Your perspective, your choice.

What SEENLI stores and what its results mean.

Perception, not a diagnosis

OVM is SEENLI’s trait structure, not a validated psychological assessment. Scores describe how people currently see you, not your worth or objective personality. Small samples are fragile.

Anonymous grouped results

Recipients do not see individual answers, contributor names, rating timestamps or connection labels. Each trait needs three distinct current scored eligible rating identities. Valid counts are shown only with results that meet that minimum. Knowing who you invited, overlapping samples and changes after an edit can still give clues. Multiple rating identities can belong to one person. This does not guarantee perfect anonymity.

Your public profile

Your photo, username, short bio and optional Instagram handle are public. Photos are resized before upload. Replacing or removing a photo deletes the old stored image, but cannot recall copies or caches elsewhere. Your email stays private.

In-app updates

Your private inbox shows new-rating and account updates. Rating updates are grouped by day and contain no contributor names or answers. New activity can still provide timing clues. Updates refresh while the app is open; this does not enable push notifications or new emails.

Preview and feedback rounds

Before your first genuine submission, your dashboard can show clearly labelled example Friend View scores generated only on your device. Examples are never saved as ratings, counted as contributors or shared as real results. Your first completed submission permanently stops this preview, even if every answer is Can’t tell. Re-Vibe archives your private Self View and eligible grouped results, starts a new active round and ends old rating links. Historical results still respect current consent and account deletion. Category links select from predefined existing traits; they do not enable open-ended comments.

How people know you

Connection choices remain private selection context. Recipient subgroup comparisons are withheld in this release to avoid revealing small or overlapping groups. The choice is self-reported, not verified.

Your account and data

Supabase stores your account, private email, ratings, chosen connection categories, settings and Self View answers. Google sign-in or a confirmed email account verifies ownership; SEENLI does not request access to your Gmail, Drive or contacts. Your username, display name and optional public profile information can be discovered by others. Your grouped Outside View is available only to your signed-in account. You can review and edit the ratings you wrote in your own private history.

Where data is stored

This beta uses Supabase servers in the United States and Cloudflare to serve the website. Your device stores sign-in sessions, guest credentials and unfinished Self View answers. Server security checks use hashed client-address and contributor counters to limit abuse. Hosting providers also process request logs.

Data retention

Ratings and their earlier versions remain stored, including when an Unfiltered trait is turned off. Signing out does not delete your account or feedback. Settings → Privacy & safety provides confirmed permanent account deletion. Separate guest ratings, independent feedback, safety case text, provider logs/backups and already-sent email are not all erased with an account. Safety reports, app feedback and usage have scheduled 90-day cleanup; history has a 12-week window.

Optional feedback context

Adults can opt in before submitting a rating. We store the submission timestamp privately, broad device and operating-system families, and a broad timezone region. We never store raw IPs or full user-agent strings for hints. Timezone regions are approximate, self-reported device settings, not verified physical locations. A future paid unlock may reveal submission month and matching grouped context from at least three consenting adult contributors, never individual context, names or answers. Collection starts only when the server feature is enabled, without backfilling earlier ratings. Remove your shared context in Rate or Settings. Deleting its associated rating also removes context. Unlock demos show fictional examples and charge nothing. Where checkout is enabled, a one-time purchase is handled by Stripe. SEENLI stores a private round/order/receipt reference and payment status, not card details. Stripe receives checkout details, not rating answers or rater context. Sandbox payments never unlock real hints. Purchase records here are removed with the profile; Stripe financial records and your bank records follow their own retention rules.

Sharing your comparison

Story images include your public username and real, privacy-eligible grouped scores alongside your Self View. You explicitly approve exporting them. The empty bottom area is for a link sticker you add yourself in your social app. Saving a picture does not publish it.

Changing your ratings

Your private My ratings list lets you update answers or give five more ratings. Each rater contributes one current answer per trait. Older versions remain in history. New ratings are anonymous. Historical identity choices remain stored privately and are no longer exposed to recipients. Older answer values are not reinterpreted. Results update only when the per-trait minimum is met, without a contribution task.

Identity and pending ratings

Your SEENLI username is public; email is private. A permanent profile UUID survives username changes. Pending email ratings have no public profile. Only a verified account can merge them in Supabase. Local demo verification is explicitly simulated and is not proof of email ownership.

Unfiltered is optional

Only the owner can enable Unfiltered. Gender Presentation has independent opt-ins. Any Core, Vibe or reaction can also be disabled. Disabling them excludes them from new ratings and hides existing sensitive results. Turning them off does not delete historical records.

Your report

Your verified account sees eligible grouped results without rating or inviting someone as a separate unlock task. Each trait needs three distinct scored eligible identities. Unfiltered results require your opt-in. Historical ratings remain stored. Standard traits include eligible scored contributions regardless of age. Unfiltered also requires both the owner and rater to be 18 or over.

Your age · private

You can start standard ratings without an age question. Account setup asks for an optional age in years, editable in Settings. We store it privately, including whether you are under 18, and show only aggregate age bands to the approved admin. Your age is not part of your public profile or linked to individual answers for recipients. No birthday is collected. Under-18 and unknown-age users can use standard features; Unfiltered requires both people to be 18 or over. Age is self-reported, not verified.

Giving feedback

The Feedback button accepts a problem, confusing moment or idea. We store your message, category, app page, platform and submission time for the approved SEENLI admin. No account, contributor identity or rating answers are attached. Please do not include private contact details or personal ratings in your text. Feedback stays stored until the project owner removes it. The local demo stores it only on your device.

Optional website analytics

With your permission, Google Analytics uses cookies to measure visits, traffic sources and device types. It receives generic page names, a referrer domain and browser/device information, not emails, usernames, account IDs, rating answers, ages or private URLs. Authentication, claim and admin pages are excluded. Automatic link, form and search measurement and advertising features are disabled. Your choice lasts up to six months on this browser. You can turn it off above. Google processing and retention follow its own privacy policy. The app works without this optional tracking.

Landing experiment and growth analytics

New signed-out web visitors see one of two messages, assigned 50/50. The preference persists on this device. If you allow analytics, private measurement references link your original visit, verified profile creation, sharing and completed referred friend ratings. The main comparison uses a 72-hour window and separate mature cohorts. PostHog receives an opaque anonymous ID, linked to a different opaque account measurement ID after signup, safe source/campaign labels and funnel events. It never receives emails, usernames, private links, rater identities, ages or rating values. Supabase keeps the private attribution references and returns only aggregate admin reports. Browser storage clearing, signout, another device or blocked analytics can affect counts. Preview journeys are excluded. Declining does not affect core features.

Session replay

With analytics permission, PostHog can record only the public landing page. Text, inputs and DOM attributes are masked; images, forms and private screens are blocked. Console, network bodies, private URLs and rating contents are not recorded. Replays use the same opaque experiment measurement context. There is no replay in the native MVP.

Measurement retention

Private journey, referral, event and delivery records have traffic-driven 90-day cleanup. Withdrawing consent stops new measurements and removes the device’s private events and pending deliveries. Earlier data already delivered to Google or PostHog follows the project/provider retention settings; withdrawing consent does not remotely erase already delivered analytics. Permanent public profile links are functional routing, not a promise of invitation delivery or anonymity against someone who knows whom they invited.

V2 card statistics

If you allow optional analytics, SEENLI counts cards shown, anonymous answer choices, Can’t tell, completion, time spent, exits and result shares. The database stores daily counters by item and Self/Expected/Outside mode, without a rater, target, session, IP or exact event timestamp. Google never receives these answer choices. Admin sees aggregate totals; these optional game answers are separate from saved profile ratings. Closed tabs may not register an exit. Old V1 ratings remain stored, but inactive items do not feed V2 results. Attractive and Stylish start new normal-pool scores so old Unfiltered answers are not reused outside their original consent.

App usage and administration

We count selected buttons, saved rounds and page visits to improve SEENLI. Measurement has a random session ID for each app launch or browser tab, not an account or contributor ID. It excludes names, emails, rating answers, recipient links and query strings. Usage events expire after 90 days as new events arrive. Hosting logs are separate. The approved administrator can see account emails, usernames, verification status, signup and last authentication dates, aggregate activity, and pause outside ratings. This dashboard does not show who rated whom.

One anonymous invitation

After a completed scored rating, SEENLI may send one invitation to the recipient’s email. It includes no ratings, scores, relationship category or rater identity. It links to verified owner access; repeats and edits never send another invitation. Abuse limits may prevent sending. Account verification and password-reset emails remain available. The local demo sends no emails. Sharing your profile never shares your Self View answers.

Safety controls

Privacy & safety in Settings lets you pause incoming ratings, block a known account or submit a private safety report. Blocking affects new rounds and edits, not old scores, and never identifies an anonymous contributor. A new guest or account can bypass a block; pausing stops new ratings from all identities. Reports are readable only by approved admins; the reporter identity is withheld from the inbox, but text may contain personal details. Reports older than 90 days are purged on the next safety submission or inbox read. This is not an emergency response service.

Delete your account

Use Privacy & safety, sign in again if needed, then type DELETE. Your profile, aliases, received ratings, Self/Expected answers and contributions made by that account are removed with the Auth account. Separate guest contributions are not linked to that account. Safety report text may remain for review with the deleted reporter identifier removed. Anonymous app feedback cannot be linked to an account for automatic removal. Service logs, backups and already-sent emails expire separately. A private salted contact digest prevents other people from creating new private email targets after deletion; deliberate verified profile creation restores eligibility.

Beta limits

Reset local demo data in Settings; signing out is not deletion. Stronger bot controls, verified age or contributor identity, delivery suppression/preferences and a privacy review remain necessary before wider growth. Optional ages and legacy adult declarations are self-reported.

We record one private active-account/day row for 90 days to calculate Day 1 and Day 7 returns. Admins see aggregate return counts, never an individual account activity log or rater identity attached to answers. Weekly owner-only history contains impression scores and positive reaction percentages, never individual answers. History points require three changed eligible rating identities after the prior point and can be removed after consent changes or account erasure. Guest connection checks impose lightweight computational work; they are not proof of a human or verified age.