TribeBuilder Privacy Policy

Effective Date: May 19, 2026

TribeBuilder is a product of Brown Technologies Inc ("we", "us", "our", or "the company"). TribeBuilder ("the app") is a social media management tool for music artists. This policy explains how we collect, use, and protect your information.

1. Information We Collect

TribeBuilder collects the following categories of information:

• Authentication data: When you sign in with Apple, we receive your Apple ID user identifier, and optionally your name and email address (only provided on first sign-in). When you sign in with Microsoft, we receive an OAuth token and basic profile information. Authentication data is stored locally on your device.
• Account credentials: API keys you provide for AI services are stored locally on your device in the iOS Keychain and are never transmitted to our servers.
• Social media tokens: OAuth access tokens and refresh tokens for platforms you connect (Instagram, TikTok, X/Twitter, YouTube, Facebook, Bluesky, Threads, Discord). These are stored locally in the iOS Keychain on your device.
• Profile information: Display names, usernames, follower counts, and profile pictures retrieved from connected social media platforms.
• Content you create: Text captions, AI-generated images, persona profiles, content calendars, and post metadata created within the app. This content is stored locally on your device using Apple’s SwiftData framework.
• Analytics data: Follower counts, engagement metrics, and post performance data retrieved from your connected social media platforms. This data is stored locally on your device.
• Usage data: We do not collect analytics, crash reports, or usage telemetry. We do not use any third-party analytics SDKs.

2. How We Use Your Information

• To authenticate you and manage your session within the app.
• To authenticate with social media platforms on your behalf.
• To publish content you create to your connected social media accounts.
• To display your social media profile information and analytics within the app.
• To generate AI-powered content using the AI service provider you select and configure.
• To schedule content for future publishing to your social media accounts.
• To provide strategy recommendations based on your content and engagement history.

3. AI-Powered Features and Third-Party AI Data Sharing

TribeBuilder includes AI-powered content generation features. When you use these features, the following data may be sent to the third-party AI provider you have selected and configured:

• Persona context: Information from your artist persona profile (voice, style, audience, themes) that you created within the app.
• Content prompts: The text prompts and instructions you provide or that the app constructs on your behalf to generate captions, images, or strategy suggestions.
• Platform context: The name of the target social media platform(s) for which content is being generated, so the AI can tailor output format and tone.

The supported third-party AI providers are:

• Anthropic (Claude)
• OpenAI (ChatGPT and DALL-E)
• Google (Gemini and Gemini Vision)
• xAI (Grok)

Your data is sent directly from the app on your device to the AI provider you selected, using the API key you provided. Brown Technologies Inc does not receive, store, relay, or have access to the data exchanged between your device and the AI provider. We do not control how these providers process, store, or use the data they receive — please refer to each provider’s own privacy policy.

Explicit consent: AI features are entirely opt-in. No data is sent to any AI provider unless you (a) provide your own API key for that provider, and (b) actively initiate a content generation action. You may remove your API key at any time to stop all data sharing with that provider.

4. Other Third-Party Services

In addition to AI providers, TribeBuilder interacts with the following third-party services when you choose to use them:

• Authentication providers: Apple (Sign in with Apple) and Microsoft (Entra External ID). We use these services solely to verify your identity. Apple’s privacy practices are governed by Apple’s Privacy Policy.
• Social media platforms: Instagram (Meta), TikTok, X (Twitter), YouTube (Google), Facebook (Meta), Bluesky, Threads (Meta), and Discord. Data shared is limited to what is necessary for authentication, content publishing, and retrieving your analytics. Each platform connection uses the standard OAuth 2.0 authorization flow, and you must authorize access through each platform’s official login page.
• Image hosting: When publishing image content, generated images may be temporarily uploaded to Supabase Storage to provide URLs required by certain social media publishing APIs. These images are stored with anonymous identifiers and are not linked to your personal information. Images are stored securely and access is limited to the specific URLs generated for publishing purposes.

5. Data Storage and Security

• All sensitive credentials (API keys, OAuth tokens, session data) are stored in the iOS Keychain, which provides hardware-backed encryption.
• Content data, persona profiles, and analytics snapshots are stored locally on your device using Apple’s SwiftData framework.
• We do not operate backend servers that store your personal data. The app communicates directly with third-party APIs using credentials stored on your device.
• All network communication with third-party services uses HTTPS/TLS encryption.

6. Data Retention

• Authentication session data is retained until you sign out or uninstall the app.
• OAuth tokens are retained until you disconnect the platform, sign out, or uninstall the app.
• Content, persona, and analytics data are retained locally on your device until you delete them within the app or uninstall the app.
• Images uploaded for publishing purposes are retained on Supabase Storage until manually deleted. These images are not linked to your identity.
• We do not retain any data on our servers.

7. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes.

Data is only shared with the third-party services listed above, and only when you initiate an action (e.g., publishing a post, connecting a platform, generating AI content). Each third party that receives your data is required to handle it in accordance with their own published privacy policies.

8. Tracking and Advertising

TribeBuilder does not track you across other apps or websites. We do not use advertising identifiers, fingerprinting, or any tracking technologies. We do not display advertisements within the app.

9. Demo Mode

TribeBuilder offers a Demo Mode that allows you to explore the app with sample data. When using Demo Mode, no real social media accounts are connected, no real API calls are made to AI providers, and no content is published to any platform. Demo Mode data is stored locally and cleared when you sign out.

10. Your Rights

• Disconnect platforms: You can disconnect any social media platform at any time from the app’s settings. This removes stored tokens from your device.
• Delete API keys: You can remove any AI service API key from the app’s settings, immediately stopping all data sharing with that provider.
• Delete app data: Uninstalling the app removes all locally stored data, including Keychain entries and SwiftData content.
• Revoke access: You can revoke TribeBuilder’s access from each social media platform’s settings page independently.
• Sign in with Apple: You can stop using your Apple ID with TribeBuilder at any time via Settings > Apple ID > Sign-In & Security > Sign in with Apple on your device.
• Data deletion request: You can request deletion of any data associated with your account by visiting our data deletion page or contacting us at the email below.

11. Children’s Privacy

TribeBuilder is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can take appropriate action.

12. International Users

TribeBuilder stores all data locally on your device. When you use third-party services (social media platforms, AI providers), your data may be transferred to and processed in countries where those services operate. Please refer to each service’s privacy policy for details on their data handling practices.

13. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

14. Contact

If you have questions about this privacy policy or wish to exercise your data rights, contact us at [email protected].