Herd

Information we collect

• Account information: your name, email address, and mobile phone number.
• Profile photo: a self-portrait you upload to enable face-based identification.
• Your contacts: the names and phone numbers of the people you designate.
• Location (optional): if you choose to include your location when reaching out, your device’s location is captured at that moment and shared with the contacts you message as a map link. We do not store your location; our records keep only whether a message included one.
• Verification data: one-time codes we send by text message or email to confirm ownership of your phone number or email address when you sign in.
• Usage data: application logs, device information, and privacy-friendly analytics used to operate and improve the service.

How we use information

We use your information to operate the service: sign you in, verify ownership of your phone number or email address, enable face-based identification, deliver messages you initiate to your contacts, and maintain the security and reliability of the platform. We do not sell your personal information.

Face data and identification

To let a face be recognized on a smart device, we create a numeric face template from your profile photo using Amazon Rekognition, a face-analysis service operated by Amazon Web Services. We store your profile photo in our file storage and retain the face template for as long as your account is active, because both are needed for identification to work. When you delete your account, we delete your profile photo and remove your face template.

When you use a device to identify yourself, we also use Amazon Rekognition Face Liveness, a service operated by Amazon Web Services (AWS), to confirm a live person is present at the moment of the scan. The images captured for that check are used only to complete the scan and are not stored by Herd.

SMS program

Herd uses SMS for two purposes only: (1) sending one-time verification codes to confirm ownership of a mobile number when you sign up or sign in, and (2) sending transactional messages to your designated contacts that you explicitly initiate from within the app. You may reply STOP at any time to opt out of further messages, and HELP for assistance. Message and data rates may apply.

SMS opt-in data and consent are not shared with any third parties or affiliates for marketing or promotional purposes. We share phone numbers only with our SMS delivery provider (Twilio) for the sole purpose of delivering the messages described above.

How we share information

We share information only with the service providers we use to operate Herd, and only to the extent necessary for them to perform their function: Supabase (database, authentication, and file storage), Twilio (text-message delivery), Amazon Web Services (face identification via Amazon Rekognition), Resend (email delivery), and Vercel (application hosting and performance analytics). When you choose to include your location in a message, the contacts you send it to can see that location as a map link. We may disclose information if required by law or to protect the rights, safety, or property of users or others.

Data retention and security

We retain your information for as long as your account is active or as needed to provide the service. You may delete your account at any time, after which we delete your profile photo, remove your face template, and delete or anonymize your other personal information except where retention is required for legal, accounting, or fraud-prevention purposes. We use industry-standard safeguards to protect your information.

Your choices

• You can update or delete your profile from your account settings.
• You can opt out of SMS at any time by replying STOP.
• You can request access to or deletion of your data by contacting us at the address below.

Children

Herd is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date above.

Contact

Questions or requests regarding this policy can be sent to chrisalehman@gmail.com.