Privacy Policy

TrybeOS ("we", "our", "us") operates a student community platform for LASU students, delivered as a Telegram Mini App. This policy explains what data we collect, why we collect it, and how you can control it.

1. Data we collect

• Telegram profile: your Telegram user ID, first name, username and language preference, provided when you open TrybeOS.
• Profile information you provide: faculty, department, level, gender and display name that you add during onboarding.
• Student verification: your campus email address (via a one-time code) and/or an image of your student ID, used only to verify that you are a student.
• Content you create: marketplace listings, events, announcements, anonymous messages, chat/direct messages and media uploads.
• Usage data: limited server logs such as request timestamps and the actions you take, to keep the service secure and reliable.

2. How we use your data

• To provide and operate the TrybeOS platform and its features.
• To verify student status and display verified badges.
• To moderate content and enforce our Terms of Service.
• To respond to support requests and communications.
• To maintain security and prevent abuse, fraud or spam.

3. Anonymous messages

Anonymous messages are stored without your public name. Your identity is still known to us internally so we can moderate abuse and respond to reports. Your name is never displayed publicly next to an anonymous message.

4. How we share data

We do not sell your data. We share it only with service providers that help us run the service, including:

• Vercel — hosting and serving the application.
• Neon — managed Postgres database storage.
• Supabase (S3) — object storage for uploaded media.
• Telegram — for messaging, notifications and the Mini App itself, governed by Telegram's own privacy policy.

5. Content moderation & reporting

Reported listings, events, announcements, anonymous messages and users are reviewed by our administrators. Content that violates our Terms may be hidden or removed.

6. Data retention

We keep your data for as long as your account is active and for a reasonable period afterwards to maintain backups, comply with legal obligations, and resolve disputes. You may request deletion at any time.

7. Your rights

• Access: request a copy of the data we hold about you.
• Correction: update or correct your profile information in the app.
• Deletion: request deletion of your account and your data.
• Withdrawal: stop using TrybeOS at any time and delete the Mini App from Telegram.

8. Security

We use industry-standard measures including encrypted connections (HTTPS), signed Telegram data validation, and restricted access to production data. No method of transmission is 100% secure, and we cannot guarantee absolute security.

9. Children

TrybeOS is intended for university students aged 16 and above. We do not knowingly collect data from children under 16.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be available at trybe-os.vercel.app/privacy, and the "Last updated" date at the top will change.

11. Contact

Questions or privacy requests? Message @TrybeOSBot and an administrator will respond to you.