Privacy Policy
Senioritis is designed directly for high school seniors as a private, high-fidelity alternative to fleeting Instagram dumps and chaotic group chats. We believe your high school memories belong to you and your classmates—not advertisers, data brokers, or strangers.
Direct-to-Senior Memory Capsule
Senioritis is an independent web application and digital scrapbook sold directly to graduating seniors, senior class committees, and student councils. Senioritis is not an enterprise school administration monitoring tool, learning management system (LMS), or academic surveillance software.
We operate as a private social memory repository where students celebrate milestones, sign digital yearbook pages, and preserve senior year memories together.
What Information We Collect
Information you provide directly:
- Classmate Profiles: Display name, optional nickname, senior quote, bio, and freshman vs. senior portrait photos.
- Gender: Male or female, chosen when you join and editable on your profile. It is used only for Senior Whispers, which tell the person you complimented whether it came from a senior boy or a senior girl. It is never shown next to your name and never shared outside your class.
- Memory Content: Photos, short videos, memory captions, event tags, and sticker badges you upload.
- Memory Wall Notes: Digital sticky notes, graduation shoutouts, and inside jokes pinned to the wall.
- Letters & Comments: Yearbook letters, comments and reactions you write.
- Senior Superlatives & Polls: Category nominations and your votes.
- Authentication Data: Your email address for the sole purpose of sending a 6-digit one-time login passcode (OTP). We do not store plaintext passwords.
Information collected while you use the app:
- Notification token: if you allow notifications, an identifier for your device so we can send them.
- Network address (IP): used only briefly to limit abuse, such as repeated sign-in attempts. It is not kept with your profile.
- Safety records: reports you make, and people you block, so those choices are respected.
What we NEVER collect or do:
- We never sell your personal data or photos to third parties or brokers.
- We never serve targeted third-party advertising or cross-site tracking pixels.
- We never collect government identification numbers or sensitive biometric scans.
- We never track your real-time GPS location.
- Photos can carry location details that your phone embeds in the file. We do not read or use them, and videos have this information removed when they are processed. Turn off location tagging in your camera settings if you do not want it stored in your photos.
UAE Legal Standards & Content Consent
For users in the United Arab Emirates, Senioritis complies with Federal Decree-Law No. 45/2021 on Personal Data Protection (PDPL) and Federal Decree-Law No. 34/2021 on Combatting Cybercrimes:
Consent & Photo Publishing (Article 44)
Under UAE Cybercrime Law, publishing photos or comments of individuals without their explicit consent is strictly prohibited. You agree only to upload photos and moments where your classmates have consented to be included.
Right to Erasure / Immediate Removal
Any student featured in any photograph, video, sticky note, or superlative has the absolute right under UAE PDPL to request its immediate removal. We provide an in-app Report Flag on every item for instant escalation.
Zero Tolerance for Cyberbullying
Defamatory statements, harmful rumors, bullying, harassment, or unauthorized candid photography are strictly forbidden and will result in immediate removal and potential profile suspension.
Privacy Controls: Public vs. Class-Only
When posting a memory or sticky note, you have granular control over visibility:
- Public Moments: Visible to anyone who has your class code, such as parents, alumni, and friends you share it with.
- Class-Only Moments: Hidden from visitors. Only signed-in seniors of your specific class capsule can view these items, including their comments and reactions.
- Letters: Yearbook letters can be marked class-only, so that only signed-in members of your class can read them. Letters are protected like the rest of your data, but they are not end-to-end encrypted.
Notice & Rapid Takedown System
If someone posts a photo of you that you don't like, or if any content violates community safety:
- Click the Flag / Report button located on any photo card, lightbox view, or sticky note.
- Select your reason (e.g. “I am in this photo and want it removed”).
- The report is immediately queued in our moderation dashboard and an alert is sent to our safety desk.
You can also email our dedicated safety team directly at support@senioritis.app with the class link and photo details for prompt removal within 24 hours.
Deleting your account: in the app, open your profile, choose Edit Profile, scroll to the bottom and select Delete Account. Your profile, photos, memories, comments, reactions, letters and other content are removed immediately, together with the stored files. Reports you filed about other people's content stay, without your name.
Edge Security & Encryption
Your data is guarded using multi-layered edge security:
- All network traffic is encrypted in transit (HTTPS / TLS).
- Photos and videos are stored with Cloudflare R2 under random file names, in a folder for your class. Their links are unguessable but are not password-protected: anyone who has a link can open that file, so do not share links to class-only content. Uploads are checked for type, size and class.
- Sign-in sessions are protected with cryptographic signatures and expire automatically: students stay signed in for up to 30 days, and platform administrators for 8 hours.
- Sign-in codes are single-use, expire after 10 minutes, and stop working after five wrong guesses.
- Our database is backed up every night and each backup is kept for 30 days, so that we can recover from mistakes or outages. When you delete content or your account it is removed from the live service straight away, but it can remain in those backups until they expire, at most 30 days later. Photos and videos are not part of these backups and are deleted immediately.
Who Processes Your Data
We use a small number of service providers to run Senioritis. They process data only to provide their service to us, and we do not sell your data to them or anyone else:
- Cloudflare: database and photo / video storage.
- Vercel: hosting of the website and app back end.
- Resend: sending your sign-in code by email.
- Expo and Apple: delivering push notifications to your device.
- Modal: converting and trimming videos you upload.
These providers operate data centres in several countries, so your data may be processed outside the United Arab Emirates.
Contact Our Safety & Privacy Team
If you have questions about this Privacy Policy, your rights under UAE PDPL or international data protection laws, or wish to request data erasure: