Gal GalPrivacy Policy
Last updated: [DATE] · [LEGAL ENTITY NAME]
What we collect
- Account: name, username, email, password (stored encrypted by our sign-in provider, Supabase), language.
- Profile and content: photo, bio, link, posts, comments, messages, listings and ads you create, including voiceovers you record, audio you add, and the captions on your videos.
- Membership confirmation: Gal Gal is for Jewish women, and at sign-up you confirm that you are one. We don't ask for documents about your religion. [LAWYER TO REVIEW: religious affiliation can be sensitive personal data in some places.]
- Language settings: your app language and caption preferences.
- Community features: your Daily Torah answers, the groups you're in and their messages, lives you host or join, and transcripts you choose to make of your lives. Transcripts stay private to you until you post or share them.
- Notifications: alerts we send you in the app (for example a Daily Torah win or a live reminder).
- ID check: done by Stripe Identity. Stripe collects your ID photo and a selfie. Gal Gal receives the result (verified or not) and the date of birth on the ID, which replaces the one you typed at sign-up. We do not store your ID images or ID number.
- Date of birth: asked at sign-up because Gal Gal is for ages 13 and up and some features (selling and payouts) open at 18. It is kept in a private table that only our servers can read. It is never shown on your profile or to other members; others can only see whether an account is a Gal Gal Teen account (13 to 17). If someone under 13 tries to join, we don't create the account or keep the birthday.
- Payments: handled by Stripe. We keep order records (items, amounts, shipping address for sellers to ship) but never your full card number.
- Sellers: payout details are collected and kept by Stripe Connect.
- Waitlist and contact forms: what you type in, handled by Netlify Forms.
How we use it
To run Gal Gal, keep the community safe, process payments and payouts, let sellers ship orders, and answer your messages. We check posts and messages automatically for rule breaks; this may use an AI service (Anthropic) that processes the text only to return a decision. We keep a log of decisions, not the text.
Who we share it with
Our service providers: Supabase (accounts and database), Stripe (payments, payouts, ID checks), Netlify (hosting and forms), Anthropic (safety checks, caption translation and Gal Gal AI), and, once connected, a speech-to-text provider (automatic captions) and a video processing provider (exporting videos). A buyer's name and shipping address are shared with the seller of that order. We do not sell your personal information.
Your choices
You can edit your profile, cancel Pro, and ask us to delete your account or send you a copy of your data by emailing mygalgal@gmail.com. [ADD STATE / GDPR RIGHTS AS ADVISED]
Your choices and settings
In Settings you can make your profile private (new followers must be approved and your posts are only shown to them), choose who can message you and who can comment, block accounts, turn notifications on or off, and deactivate or permanently delete your account. Precise location is never shown; showing your city is off by default and always off for teen accounts.
Search engines
If your profile is public, you are 18 or older and your ID is verified, your public profile page and public posts may appear in search engines like Google, unless you turn off "Show my profile in Google and other search engines" in Settings. Private profiles and Gal Gal Teen accounts are never shown in search engines.
Reports and safety
When you report something, we keep the report, the reported content and the people involved so our safety team can review it. Reports are private: the person reported isn't told who reported them. Where the law requires it (for example, apparent child sexual exploitation), we report to the appropriate authorities and preserve the information.
Storage and security
Data is protected by row-level security so members can only see public information and their own private records. Secret keys are kept on the server only.
Children and teens
Gal Gal is for people aged 13 and over. We do not knowingly collect personal information from children under 13; if we learn an account belongs to someone under 13, we close it and delete its information. Members aged 13 to 17 have Gal Gal Teen accounts with extra protections: private messages only with people they accept and follow, blocking at any time, and no selling or payouts until 18. [LAWYER TO REVIEW: state minor-privacy laws and parental rights requests.]