What we collect, who sees it, and how to get it deleted
Corkboard is a private app for small groups of friends and family. This page explains, in plain English, what the app stores and who can see it. Last updated September 8, 2026.
1. Who we are
Two people make Corkboard, in the United States. We're the "we" in this policy. You can reach us at hello@thecorkboard.app.
This policy covers the Corkboard iPhone app, the invitation pages guests open in a browser, and this website (thecorkboard.app).
2. What we collect
Almost everything Corkboard stores is something you typed in or uploaded on purpose, so your friends could see it. The full list:
Account
- Your email address and a password. We store only a hash of your password.
- Your first and last name.
Your profile
- Optional profile details you choose to fill in: photo, bio, phone number, a contact email, gender, birthday, home address and neighborhood, profession and employer, and "about me" items like food aversions, what you're watching or reading, hobbies, sports teams, schools, and places you've lived.
- Optional details about your partner: name, photo, phone, email, birthday, and similar "about" items.
- Optional details about extended family members (grandparents, siblings, and so on) that you add so your friends know who's who.
Your kids
- For each child you add: name, photo, birthday, gender, school, interests, favorite foods, and food aversions.
- An optional emergency card per child: allergies, medications, medical notes, an emergency contact, and a pediatrician. See Information about children.
- Optional wish lists for gifts.
Things you share with the group
- Messages, photos, and reactions in chats.
- Photos and captions in shared albums, including tags naming who's in a photo.
- Events you create, invitations, RSVPs (including adult and kid headcounts and answers to the host's questions), event chats, tasks, and bring-lists.
- Live posts: statuses, "where I'll be" plans, quick polls, date polls, shared links, and photos that vanish after 24 hours. Some can include a place name, and, if you switch it on, a map pin.
- Calendar plans you choose to share, and who you shared them with.
- Local happenings, activities, recommendations, trusted resources (for example a babysitter's name and number), lifehacks, favorite things, and recipes.
Things only you can see
- Your circles (the private labels you use to organize friends), your to-do lists, notes, meal plans, and shopping lists. Your theme choice and app settings stay on your phone.
Technical bits
- A push-notification token for your device, if you allow notifications, so we can deliver them.
- Standard server logs kept by our hosting provider (see Services), which include your IP address and the time of each request.
- Reports and blocks you file, so we can act on them.
- A short activity log of the group-visible things you add (what kind of thing, and when), so friends can see what's new.
- If you agree to be the RSVP contact for an event, the name and contact details you approve are saved with that event so guests can reach you.
3. Who can see it
Corkboard has no public profiles or feeds. You have to sign in to see anything, and search engines can't index it. The one page that works without an account is an event invitation page, which anyone who has its link can open. During the beta, everyone who signs up lands in one shared group, so please only bring in people you know. Within that group, visibility works in layers:
| Information | Who can see it |
|---|---|
| Name, photo, bio, and "about me" items | Everyone with a Corkboard account (during the beta, that's one shared group). Your phone number and contact email are shown only if you switch on "show my phone" or "show my email." |
| Home address, birthday, and partner details | Friends you've accepted. In Share Permissions you can hide your address, phone, email, or birthday from an individual friend. Today that hides it in their app, and we're working on enforcing it at the database level too. |
| Kids' names, photos, and details | Friends you've granted the "kids" permission. It's on by default when you accept a friend, and you can turn it off per friend. |
| Kids' emergency cards (allergies, medications, contacts) | Friends you've granted the "allergies" or "emergency" permission. Also on by default, also adjustable per friend. |
| Statuses, quick polls, shared links, and 24-hour photo posts | Friends you've granted the "live feed" permission, or a custom list you pick for that post. "Where I'll be" plans follow your calendar sharing setting below. Comments on live posts can be seen by anyone in your group. |
| Calendar plans | Only you, unless you mark a plan as shared. Sharing your calendar with a friend is off by default. |
| Events and guest lists | The host, co-hosts, and invited guests. The host chooses whether guests can see who else is going. |
| Chats | Members of that chat or group. |
| Albums | Everyone in the group, only people you pick, or only you, depending on the album's setting. Event albums follow the event's guest list. |
| Recommendations, resources, lifehacks, local happenings | Everyone in your group. |
| Circles, to-dos, notes, meal plans, settings | Only you. |
Blocking someone removes them from your friends-only sharing in both directions: neither of you can see the other's address, kids, emergency cards, calendar, statuses, live posts, or wish lists; they can no longer open your profile or send you requests; and their messages are hidden from you. Things shared with the whole group (group chats you're both in, events, albums, recommendations, local posts, comments) stay visible to both of you. They are not told they've been blocked.
4. Information about children
Corkboard accounts are meant for adults. We don't knowingly let anyone under 18 create an account, and we'll remove an account if we learn it belongs to a child. Parents and caregivers can add information about their own kids, including sensitive things like allergies and medications, so that the friends they trust have it during a playdate or an emergency.
You decide which friends see it, and you can change your mind per friend at any time under Share Permissions. We never use children's information for anything except showing it to the people you chose. If you're a parent and believe someone has added information about your child without your permission, contact us and we'll remove it.
5. Your phone's permissions
Corkboard asks for a few iPhone permissions, and only when you use the feature that needs them.
- Contacts. To find friends, you pick contacts using Apple's picker. Corkboard compares the phone numbers and emails of the contacts you picked against your group's directory on your phone. Your address book is never uploaded, hashed, or sent to us. When a host invites a guest from Contacts, only that one guest's name, email, or phone is saved. It's stored with the event so the host can send the invitation, and other members can see it there.
- Calendars. If you connect your phone's calendars, Corkboard reads busy and free times to show next to the group's plans, and it can write events you're going to into a calendar you choose. Corkboard does that on your phone and sends nothing from your device calendars to our servers.
- Location. Used to search for nearby places, to show local weather, and to pin yourself on the map when you choose to. See Location.
- Photos. Only the photos you pick are uploaded. "Add to Photos" permission is used to save a photo from Corkboard to your camera roll.
- Notifications. Optional. If you allow them, we store a device token so we can deliver them.
6. Location
Corkboard has no background location tracking. The only position it stores is the map pin you choose to post.
- When you search for a place, Corkboard sends your approximate location to Apple Maps to rank nearby results. If you tap "use my location," it sends your current position to Apple to turn it into a place name you can edit.
- For the weather on your Home screen, Corkboard sends your location, rounded to about a kilometer, to a weather service. See Services.
- Corkboard stores a map pin only when you post something with a place and switch on "Show me on the map." You choose how long it stays up (one, four, or eight hours for statuses; a set window for planned locations). After that the app stops showing it, and clearing your status deletes it.
7. Guests who RSVP from a link
Hosts can share an invitation link with people who don't use Corkboard. Anyone who has the link can open the invitation page, which shows the invitation card or cover image, the event's title, date, location, description, dress code, host name, any extra details the host added, and how many people are going.
To RSVP, a guest enters their name, optionally an email, their answer (yes, maybe, can't), headcounts, and answers to any questions the host asked. We store that with the event so the host can see it. The invitation pages set no cookies and run no analytics or scripts. They load a font from Google Fonts, which receives a standard web request from your browser. If you RSVP'd as a guest and want your reply removed, ask the host or contact us.
8. Services that help us run Corkboard
We use a small number of providers. The table shows what each one receives.
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Hosts our database, file storage, sign-in, and server functions, on Amazon Web Services infrastructure | Everything listed in What we collect |
| Apple Push Notification service | Delivers notifications to your iPhone | Your device token, the notification's text, and which screen it should open |
| Apple Maps | Place search, maps, and turning coordinates into place names | What you type into a place search, an approximate location to rank results, and your position when you tap "use my location" |
| Open-Meteo | Weather on your Home screen | Your location rounded to about a kilometer. No account, no identifier. |
| RainViewer | Rain radar in the weather detail | Standard map-tile requests for the area shown |
| Resend | Sends invitation emails to guests, when a host chooses email | The guest's name and email and the invitation details |
| Imgflip | Meme templates in the meme picker | Nothing about you. The app fetches a public template list, and if someone posts a meme, your phone loads that image from Imgflip. |
| DreamHost | Hosts this website | Standard web-server logs, and the forms you submit here |
When you paste a link to share it or to post a local happening, your phone fetches that page directly to build a preview, so the site sees a normal request from your phone, not from us. Recipe import works the same way first; if the site blocks the request from your phone, the app asks our server to fetch the recipe page instead, and the site sees a request from our server carrying only the address of the page.
We have no advertising partners or data brokers, and we don't sell or rent personal information.
9. No ads, no tracking
Corkboard contains no advertising, no analytics SDK, no crash-reporting SDK, and no attribution or tracking code. We don't use Apple's advertising identifier, and the app doesn't ask for permission to track you across other apps.
During the beta, Corkboard is delivered through Apple's TestFlight, which collects crash logs and any feedback you send through TestFlight under Apple's own privacy policy.
10. Storage and security
Your data is stored with Supabase on Amazon Web Services infrastructure, encrypted in transit and at rest. Access rules on the database enforce the main sharing boundaries: friends versus non-friends, the kids, emergency-card, live-feed, and calendar permissions, chat and event membership, and album audiences. Today the app, not the database, applies a few finer controls: the individual address, phone, email, and birthday toggles for a friend, the "show my phone" and "show my email" switches, and hiding a status after its timer ends. We're moving those into database rules as well.
Chat photos and album photos are stored privately and served through short-lived signed links. Other images (profile and kids' photos, group and circle pictures, event covers and attachments, invitation cards, live photos, recipe and local-post pictures) are stored under long, random addresses that aren't listed anywhere, but anyone who has one of those addresses can open the image without signing in. Treat a shared image link like the image itself.
Your sign-in session lives in your iPhone's secure keychain. Corkboard is early software, and no system is fully secure. If we learn of a breach affecting your information, we'll tell you.
11. How long we keep things
- Most things stay until you edit or delete them, or until we delete your account at your request.
- Live photo posts are removed about a day after they're posted. Statuses stop being shown after the timer you picked, but the status itself (including any map pin) stays stored until you clear it or post a new one, which replaces it. Planned locations are saved as entries on your Corkboard calendar: they pin you on the map only during the window you chose, and the entry stays on your calendar until you delete it.
- Push tokens are removed when Apple tells us a device is no longer registered, or when a different account signs in on that device. Signing out alone doesn't remove the token; turning notifications off in iPhone Settings stops delivery.
- Our hosting providers keep server logs for a limited time for security and troubleshooting.
12. Your choices and your rights
- Edit or remove your profile, kids, posts, photos, and recipes in the app at any time.
- Sharing permissions. Adjust what each friend can see under Share Permissions. Block anyone from their page.
- Notifications. Turn them off in iPhone Settings.
- Delete your account. During the beta, one of us deletes accounts by hand. Email hello@thecorkboard.app from the address on your account, or use the support form, and we'll delete your account, profile, kids, messages, photos, posts, and RSVPs within 30 days. The delete account page has the full list and a form. Things you posted into other people's spaces, like a message in a group chat or a photo in a shared album, are removed too. We'll confirm by email when it's done.
- Get a copy. Ask us and we'll send you an export of your data before it's deleted, or any time.
- Questions or complaints. Contact us. If you live somewhere with privacy laws that give you additional rights, such as the EU, the UK, or California, you have them here too, and we'll honor them.
13. This website
thecorkboard.app uses no cookies and no analytics. If you fill in the invite or support form, we store what you typed (name, email, city, group size, subject, and message) on our web host, along with the time, your browser's user-agent string, and a hashed version of your IP address that we use only to limit spam. We email ourselves a copy and use it only to reply to you and to contact you about the beta. Fonts are loaded from Google Fonts, which receives a standard web request from your browser.
14. Changes
When we change this policy in a way that matters, we'll update the date at the top and let you know in the app or by email.
15. Contact
Email hello@thecorkboard.app or use the support page.