Your words. Your say.

Last updated: [release date TBD]

CD is provided by Solsk, Inc. I’m Brandon, the person building CD. References to “I” in this policy mean Brandon acting for Solsk, Inc. For privacy questions or an account request, contact brandon@solsk.app.

Unpublished Four Tracks draft. This page is prepared for a future backend and app release. The features and changes below are not live. Release dates, agreement wording, and controls marked [label TBD] still need review.

This policy covers the CD iPhone app and this website. CD is for adults 18 and older in the United States. Identity verification is optional. Skipping it leaves the app available. The current development build uses simulated Stripe test checks, clearly marked as tests; they do not establish real identity or age.

Policy version: [agreement version/date TBD]. [Agreement decision TBD: whether this release asks returning users for a new agreement, and the wording and timing of that request, need Brandon’s decision.] Publication alone does not update an installed app or record your acceptance.

Browsing this website

You can read these pages without an account. This website has no sign-in, forms, advertising, analytics, tracking pixels, or connections to your CD account. Its fonts and artwork are served with the website. CD’s website code doesn’t set cookies or store a visitor profile in your browser.

This website is served from Google Firebase Hosting at solsk.app/cd/. A copy also remains at cd-policies.btixist.chatgpt.site, hosted using OpenAI Sites and Cloudflare, so older versions of the app can still open it. Hosting providers receive network and request information, such as IP addresses, browser information, and request times, to deliver and protect their services. Their operational records and any provider-managed security cookies follow their own policies, separately from CD’s app-log periods below. See Firebase’s privacy and security information, OpenAI’s privacy policy, and Cloudflare’s privacy policy.

If you email me, your email service and mine handle the message. I receive the address, message, and attachments you choose to send so I can answer and handle your request. Links to Apple and other providers take you to their services and their privacy terms.

What the app uses

Private by default

Drafts and newly kept details start private. In you, you review suggested details before keeping them. In details, use this for matching and show this on my profile are independent choices, both off for newly kept information.

Approved photos, your name, age, broad place, details you’ve chosen to show, and clubs you’ve chosen to show appear in an authorized invitation or connection. Clubs must still be approved in your saved city. Ended connections show no clubs. There is no public catalog of people. Clubs have no accounts and receive no member lists, responses, or names from CD.

An invitation or connection can show the attached listing card. CD re-checks it whenever it’s loaded. The card is hidden if the listing is withdrawn, unapproved, or becomes sensitive; its place is withdrawn or its event is canceled; a club or flyer changes its linked place or event; or the viewer is below its current minimum age. An event removed before it ended stays hidden. A flyer or event that simply ended can stay as context.

CD considers eligible people across your saved city. It orders them using the ask, details allowed for matching, related topics, and matching memberships. A matching membership that covers the ask, being going and findable on an attached flyer, and allowing matching and welcoming newcomers to the attached non-sensitive club can move you earlier in the order. No matching scores are shown. These are ordering signals, not compatibility percentages. Matching order does not use private chat messages or infer identity or current availability. The invitation-routing service keeps limited candidate identifiers, scores, and source-change checks while preparing invitations, without copying private profile text into its queue. Those records follow the ask’s operational cleanup period, including deletion handling. No one pays to rank people; sponsorship of a place never affects ordering.

For activity and hangout asks only, being going and findable on a flyer lets asks that attach that flyer reach you, even if hangout invitations are off. Allowing both matching and welcoming newcomers for a non-sensitive club lets asks that attach that club or one of its flyers reach you the same way. Leaving the club or turning its matching off ends that welcome-newcomers reach and turns findability off on your responses to its flyers. Your going response stays and still counts. For a sensitive club, leaving or turning matching off also expires its pending flyers. Welcoming newcomers never opens this reach for a sensitive club.

A flyer’s going count appears only at three or more. It includes people who haven’t chosen to be findable. There is no attendee list. Choosing to be findable allows relevant person-to-person asks to reach you; it does not send your name to the club.

You can edit or remove details, withdraw either permission, change your place, or pause new invitations. Permission to receive an invitation doesn’t say you’re free right now. Ordinary social interest doesn’t count as romantic interest; romantic invitations require explicit choices and compatible private preferences.

The third-places map uses your saved city to request approved public listings. It shows venue coordinates, not people’s locations. Opening it doesn’t request a new device location or track your movement. CD doesn’t send your private ask or profile to the businesses on the map. Opening directions, a business website, or the system share sheet is a separate choice. A place suggestion you send in a conversation uses the existing encrypted chat service.

Audio, suggestions, and content checks

CD records the version and time of your account agreement and whether AI processing is allowed. That agreement covers the processing explained here. You do not have to turn on a separate switch for each draft or recording. [Agreement decision TBD: the release wording must explain whether returning users are asked to accept a new version.]

When you deliberately save words in you with AI processing allowed, CD saves your private draft and then sends those words through CD’s services to OpenAI for grounded detail suggestions and content checks. A transcription you choose to add to you follows the same process when saved. Saving does not select or keep any suggestion for you. You review the suggestions and choose which to keep; matching and profile visibility remain separate choices, both off for newly kept details. If suggestions fail, your confirmed saved words remain available.

A recording stays in protected storage on your iPhone until you deliberately request transcription. Opening the app or starting a recording does not send audio to OpenAI. Requesting transcription sends that recording through CD’s services to OpenAI to turn it into text. You can review and edit the transcript. Merely opening an old draft, recovering a recording, or agreeing to an updated policy does not automatically send old words or audio for processing.

Selected photos and deliberately submitted asks, replies, and profile details can also go through CD’s services to OpenAI for photo or content checks and interpretation needed for the feature you chose. Private chat is not sent to AI.

For this release, the existing ask-interpretation and detail-topic requests also return up to eight related activities. There is no extra AI call and no call for each candidate. A detail gets related topics only while matching is on. A server filter excludes terms in these categories: faith; recovery; health; sexuality, gender identity, and dating; ethnicity and nationality; politics; age; availability; and help, teaching, and coaching.

Related topics can make someone eligible for activity asks, meet plain interest requirements on activity and hangout asks, and help order those asks. Hangout asks otherwise still require hangout invitations to be on, apart from the attached-listing choices explained above. Related topics also help choose relevant flyers and look up listing suggestions. They never establish a skill, willingness to help, a request for help, or a qualifier such as “fluent”. They aren’t used to match or rank people for learning, help, or romantic asks. Listing suggestion lookup can still use an ask’s related topics. They’re never shown in the app, but your own export includes them.

A detail’s related topics are cleared when you turn its matching off, remove it, or change its source text in you. They’re replaced when you edit the detail. An ask’s related topics stay with that ask. Once deployed, this change can match existing matching details to more asks without you doing anything: an asker’s related topics can be compared with topics already stored for your details.

The server sends OpenAI no listing records, memberships, attachment fields, or flyer data. It still sends ask text for interpretation. That text may include a listing’s name or venue if you, or a prepared draft you submit, put it there. Looking up listing suggestions, delivering flyers, and saving memberships use no AI.

Change your AI setting

You can turn AI processing off in settings. After CD confirms that change, new requests to OpenAI are stopped, including detail suggestions, transcription, selected-photo checks, and the checks needed to prepare or share asks, replies, and profile details. Features that require those checks cannot finish until you allow processing again. You can still type and save a private draft of your words; saved audio stays on your iPhone when transcription is unavailable.

Turning processing off does not delete your saved words or stored topics, undo a request already sent to a provider, or change your independent matching and profile permissions. Stored topics can keep matching until you turn matching off or remove the detail. Turning AI off doesn’t stop incoming invitations or prevent saving memberships, changing the flyer preference, or responding to flyers. You can manage those choices separately. To allow new AI processing again, deliberately agree to the current terms and privacy policy in settings. Re-enabling does not automatically process old drafts or recordings.

OpenAI states that API content isn’t used to train its models by default. Retention depends on the endpoint and the applicable data controls; submitted content may be retained for safety purposes. Disabling response storage doesn’t mean zero provider retention. OpenAI’s data controls explain those differences.

Before photos are reviewed and stored as profile images, CD removes embedded image metadata such as GPS information. A rejected image isn’t saved as an approved profile photo. CD can’t recall a picture someone has already received or saved.

Private conversations

Private text chat uses end-to-end encryption through Matrix. Participating devices hold the message keys. CD’s chat hosting stores encrypted content and necessary delivery information; it doesn’t hold a platform device that can decrypt your conversations. Notifications contain no private message text.

Keep your recovery key somewhere only you can access. Without it or a verified device, old messages may be unrecoverable. Starting with new encryption keys doesn’t unlock old history.

Ending a conversation or blocking someone stops new messages after the server confirms closure. A connection problem can leave that confirmation pending. Ending an ask or pausing invitations leaves existing conversations available.

You can remove your retained conversation. Hosted encrypted history remains while either person retains it and is scheduled for removal after both remove it. Account deletion counts as your removal. Previously delivered copies, screenshots, and another person’s saved content can’t be recalled.

Reports are your choice

A regular report about a person shares your description, the original invitation, and the account or reference involved. It doesn’t include private messages.

To report messages, select the particular messages and review the exact text before sending. Only that selected evidence is disclosed for protected review. A recipient can also copy, save, screenshot, or report messages you send them.

You can report a club, flyer, or place. Choose a reason from the fixed list: spam, misleading, unsafe, inappropriate, or other. You may add up to 2,000 characters of text. Listing reports share the ten-per-day limit with reports about people.

A listing report changes things automatically only for you. It hides that listing from your suggestions. If you report a flyer you have pending or marked going, it is dismissed; it won’t be delivered to you again and you can’t mark it going. Reporting a club doesn’t stop its flyers, and reporting a listing doesn’t remove it from browse lists. I review listing reports and may withdraw a listing for everyone. Listing reports have no appeal and never suspend a person’s account.

Services involved

• Apple provides Apple sign-in, App Store purchases and subscription management, notification delivery to iPhone, and Apple Maps for the third-places map and city-name lookup. Apple receives the map requests needed to provide that service.
• Google and Firebase provide authentication, app security checks, protected account and photo storage, app services, and notifications. CD’s private chat hosting also runs in its Google Cloud project. Provider records can include network and installation information.
• OpenAI processes audio, text, and selected images, including related topics from asks and matching details, through the actions and current policy agreement described above.
• RevenueCat connects subscription events and entitlements to your CD account identifier. Purchase history therefore relates to your account.
• Matrix software provides encrypted chat delivery through CD’s private Synapse, database, and gateway services.
• Stripe handles optional ID and selfie checks. The current development build uses simulated test checks, marked as tests. CD keeps session references and check results, not ID images or biometric data. Account deletion also requests redaction of associated Stripe sessions. Stripe describes its own processing and retention in its privacy policy.

These providers process information under their own applicable terms. CD-managed deletion periods don’t override retention for records controlled by a provider. Processing locations depend on the service; a US audience doesn’t mean every provider processes information only in the United States.

How long things stay

Scheduled removal may take time to finish, including retries after a service failure. An earlier encrypted copy can remain in a CD-managed backup for that backup’s seven-day lifetime. Provider-controlled security, service, and transaction records have separate retention.

Your controls and requests

Use details to edit or remove information and its permissions. In settings, you can turn AI processing off or agree to allow it again, pause invitations, manage notifications, block people, appeal a decision about a person, export data, or delete your account. Support has the steps.

The release will also have controls for memberships and each permission [label TBD], receiving flyers [label TBD], and flyer responses and findability [label TBD]. Pausing stops new flyers and flyer notices. Flyers already delivered stay in meet. The final labels and the removal route for withdrawn or other-city memberships still need review.

Your export includes account information, your current policy agreement and AI setting, approved photo data, saved details, reports about people and appeals, subscription and invitation records, and drafts and saved recordings available on that iPhone. Stop an active recording before exporting. Other accounts’ files, private chat keys, and decrypted chat text aren’t included. CD’s server can’t add decrypted messages to an account export.

For this release, your export also includes:

• Every saved membership, including its permissions, the club’s topics, its sensitive flag, and memberships of withdrawn or other-city clubs. It doesn’t expose the sensitive category.
• Flyer deliveries and responses: the flyer and club, state, findability choice, source, and dates, without scores. A not-going response is stored as pending, with findability off.
• Listing reports, including their ID, reason, text, status, and date. My decision record and separate withdrawal records aren’t included.
• Your flyer preference and the related topics on your details and asks.
• Attachments on your own asks. Invitation and connection exports leave attachments out. A listing’s matching topics copied onto an ask are also left out.

The export doesn’t include the weekly flyer count, stored listing suggestions, flyer routing records or flyer delivered counts, preview receipts, or scores.

Account deletion requires fresh Apple confirmation. It removes your account data, closes your chat participation, and clears the account’s local encrypted session after confirmed removal. It also removes your memberships and permissions, flyer preference, flyer deliveries and responses, weekly flyer count, listing reports and their decisions, listing suggestions, preview receipts, and your asks and invitations with their attachments. Related topics go with the deleted details and asks.

Deletion doesn’t give back flyer reach already used. Flyer routing records, delivered counts, and queued delivery records expire on their own schedules; routing skips deleted accounts and clears its candidate list when the job stops. My withdrawal records that cite a listing report remain for 180 days. A connection’s attachment stays with the other person until they remove the history. Reports about people and appeals can remain for the period above, and received copies can’t be recalled. Deleting the app or your CD account doesn’t cancel an App Store subscription.

For access, correction, deletion, or another privacy question, email brandon@solsk.app. If a self-service step fails, you can ask for help there too. I may ask for information needed to confirm that the request concerns your account. Please do not email passwords, identity documents, Apple sign-in codes, or chat recovery keys. The rights available to you depend on where you live; you can contact me to exercise applicable access, correction, or deletion rights. This page shows its update date, and changes to how CD uses your information will be reflected here.