Effective July 16, 2026
BRAG is a personal-proof app: you organize your life into boards, post brags to document the work, and share what you choose with a small circle called your clique. This policy explains what information BRAG collects, why, and what control you have over it. The short version: your content is yours, your privacy settings are enforced at the database level, we don't run ads, and we don't sell your data. Ever.
BRAG is built and operated by Valentino Cavaricci ("we", "us"). You can reach us anytime at valcavaricci@icloud.com.
Account information. Your email address and a password (stored only as a secure hash by our infrastructure provider — we never see or store your password in readable form).
Profile information. The name, @handle, bio, location text, profile photo, and profile color you choose to add. All of it except the handle is optional.
Your content. The boards, brags (text, photos, audio, and files you attach), arcs, comments, cheers, and pins you create in the app, along with the visibility level you assign to each.
Clique relationships. Who you invite to your clique and whose invitations you accept.
Usage events. Basic in-app events (for example, "a brag was posted" or "a board was pinned") tied to your account, which we use to understand how BRAG is used and to improve it. We do not use third-party advertising or analytics trackers.
We do not collect your contacts, precise location, browsing history, or anything from outside the app.
Every board, brag, and arc carries a visibility setting: public (anyone using BRAG can see it), clique only (only the people in your clique), or private (only you). These rules are enforced by row-level security in our database — not just by the app's interface — which means a request from someone who shouldn't see your content returns nothing, regardless of how it's made. Comments and cheers on a brag are visible only to the brag's owner and their clique.
Only to run BRAG: to store and display your content according to your visibility settings, to operate cliques, feeds, pins, and alerts, to send the local reminders you set up (these are scheduled on your device, not by our servers), to keep the service safe (blocking, reporting), and to understand usage so we can improve the app.
We do not sell your information, share it with advertisers, or use it to train AI models.
BRAG runs on Supabase, which provides our database, file storage, and authentication. Your data is stored on their infrastructure and handled under their security practices. Supabase processes data on our behalf and has no right to use it for its own purposes.
Other BRAG users see only what your visibility settings allow. Beyond that, we share data only with Supabase (as our infrastructure provider) and if we're legally required to. That's the whole list.
If you block someone, they can no longer see your content and you won't see theirs; they aren't notified. If you report content, we receive the report along with the reported item so we can review it.
You can delete your account at any time inside the app: Profile → Settings → "Delete my account." Deletion is immediate and permanent: your profile, boards, brags, arcs, comments, cheers, pins, and clique relationships are removed from our database. Media files you uploaded stop being reachable through BRAG immediately, and may persist in backend storage for a limited period before being permanently removed. There is no undo and we cannot recover a deleted account.
BRAG is not directed at children under 13, and we don't knowingly collect information from anyone under 13. If you believe a child under 13 is using BRAG, contact us and we'll remove the account.
Data travels between the app and our servers over encrypted connections (HTTPS). Access to content is gated by row-level security tied to your signed-in identity. No system is perfectly secure, but privacy enforcement lives in the database itself — the deepest layer we have.
If this policy changes in a way that matters, we'll update the date at the top and note the change in the app. Continued use of BRAG after a change means the updated policy applies.
Questions, concerns, requests about your data: valcavaricci@icloud.com.