Privacy policy
Operated by CueTea. Contact: hello@cuetea.app. Last updated 18 October 2026.
Who we are
CueTea is an anonymous campus app for college students aged 18+. CueTea operates this service and is responsible for your data. Questions or requests: hello@cuetea.app.
What we collect
- College email. Used to send your 6-digit sign-in code, put you in the right campus and enforce rules. Other students never see it.
- Age confirmation. You confirm you are 18 or older. We store that yes, not your birthday.
- Terms acceptance. The version of the Terms of Service you agreed to and when, so we can show we asked.
- Daily Pick choice. Whether you opted in to Daily Pick and The Crowning (off unless you turn it on), and picks classmates made for you if you did.
- Profile details you choose to add. Display name, class year, major, dorm, clubs and a profile photo. All optional. Shown only to people at your campus in Browse and crush search (never on your posts). You can hide yourself from search.
- Posts, replies, polls and votes. Shown without your name. We keep a private link to your account so we can enforce rules and let you delete your own posts. Other users, including Pass members, never see who posted.
- Map pins. If you drop a Spotted pin or a Hint on the campus map, we store the spot you tapped, rounded to about 11 m. The app does not read your device's GPS location.
- Crushes, matches and chats. Who you add as a crush, mutual matches, and messages you send in match chats.
- Contacts (optional). If you tap Find friends from your contacts, the app turns each email and phone number into a one-way code (sha256) on your phone and sends only those codes to check for matches at your campus. We do not store your contact list or the codes. If you add your own phone number to be findable, we store only its one-way code. You can turn off Findable by contacts in Privacy.
- Reports, blocks and safety records. Reports you file (on posts, replies, chats and people), people and anonymous posters you block, takedown requests, posts our filters stopped, photos waiting for review, and any suspension or ban on your account with its reason.
- Push notification token. If you allow notifications, we store your device's push token so we can send the alerts you turned on.
- Purchases. If you buy CueTea Pass or a reveal pack in the app, Google Play or the App Store handles payment. We receive the product, status, expiry date and a store transaction id through RevenueCat, our in-app purchase service, which links the purchase to your CueTea account id. On the web, Dodo Payments (merchant of record) handles checkout. We never receive your card or UPI details.
- Technical logs. Our hosting providers keep standard server logs (such as IP address and request time) for security and debugging.
Moderation
To keep CueTea safe, posts, replies and chat messages are checked automatically when you send them for names, contact details, slurs and abuse (in English, Hindi, Hinglish, Tamil and Telugu). New photos and videos are checked by an automated image-safety service (Dodo Payments' content moderation API) or held for a person on our team to review before other students can see them. Content reported by several people is hidden until a person reviews it. Our moderators can see the content of reported posts, replies and chats, and which account sent them, so they can remove it and suspend or ban accounts. Reports are reviewed within 24 hours.
How we use it
To run CueTea: verify you are a student at your campus, show feeds, compute crush matches, admirer counts, Daily Picks and The Crowning on our servers, send the notifications you asked for, moderate content and keep the community safe, and manage your Pass. We do not use your data for advertising and there are no ads or ad trackers in the app; we use only first-party, privacy-friendly analytics (page views and performance) to run the product, not for advertising.
Who we share it with
We never sell your data. We use service providers that process data for us: Supabase (database, sign-in and file storage), Expo (push notification delivery), Google Play, the App Store and RevenueCat (in-app purchases), Dodo Payments (web checkout and automated image-safety checks), and our email provider (sign-in codes). They get only what they need to do that job. We may disclose data if the law requires it.
Security
All data is encrypted in transit (HTTPS/TLS). Access to the database is locked down per user, so your email, crushes and who wrote a post are never readable by other users.
Crushes
Only you see who you added. A match is shown only when it is mutual. Pass members you added may see that you added them unless Hide me from admirer reveals is on.
How long we keep it
As long as your account is open. Blocked-post records, reports and ban records may be kept up to 90 days after deletion (longer if needed to stop a banned person from returning or where the law requires) for safety and abuse investigations, then deleted. Server logs are kept for a short period by our hosting provider.
Deleting your account
In the app: Profile → Settings → Delete account → Delete everything. This immediately and permanently deletes your account, profile, posts, replies, votes, crushes, matches, chats and push tokens. Cannot get into the app? See cuetea.app/delete-account or email hello@cuetea.app from your college email. If you have a Pass, cancel it in Google Play or the App Store too, since deleting the account does not stop store billing.
Your rights
You can access, correct, export or delete your data. Most of it you can edit in the app; for anything else email hello@cuetea.app and we will reply within 30 days.
Age
CueTea is only for people 18 and older. We delete accounts we learn belong to anyone younger.
Changes
If we change this policy we will update the date above and tell you in the app for anything significant.