Privacy Policy
Last updated October 9, 2026
Threefriends is a small social app where each person keeps at most three friends. This policy explains what we collect, why, who can see it, and how to delete it.
What we collect
- Account: the identifier and email address from Sign in with Apple or Google. If you use Apple's "Hide My Email", we only see the relay address.
- Profile: your display name, username, and optional profile photo.
- What you post: moments (photos or text with a caption), your status, memories and your side of them (notes and photos), and chat messages and photos.
- Connections: your friend requests, friendships, past friends, blocks, and reports you file.
- Device: a push notification token if you allow notifications, and crash reports.
We do not collect your location, your contacts, or advertising identifiers. We do not track you across other apps or websites.
How we use it
Only to run the app: to sign you in, show your profile, deliver your posts and messages to the people you chose, send the notifications you allowed, keep the three-friend rules, handle reports, and fix crashes. We do not sell your data or use it for advertising.
Who can see what
- Anyone signed in can see your name, photo, username, and whether you have a free slot.
- Only your three see your status and moments, and each other's three.
- A memory is visible only to the people tagged in it.
- A chat is visible only to the two people in it.
How long we keep it
Moments are hidden after 24 hours and deleted within a day after that. Statuses clear after 24 hours. Everything else stays until you delete it or delete your account.
Deleting your data
You can remove a moment, your side of a memory, or a memory you created at any time. To delete your account, go to You → Settings → Delete account. This deletes your profile, moments, statuses, messages, your sides of memories, and your photos. Memories you created stay for the other people in them, without your side.
Service providers
We store data with Supabase (database, file storage, and authentication, hosted in Singapore) and send push notifications through Expo's push service, which forwards them to Apple and Google. They process data only to provide these services.
Children
Threefriends is not meant for children under 13. If you believe a child under 13 has an account, contact us and we will delete it.
Your rights
You can ask for a copy of your data, a correction, or deletion by contacting us. Depending on where you live, you may have further rights under laws such as the GDPR or Thailand's PDPA.
Changes
If we change this policy, we will update the date above and, for significant changes, tell you in the app.