Privacy Policy
Workbench ("we", "our", or "us") operates the Workbench mobile and web application. This page explains what data we collect, how we use it, who we share it with, and the rights you have over it.
1. Information we collect
- Account data - email address and password (passwords are hashed by our authentication provider, Supabase, and are never visible to us).
- Profile data - display name, handle, optional bio and avatar that you create inside the app.
- Content — projects, posts, clips, comments, direct messages, hashtags, and any photos or videos you upload.
- Social graph - who you follow, who follows you, who you have blocked, what you have saved, and what collections you have created.
- Push notification tokens - when you opt in to push, your device sends us a token so we can deliver social and transactional notifications.
- Diagnostic data - anonymous crash reports and performance traces collected through Sentry. We disable PII collection on the SDK; only an internal account ID is attached.
2. What we do not collect
- We do not run third-party advertising or analytics SDKs.
- We do not access your contacts, calendar, location, microphone, or camera unless you explicitly use a feature that requires it (for example, capturing a clip).
- We do not use the iOS IDFA or any other cross-app tracking identifier.
3. How we use information
- To provide the core service - display your feed, deliver your messages and notifications, and serve the media you upload.
- To keep the service safe - process abuse reports, enforce blocks, and respond to legal requests where required.
- To improve the service - understand crashes and performance issues so we can fix them.
4. Who we share information with
We do not sell your personal information. We share data only with infrastructure providers strictly necessary to operate the service:
- Supabase - database, authentication, and serverless functions.
- Cloudflare - content delivery, image storage (R2), and video processing (Stream).
- Expo / Apple / Google — push notification delivery.
- Sentry - anonymous crash diagnostics.
5. Data retention and deletion
You can delete your account at any time from Settings → Delete account. Deletion immediately removes your profile, posts, clips, comments, messages, follows, saves, collections, blocks, notifications, and push tokens. Backups containing your data are purged on our normal rotation (within 30 days).
If you have uninstalled the app and cannot reach the in-app deletion flow, email support@myworkbench.io from the address on file and we will delete your account within 30 days.
6. Your rights
You have the right to access, correct, export, or delete your personal data. Most of these are available in-app. For anything else, contact us at support@myworkbench.io.
7. Children's privacy
Workbench is not directed to children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.
8. International transfers
Our infrastructure providers operate globally. By using Workbench you consent to your data being transferred to and processed in countries other than your own, with safeguards consistent with applicable data protection law.
9. Changes to this policy
If we make material changes we will notify you in-app and update the "last updated" date above. Continued use of the service after such changes constitutes acceptance.
10. Contact
Questions about this policy: support@myworkbench.io.
