Privacy Policy

Effective Date: June 16, 2026

Kalabash Group LLC ("we," "us," or "our") operates the Ussembly mobile application ("App"). This Privacy Policy explains how we collect, use, and protect your information when you use the App.

Information We Collect

Account Information

You create an account by verifying your phone number. We send a one-time code by SMS; we store your phone number only as a salted SHA-256 hash, never in plain text on our servers. You provide a display name during setup, but your name is kept on your device and is not stored on our servers — other users see you under the name saved in their own phone's contacts. You may optionally provide a bio, and a city (see Location below).

Profile Image

You may set a profile photo from your device's photo library. Profile photos are stored locally on your device and are not uploaded to or stored on our servers.

Contacts

With your permission, the App accesses your device contacts (names and phone numbers) to help you find people you know on Ussembly. Phone numbers are hashed using SHA-256 with a salt on your device before being sent to our server for matching. Raw contact data is stored locally on your device in a SQLite database and is never transmitted to our servers in unhashed form.

Location

With your permission, the App accesses your approximate location once during onboarding to determine your city. The precise coordinates are processed on your device and are not transmitted to or stored on our servers. The resulting city is saved to your profile so that others in your network can discover you by area; you can change or remove it at any time. We do not track your location or access it on an ongoing basis.

Messages

Chat messages you send through the App are transmitted in real time and stored on our servers to provide the messaging service.

Authentication Tokens

A JSON Web Token (JWT) is stored securely on your device using encrypted storage to keep you signed in. This token is not shared with any third party.

Diagnostics and Analytics

The App uses Google Firebase to operate and improve the service:

• Firebase Analytics — aggregate, in-app usage events (e.g., which screens are viewed) to understand how the App is used.
• Firebase Crashlytics — crash reports, including device model, operating-system version, and app version, to diagnose and fix problems.
• Firebase Performance Monitoring — performance metrics to keep the App responsive.

This data may include device information and a Firebase-generated identifier. We do not use it for third-party advertising, and we do not use it to track you across other companies' apps or websites.

How We Use Your Information

• Provide, maintain, and improve the Ussembly service
• Create and manage your account and verify your phone number
• Facilitate connections between users and match you with people you know
• Enable messaging, endorsements, projects, and circles
• Diagnose crashes, monitor performance, and understand aggregate usage
• Respond to your requests and support inquiries

Information Sharing

We do not sell, rent, or trade your personal information. We share information only in these circumstances:

• Service Providers: with providers who process data on our behalf under confidentiality obligations — specifically Google Firebase (analytics, crash reporting, performance) and Sendly, which delivers your one-time SMS verification code (and therefore receives your phone number for that purpose).
• Legal Obligations: when required by law, regulation, legal process, or governmental request.
• With Your Consent: when you have given explicit consent to share specific information.

Data Storage and Security

• Authentication tokens are stored in your device's encrypted secure storage.
• Contact data is stored locally on your device in a SQLite database.
• Phone numbers are hashed and salted; we do not store them in plain text.
• All communication between the App and our servers is encrypted using HTTPS.

Your Rights and Choices

You have the right to:

• Access your personal information by viewing your profile in the App.
• Correct your information by editing your profile.
• Delete your account and associated data using the in-app account deletion feature (Profile → Delete account) or by contacting us at support@ussembly.com. See our Account & Data Deletion page for details.
• Revoke permissions for contacts, location, and photos at any time through your device settings.

Depending on where you live (for example, California/CCPA or the EU/UK GDPR), you may have additional rights. Contact us to exercise them; we will not discriminate against you for doing so.

Children's Privacy

Ussembly is not directed at children under the age of 13, and we do not knowingly collect personal information from them. If we learn we have collected information from a child under 13, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the Effective Date; we may notify you of material changes through the App. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy, contact us at:

Kalabash Group LLC
Email: support@ussembly.com