Privacy Policy

Account information. When you create an account we store your email address, display name, your campus, and your role on the platform (student, club officer, or campus admin). Sign-in is handled by Firebase Authentication.

Profile and interests. If you pick interest categories during onboarding (for example sports or music), we store them with your profile to personalize your event feed and the “Picked for you” recommendations described below.

Recommendations and swipe signals. The app builds a daily “Picked for you” set of events from the clubs you follow and the interests you chose. When you swipe an event as “interested” or “not interested,” we record that choice with your account so we can improve the events we suggest to you.

Content you create. Club profiles, events, poll responses and RSVPs, club chat messages, and any images you upload (event photos, club avatars and banners) are stored so the service can show them to the audiences you post them to.

Event interactions. As you use the app we record how you engage with events (views, saves, shares, club joins, event check-ins, and taps on search results), tied to your account. We use these records to give clubs and campus admins aggregate analytics about how their events perform; your individual activity is not shown to other students. Your personal saved-events list in the iOS app is also kept locally on your device.

Search queries. When you use campus search, we store the text of your search (up to the first 300 characters) together with your account, whether it returned results, and whether you opened one of them. We keep these records to measure and improve search quality, for example, to find searches that come up empty. Because you can type anything into search, please avoid entering sensitive information. The text of your search is also sent to Google’s Gemini AI to interpret it and rank results (see “Service providers”).

Device data and identifiers. If you enable notifications, we store your device’s push token. The app and website use Google Firebase services that may collect device identifiers and diagnostic information to operate, including app-integrity checks (Firebase App Check: Apple App Attest/DeviceCheck on iOS, reCAPTCHA on the web) that protect against abuse. With your App Tracking Transparency consent, the iOS app also shares your device’s advertising identifier with Google for ad personalization (see “Service providers”).

Activity and notification signals. We store a coarse “last active” timestamp (updated at most a few times a day when you open the app) and, if you turn on club or “Picks” notifications, your notification preferences. We use these to route notifications and to pause or space them out for people who aren’t currently using Parletto.

Calendar. If you tap “Add to calendar,” the app asks for calendar permission and writes that one event to your device’s calendar. We don’t read your existing calendar and we don’t send calendar data to our servers.

On Apple’s App Privacy labels, the categories above correspond to Contact Info (account), User Content (what you post), Identifiers and Diagnostics (device data), and Usage Data (interactions, search history, recommendation and swipe signals, and activity timestamps).

We use the information above to run Parletto: showing you your campus’s events, personalizing your feed to your interests, powering search and the “Picked for you” recommendations (which use the clubs you follow, your chosen interests, and your swipe feedback), delivering notifications you opt into, giving club officers aggregate analytics about their events, and keeping the platform secure (verifying that requests come from real devices and real people, enforcing campus boundaries, and moderating reported content).

We retain search-query and engagement records over time so we can evaluate and improve how search and recommendations work.

Search queries are also processed by a machine-learning model to interpret what you’re looking for; see “Service providers” below. The iOS app is supported by advertising: we use Google AdMob to display ads, personalized only with your consent.

We build on a small set of processors rather than running our own servers:

• Google Firebase: authentication, database, file storage, cloud functions, hosting, push notifications, and App Check (app-integrity verification, including Apple App Attest on iOS).
• Google reCAPTCHA v3: abuse protection on the web dashboard. reCAPTCHA collects device and interaction signals under Google’s own privacy policy.
• Google generative AI (Gemini): the text of campus search queries is sent to Google’s AI service to interpret it and rank results.
• Google AdMob: the iOS app displays ads served by Google AdMob. If you grant the App Tracking Transparency prompt, the app shares your device’s advertising identifier (IDFA) with Google to personalize the ads you see; if you decline, ads are non-personalized (contextual) only. See How Google uses information from sites and apps that use its services.
• Google Analytics for Firebase: the iOS app includes Google’s Firebase analytics, which automatically collects app-usage events and device information (such as app-open and screen views, a device/app-instance identifier, device model and OS version, and coarse location inferred from your IP address) to help us understand how the app is used.
• Google ad measurement: alongside AdMob, the app includes Google’s ad-consent and on-device conversion-measurement components, which support and measure advertising. Advertising is currently limited and controlled by a server setting; where ads are shown, personalization still depends on your App Tracking Transparency choice as described above.
• Apple: App Store distribution and push-notification delivery.

We do not sell your personal information.

We keep your information while your account is active.

When you delete your account, from the iOS app (Settings → Account) or by emailing us from your account email, we delete your personal and behavioral data. This includes your profile and sign-in credentials, your device push tokens, the text of your searches and your search history, your view/save/share/join activity, your “Picked for you” recommendation data and your interested/not-interested swipe signals, your usage counters, your club memberships and notification subscriptions, your muted- and blocked-club preferences, and your club application, creator-request, chat-ban, and event-attendance records. Deletion cannot be undone.

Content you posted in shared spaces (events you created and messages you sent in club chats) is not erased but is de-identified: we remove your name, email, and the link to your account and replace them with “Deleted user,” so other members keep the context of past events and conversations. The text of your chat messages stays visible but is no longer tied to you. Votes or reactions you left on other people’s posts may remain in this de-identified form. Aggregate analytics (such as an event’s total view count) also persist, because they no longer identify you.

We keep two narrow exceptions to support safety, in a de-identified form:

• If your account was blocked or banned for violating our rules, we retain a minimal enforcement record: a one-way hash of your email (not your email itself) and the reason, so the ban stays effective. We remove your name and account identifier.
• If another member filed a report about content you posted, we keep that report as a safety record. We remove your identifiers from it where we can; we do not delete a report that someone else made about reported conduct.

Questions about deletion, or a request to remove a retained record, go to admin@parlettoapp.com.

The website does not use advertising or analytics cookies. Signing in stores an authentication session in your browser’s local storage so you stay signed in; reCAPTCHA may set its own cookies as part of abuse protection. Clearing your browser storage signs you out.

The iOS app keeps some data only on your device, for example your saved-events list and cached images. On-device data is removed when you delete the app.

Parletto is built for college and university campuses and is intended for users 13 and older, matching its App Store age rating. The service is not directed to children under 13, and we don’t knowingly collect personal information from children under 13. If you believe a child under 13 has an account, contact us and we’ll remove it. See also our Terms of Use.

Parletto is a third-party service used by students; it is not operated by your school, and unless your campus has separately arranged otherwise, the information here is not maintained as part of any school’s official education records.

If we change this policy, we’ll update the date at the top of this page. For significant changes we’ll take reasonable steps to notify you in the app or by email.

Privacy questions, requests, or concerns: admin@parlettoapp.com.