Data Privacy Statement

How we handle your data, what we collect, and what we will never do.

Last updated: April 2026

Our Principle

Ordinary Friend exists because we believe people deserve to see the value they created on social media — not have it extracted from them again. Every decision we make about data starts from that principle.

What We Collect

When you express interest via our early access form, we collect your name, email address, and which insight dimension you're most curious about. That's it.

If you contact us as a researcher, we collect your name, email, institution, research interest area, and your message.

We do not use tracking pixels, third-party analytics, or advertising cookies on this site.

What Happens When You Upload

Your Meta data export (.zip file) is uploaded over an encrypted TLS connection to our servers hosted on Supabase (a SOC 2 Type II compliant infrastructure provider). Your data is stored in an isolated, encrypted database accessible only to your account.

We process your messages, posts, comments, and connections to generate embeddings, sentiment analysis, entity resolution, and relationship trajectory classifications. This processing involves sending text content to OpenAI's API for AI analysis. OpenAI does not use API data for training and deletes it after processing per their data usage policy.

Your raw data and generated insights persist in your account until you request deletion. You can request full data removal at any time.

Research Datalake

If you explicitly opt in, anonymized behavioral metrics may be contributed to an academic research datalake. This requires a separate, clear consent step — it never happens by default.

Anonymized records contain:

  • No names or usernames
  • No message content or post text
  • No photos, files, or media
  • No personally identifiable information

Research data is made available to vetted academic researchers studying prosocial behavior, digital wellbeing, and platform design. You can withdraw consent and request removal at any time.

What We Will Never Do

  • Sell or share your data with advertisers or data brokers
  • Use your data for ad targeting of any kind
  • Share your raw data with any third party (AI providers receive text only for processing and do not retain it)
  • Retain your data after you request deletion
  • Allow anyone to re-identify you from anonymized research data
  • Share your email address with third parties

Your Rights

You can request full deletion of all data we hold — raw uploads, generated insights, embeddings, and account information — at any time by emailing sarah@darkridge.com. Deletion is complete and permanent.

If you opted into the research datalake, you can withdraw consent and request removal of your anonymized record.

You own your data. We just help you read it.

Third-Party Services

We use the following services to operate Ordinary Friend:

  • Supabase — database hosting and authentication (SOC 2 Type II compliant, data encrypted at rest and in transit)
  • OpenAI — AI analysis for sentiment scoring, embeddings, and relationship classification (API data is not used for model training and is deleted after processing)

No other third parties receive your data.

Contact

Questions about how we handle data? Email sarah@darkridge.com.