Last updated: August 10, 2026

Privacy Policy

Plain-English privacy information for Showdek, including public profiles, user-generated content, Supabase, photos and videos, security, retention, user choices, and account deletion.

Plain-language summary

At a glance

Showdek uses information to operate accounts and public profiles, deliver user content and notifications, support safety and security, and respond to requests. The sections below explain what information is involved, when it may be public or shared, and the choices available to users.

Showdek is designed around public professional profiles and proof-of-work content.
Account, profile, content, interaction, device, session, and support information may be processed as described below.
Service providers may process information when they provide authentication, hosting, storage, notifications, and related services.
Users can manage supported controls, report concerns, and request account and data deletion.

This summary is a reading aid. The detailed sections below describe the Privacy Policy in full.

On this page

Introduction

This Privacy Policy explains how Showdek collects, uses, shares, retains, and protects information when people use the Showdek app, website, and related support channels. It is written for a professional showcase platform where users publish profiles, posts, projects, clips, progress, and related interactions.

Who We Are

Showdek is a professional showcase and social/project platform for creators, builders, students, founders, bug hunters, designers, developers, local businesses, freelancers, and professionals who want to build a public proof-of-work profile.

Services Covered

This policy covers Showdek mobile apps, showdek.com, public legal/support pages, account deletion requests, and support communications. If Showdek later launches a separate product with its own privacy notice, that product may use a separate policy.

User Choices and Controls

Users may edit account/profile details where the app supports editing.
Users may choose what to publish publicly and should review content before posting.
Users may manage notifications through app or device settings where available.
Users may report content, report profiles, block users, request deletion, or contact support.
Users may request access, correction, or deletion where supported by applicable law and app functionality.

Account and Data Deletion

Users can delete directly in the app from Profile, More, Account settings, and Delete account, or contact the privacy address if app access is unavailable.
The in-app request immediately hides and anonymizes the profile, posts, and projects and clears supported social data before trusted authentication and storage cleanup is completed.
Comments are marked deleted, and sent direct-message text and attachment references are cleared by the current deletion request flow.
Some data may be retained when required for security, fraud prevention, legal compliance, dispute resolution, audit, backup, or abuse prevention.

Information We Collect

Account and authentication information such as name, username, email address, user ID, authentication method, login/session details, account status, and Google account information supplied through Google OAuth where a user chooses that sign-in method.
Profile information such as profile photo, bio, headline, role, skills, links, location or public-availability details, phone number, and date of birth where users provide them.
User content such as posts, projects, project updates, clips, stories, captions, comments, direct messages, attachments, launch details, milestones, streak activity, and other submitted content.
Photos and videos such as profile photos, project images, post images, screenshots, story media, uploaded clips, and video files.
Social interactions such as follows, followers, likes, comments, reports, blocks, notifications, and interaction records.
Search and activity data such as searches, profile/project discovery activity, timestamps, views, app actions, and feature usage where implemented.
Device, notification, log, and session data such as a random app-installation identifier, Firebase Cloud Messaging token, notification preference, device model, platform, app version, IP-derived region, session identifiers, security logs, diagnostics, and error records.
Support and communication data such as messages sent to support, privacy, legal, or deletion contacts.

Information Users Choose to Make Public

Showdek is designed around public professional profiles and public proof-of-work. Depending on app settings and feature design, usernames, profile photos, bios, posts, projects, clips, comments, likes, follows, milestones, streak activity, and profile links may be visible to other users or visitors. Users should avoid publishing personal data they do not want others to see.

How We Use Information

Provide, operate, maintain, and improve Showdek.
Create, authenticate, secure, and manage accounts.
Display profiles, posts, projects, clips, comments, likes, follows, timelines, search results, and notifications.
Support followers, likes, comments, search, discovery, notifications, progress records, reports, and blocks.
Improve safety, moderation, policy enforcement, abuse review, and account protection.
Prevent fraud, spam, scams, impersonation, malware, unauthorized access, and other harmful activity.
Respond to support, privacy, deletion, legal, safety, and copyright requests.
Communicate service, policy, security, and support updates.

How Information Is Shared

Public profiles and public user content may be visible to other users or visitors according to app functionality and visibility settings.
Showdek uses service providers for hosting, authentication, database, media storage and delivery, push notifications, domain and security operations, and account-authentication email delivery as described below.
Supabase processes authentication, database, and certain storage data needed to operate the app.
Firebase Cloud Messaging processes device tokens and notification-delivery data to deliver notifications a user has enabled.
Google may process authentication information when a user chooses Google OAuth to sign in.
Information may be disclosed when required for legal compliance, lawful requests, safety, fraud prevention, dispute resolution, policy enforcement, or protection of Showdek, users, or the public.
If Showdek is involved in a merger, acquisition, restructuring, financing, or sale of assets, information may be transferred as part of that transaction subject to appropriate protections.
Showdek does not sell personal or sensitive user data.

Supabase and Third-Party Services

Showdek uses Supabase Auth for registration, login, authentication providers, sessions, and account identifiers.
Showdek uses Supabase Database to store profiles, posts, projects, clips, comments, follows, likes, reports, blocks, privacy settings, notifications, and app activity records.
Showdek uses Supabase Storage for certain storage-backed assets, including direct-message attachments, and Cloudflare R2 for user-uploaded media storage and delivery. These services may process profile photos, uploaded images and videos, clips, story and project media, message attachments, and related files.
Showdek uses Firebase Cloud Messaging to process a device token, device metadata, notification preferences, notification content and routing data, and delivery data for app notifications.
Showdek uses Google OAuth when a user chooses Google as the sign-in provider; Google may process the account identity information used for that sign-in.
Hosting and domain services may process website files, DNS records, basic request logs, and security records.
Showdek does not currently include application analytics, crash-reporting, advertising, or marketing-tag SDKs in the inspected website or mobile app dependencies. If Showdek introduces any of these technologies, this Privacy Policy and applicable platform disclosures will be updated before or when those technologies are used.

Cookies and Similar Technologies

The public informational pages on showdek.com do not currently use advertising cookies or behavioural-tracking technologies. Restricted staff tools use essential Supabase authentication and security cookies. The hosting provider may process basic request, security, and reliability logs. If analytics, advertising, or other tracking technologies are introduced, this policy and any required consent mechanism will be updated before or when those technologies are used.

Data Retention

Showdek retains information for as long as needed to provide the service, maintain accounts, display content, respond to requests, enforce policies, prevent abuse, comply with legal obligations, resolve disputes, maintain backups, and protect the platform. Backup copies may remain for a limited period until routine deletion or expiration.

Data Security

Showdek uses HTTPS, access controls, configured Supabase security measures, and other reasonable technical safeguards designed to protect information against unauthorised access, alteration, disclosure, or loss. No online service can guarantee absolute security. Users should keep passwords, one-time codes, and account access private.

Children's Privacy

You must be at least 13 years old to create a Showdek account. Additional age requirements may apply depending on your country or applicable law.

Showdek is not intended for children below the minimum age required to create an account. If Showdek learns that a user is not permitted to use the service, Showdek may restrict or delete the account and related data. Showdek's Child Safety Standards prohibit CSAE and CSAM and explain the reporting and response process.

International Users

Showdek is operated from India and may use service providers that process data in other countries. By using Showdek, users understand that information may be processed where Showdek or its service providers operate, subject to applicable law and provider safeguards.

Changes to This Policy

Showdek may update this Privacy Policy as the app, website, features, legal requirements, or service providers change. The Last updated date will be revised when material changes are made.