, and request account and data deletion.

This summary is a reading aid. The detailed sections below describe the Privacy Policy in full.

On this page

Introduction

This Privacy Policy explains how Showdek collects, uses, shares, retains, and protects information when people use the Showdek app, website, and related support channels. It is written for a professional showcase platform where users publish profiles, posts, projects, clips, progress, and related interactions.

Who We Are

Showdek is a professional showcase and social/project platform for creators, builders, students, founders, bug hunters, designers, developers, local businesses, freelancers, and professionals who want to build a public proof-of-work profile.

Services Covered

This policy covers Showdek mobile apps, showdek.com, public legal/support pages, account deletion requests, and support communications. If Showdek later launches a separate product with its own privacy notice, that product may use a separate policy.

User Choices and Controls

Users may edit account/profile details where the app supports editing.
Users may choose what to publish publicly and should review content before posting.
Users may manage notifications through app or device settings where available.
Users may report content, report profiles, block users, request deletion, or contact support.
Users may request access, correction, or deletion where supported by applicable law and app functionality.

Account and Data Deletion

Users can delete directly in the app from Profile, More, Account settings, and Delete account, or contact the privacy address if app access is unavailable.
The in-app request immediately hides and anonymizes the profile, posts, and projects and clears supported social data before trusted authentication and storage cleanup is completed.
Comments are marked deleted, and sent direct-message text and attachment references are cleared by the current deletion request flow.
Some data may be retained when required for security, fraud prevention, legal compliance, dispute resolution, audit, backup, or abuse prevention.

Information We Collect

Account and authentication information such as name, username, email address, user ID, authentication method, login/session details, account status, and Google account information supplied through Google OAuth where a user chooses that sign-in method.
Profile information such as profile photo, bio, headline, role, skills, links, location or public-availability details, phone number, and date of birth where users provide them.
User content such as posts, projects, project updates, clips, stories, captions, comments, direct messages, attachments, launch details, milestones, streak activity, and other submitted content.
Photos and videos such as profile photos, project images, post images, screenshots, story media, uploaded clips, and video files.
Social interactions such as follows, followers, likes, comments, reports, blocks, notifications, and interaction records.
Search and activity data such as searches, profile/project discovery activity, timestamps, views, app actions, and feature usage where implemented.
Device, notification, log, and session data such as a random app-installation identifier, Firebase Cloud Messaging token, notification preference, device model, platform, app version, IP-derived region, session identifiers, security logs, diagnostics, and error records.
Support and communication data such as messages sent to support, privacy, legal, or deletion contacts.

Information Users Choose to Make Public

Showdek is designed around public professional profiles and public proof-of-work. Depending on app settings and feature design, usernames, profile photos, bios, posts, projects, clips, comments, likes, follows, milestones, streak activity, and profile links may be visible to other users or visitors. Users should avoid publishing personal data they do not want others to see.

How We Use Information

Provide, operate, maintain, and improve Showdek.
Create, authenticate, secure, and manage accounts.
Display profiles, posts, projects, clips, comments, likes, follows, timelines, search results, and notifications.
Support followers, likes, comments, search, discovery, notifications, progress records, reports, and blocks.
Improve safety, moderation, policy enforcement, abuse review, and account protection.
Prevent fraud, spam, scams, impersonation, malware, unauthorized access, and other harmful activity.
Respond to support, privacy, deletion, legal, safety, and copyright requests.
Communicate service, policy, security, and support updates.

How Information Is Shared

Public profiles and public user content may be visible to other users or visitors according to app functionality and visibility settings.
Service providers may process data for hosting, authentication, database, R2-compatible media storage, push notifications, support, email, security, diagnostics, or analytics if those services are used.
Supabase may process authentication, database, and storage data needed to operate the app.
Firebase Cloud Messaging may process device tokens and notification-delivery data to deliver notifications a user has enabled.
Google may process authentication information when a user chooses Google OAuth to sign in.
Information may be disclosed when required for legal compliance, lawful requests, safety, fraud prevention, dispute resolution, policy enforcement, or protection of Showdek, users, or the public.
If Showdek is involved in a merger, acquisition, restructuring, financing, or sale of assets, information may be transferred as part of that transaction subject to appropriate protections.
Showdek does not sell personal or sensitive user data.

Supabase and Third-Party Services

Supabase Auth may process registration, login, authentication providers, sessions, and account identifiers.
Supabase Database may store profiles, posts, projects, clips, comments, follows, likes, reports, blocks, privacy settings, notifications, and app activity records.
Supabase and configured R2-compatible media-delivery/storage services may process profile photos, uploaded images, uploaded videos, clips, story media, project media, private message attachments, and related files.
Firebase Cloud Messaging may process a device token, device metadata, notification preferences, and notification-delivery data to support app notifications.
Google OAuth may process account identity information when users choose Google as their sign-in provider.
Hosting and domain services may process website files, DNS records, basic request logs, and security records.
Analytics, crash reporting, marketing tags, or advertising tools should be added to this policy and the Google Play Data Safety form only if they are implemented.

Cookies and Similar Technologies

The Showdek website is currently intended to be a static informational site. If cookies, analytics, tracking pixels, advertising tags, or similar technologies are added later, this policy should be updated before or when those tools are used. Basic hosting logs may still be processed by the host for security and reliability.

Data Retention

Showdek retains information for as long as needed to provide the service, maintain accounts, display content, respond to requests, enforce policies, prevent abuse, comply with legal obligations, resolve disputes, maintain backups, and protect the platform. Backup copies may remain for a limited period until routine deletion or expiration.

Data Security

Showdek is intended to use HTTPS, Supabase security controls, access restrictions, and reasonable technical measures to protect information. No online service can guarantee absolute security. Users should keep passwords, one-time codes, and account access private.

Children's Privacy

Showdek is not directed to children who are not old enough to create an online account under applicable law or app store requirements. If Showdek learns that a user is not permitted to use the service, Showdek may restrict or delete the account and related data. Showdek's Child Safety Standards prohibit CSAE and CSAM and explain the reporting and response process.

International Users

Showdek is operated from India and may use service providers that process data in other countries. By using Showdek, users understand that information may be processed where Showdek or its service providers operate, subject to applicable law and provider safeguards.

Changes to This Policy

Showdek may update this Privacy Policy as the app, website, features, legal requirements, or service providers change. The Last updated date will be revised when material changes are made.