Trust & Privacy

Accounts are protected by email and password sign-in, with optional Google sign-in. Two-factor authentication (2FA) is available and can be set up from the account settings. Passwords are never visible to the SuperConnect team — they are stored as one-way hashes by our authentication provider.

Sessions are managed by secure tokens issued by our backend. Signing out clears your session on the device.

SuperConnect is built on the Lovable platform. The application backend uses managed database, authentication, and file storage services. Network traffic between your browser and our servers is encrypted in transit using HTTPS/TLS.

Access to your data is enforced at the database layer with row-level security rules so that one user cannot read or modify another user's private records.

We collect the information you provide to use the app: your profile (display name, optional username, bio, location, church, avatar and cover photos), the posts, reels, comments and reactions you publish, your friendships and direct messages, and the email address used to sign in.

We also record basic analytics (such as page paths, referrer and user-agent strings) to understand how the app is used and to keep it reliable. Analytics records are only readable by site administrators.

Posts, reels and comments are visible to other signed-in members of SuperConnect. Direct messages are visible only to the participants of the conversation. Friend requests can only be accepted by the person they were sent to.

Uploaded images and videos (avatars, cover photos, post images and reels) are stored in private buckets and served through short-lived signed links.

We use cookies and browser local storage that are necessary for the app to function — primarily to keep you signed in and to remember basic UI preferences. We do not use third-party advertising trackers.

You can edit your profile, manage your friendships, and delete your own posts, reels, comments and messages from inside the app. You can also delete your account from the account settings; deleting your account removes your profile and cascades to content tied to it.

If you have a security or privacy concern, or want to report a vulnerability, please reach out to the SuperConnect team through the contact details published on our home page. We will respond as quickly as we reasonably can.