Privacy Policy

Last updated: 18 September 2026

1. Who we are

TVERN is a UK-based community service for adults aged 18 and over. For data protection purposes, TVERN is the controller of personal data processed through the TVERN app and this website unless another controller is clearly identified.

You can contact us about privacy or data protection at support@tvern.com.

2. What information we collect

Depending on how you use TVERN, we may process:

• Account data: email address, authentication records and account status.
• Profile and locality data: display name, username, optional bio, selected town or city, broad location, preferred search radius, dad-life stages and interests. Locality verification also stores the selected place identifier, locality coordinates, region and country code so TVERN can provide distance-based features without asking for your precise device location.
• Age confirmation: a record that you confirmed you are 18 or over. TVERN currently does not ask for your exact date of birth as part of normal onboarding.
• Community content: posts, questions, replies, reactions and whether you chose to publish particular content anonymously to the community.
• Events & Meetups data: meetup ideas, meeting place/area, proposed or confirmed timing, expressions of interest, invitations and attendance responses.
• Discover data: products or items you add, ratings, reviews, pros and cons.
• Safety data: reports, blocks, hidden anonymous content, moderation actions, enforcement records and records needed to investigate abuse or protect the community.
• Pre-publication safety data: deterministic safety-rule outcomes, matched rule codes, safety-strike records and a one-way SHA-256 fingerprint of submitted text. TVERN does not store the raw submitted text in the pre-publication safety audit record; content that is successfully published is stored normally as part of the service.
• Preference and activity data: saved items, notifications and other settings needed to provide your account.
• Support data: messages you send to TVERN support and our replies.
• Beta feedback: bugs, UX comments or ideas you submit through the in-product beta tool, together with the page path, app/browser surface, client release and viewport size attached to help reproduce the issue. Query strings, screenshots and page content are not attached automatically.
• Technical and security data: information processed by our hosting, authentication and anti-abuse providers such as IP address, browser/request metadata, session identifiers, timestamps and security logs.
• Password exposure checks: when you create or change a password, TVERN can check it against the Have I Been Pwned Pwned Passwords service. The password is SHA-1 hashed in your browser and only the first 5 characters of that hash are sent for a padded k-anonymous comparison. TVERN does not send your plaintext password or the full password hash to that service.

3. Anonymous content

When TVERN offers an anonymous posting option, “anonymous” means anonymous to the community. TVERN’s authorised safety and moderation systems retain the account relationship behind that content so reports can be investigated and the service can be protected from abuse.

Other users should not be able to use TVERN’s normal interface to reveal the identity behind anonymous content. TVERN does not promise that anonymous content is untraceable to TVERN, our service providers or lawful authorities where disclosure is legally required.

4. Why we use your information and our lawful bases

• To provide the service and your account — including sign-in, profiles, feeds, replies, meetups, events, reviews, saved items and notifications. We generally process this because it is necessary to provide the service you request and perform our agreement with you.
• To keep TVERN safe — including deterministic pre-publication safety checks, sensitive-topic warnings, safety strikes, reports, blocking, content hiding, moderation, security monitoring, fraud/abuse prevention and enforcement. We generally rely on our legitimate interests in running a safe and trustworthy community and, where relevant, legal obligations.
• To provide support — to answer questions, resolve account problems and keep a record of support activity. We rely on contract and legitimate interests.
• To comply with law and protect rights — where processing is necessary for a legal obligation, legal claim, safeguarding matter or lawful request from a competent authority.
• Where consent is required — we will ask for it before carrying out the relevant processing, and you may withdraw consent where the law gives you that right.

5. Who we share information with

We do not sell personal data. We may use carefully selected service providers that process data for us, including:

• Supabase for database, authentication and backend infrastructure.
• Resend for outbound transactional email such as account, moderation and safety-report notifications.
• Hostinger for website hosting and human-facing TVERN email mailboxes.
• Cloudflare Turnstile for bot and abuse protection on authentication and account-security actions.
• Have I Been Pwned Pwned Passwords for compromised-password warnings using the k-anonymous hash-prefix method described above. Because the lookup is made from your browser, the service may receive ordinary network metadata such as your IP address.
• Google Places for town/city search and locality verification. TVERN sends the location search text or selected place identifier through an authenticated server-side proxy and stores the returned locality details needed for local and distance-based features.
• Apple and Google where necessary to distribute and operate TVERN through their platform services.

We may also disclose information where required by law, to protect someone from serious harm, to investigate unlawful activity, or in connection with a business reorganisation where appropriate safeguards apply.

Service providers may process information in countries outside the UK. Where UK data protection law requires safeguards for an international transfer, we use or rely on an appropriate lawful transfer mechanism provided by the relevant service provider.

6. How long we keep information

We keep personal data only for as long as it is reasonably needed for the purposes described in this policy. The exact period depends on the type of information and why it is held.

• Account and profile data is generally kept while your account is active.
• User-generated content is generally kept while it remains part of the service, unless you delete it, it is moderated, or your account is deleted.
• When an account is deleted, TVERN is designed to remove the account and associated ordinary user data and to scrub user-visible authored content as part of the deletion process.
• Ordinary automated safety strikes are active for 90 days unless they are overturned earlier. Related audit records may be retained longer where reasonably necessary for safety, abuse prevention, legal compliance or appeals.
• Some safety, moderation, security, support or legal records may be retained where reasonably necessary to prevent abuse, investigate serious incidents, meet legal obligations or establish, exercise or defend legal claims. Where possible, retained safety records are de-identified from the deleted account.
• Technical logs are retained according to operational and security needs and the retention settings of the relevant infrastructure provider.

7. Account and data deletion

If you can sign in, you can delete your account directly from the Delete account page on the website or from Account settings in the installed TVERN web app.

If you cannot access your account, the Delete account page also explains the external request route.

Deleting your account is permanent. It does not necessarily require TVERN to erase information that we are legally required or permitted to retain for legitimate safety, fraud-prevention or legal purposes, but any such retention is limited to what is necessary.

8. Your data protection rights

Depending on the circumstances and the lawful basis we rely on, UK data protection law may give you rights to:

• ask for a copy of your personal data;
• correct inaccurate or incomplete data;
• ask us to erase personal data;
• ask us to restrict processing;
• object to certain processing, including processing based on legitimate interests;
• receive certain data in a portable format; and
• withdraw consent where processing is based on consent.

To exercise a right, email support@tvern.com. We may need to verify your identity before acting on a request.

9. Complaints

Please contact us first if you have a privacy concern so we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office (ICO). Information about making a complaint is available at ico.org.uk.

10. Children

TVERN is intended only for adults aged 18 and over. We do not knowingly offer accounts to children. If we become aware that an under-18 account has been created, we may restrict or remove it and take appropriate safeguarding action.

11. Automated safety controls

TVERN uses deterministic safety rules to warn about sensitive subjects and block certain prohibited content before publication. Sensitive-topic warnings do not create a strike and the member may continue after reviewing the warning.

Blocked submissions may create safety-strike points. Ordinary strikes expire after 90 days. Repeated or critical rule matches may automatically apply a temporary account restriction. These controls are designed for community safety and do not make decisions that produce legal or similarly significant effects. If you believe a rule or strike was applied in error, contact support@tvern.com.

12. Website cookies and logs

This public website does not currently use advertising cookies, behavioural tracking or third-party analytics. Our hosting provider may process ordinary web server information such as IP address, browser information, request time and requested page for security and delivery purposes. If we later introduce non-essential cookies or analytics, we will update this notice and introduce consent controls where required.

13. Changes to this policy

We may update this policy as TVERN develops, our providers change or legal requirements evolve. We will update the date at the top and, where a change materially affects existing users, provide an appropriate notice.