01Information we collect
Plotit verifies that you're a real, currently-enrolled student before letting you in — that verification is the only reason we ask for contact information at all.
| What | Why we ask |
|---|---|
| Phone number | To send a one-time verification code by text and confirm the device is yours. |
| .edu email address | To confirm you're enrolled at a participating school, via a one-time code sent by email. |
| Device security key | A cryptographic key generated on your device, used to sign in without a password. |
| Campus details you choose to share | Major, academic year, pronouns, communities — optional, used only to personalize what you see. |
We do not ask for your legal name, a profile photo, or your date of birth to create an account.
02Your identity is pseudonymous
Once you're verified, Plotit assigns your account a generated alias — not your real name — and that alias is what other students see. Internally, your account is referenced by a random identifier, not by your phone number or email address.
Your phone number and email are used at the moment of verification and then stored only as one-way cryptographic hashes, not as plain text. That means even we cannot look up your phone number or email from your account after verification completes — the hash can confirm a match, but it can't be reversed back into the original number or address.
03How we use your information
- Phone number — sending SMS verification codes only, and confirming your device during sign-in.
- Email address — sending email verification codes only, and confirming your school affiliation once a year for continued access.
- Campus activity — showing you relevant events, communities, and posts at your own school.
We do not use your phone number or email address for advertising, and we do not build a marketing profile from them.
04SMS & data sharing
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.
Message frequency: you'll receive a text only when you request a verification code — typically once when you register, and again if you sign in on a new device. Plotit does not send promotional, recurring, or marketing text messages.
Message and data rates may apply. Reply STOP to a Plotit text at any time to opt out of SMS, or HELP for assistance. Carriers are not liable for delayed or undelivered messages.
05What we don't collect
- No real name, government ID, or date of birth
- No plaintext phone number or email after verification — hashes only
- No precise GPS location — Plotit works at neighborhood-level resolution, never exact coordinates
- No contact list or social graph imported from your phone
- No sale of personal data to third parties, ever
06Data retention
Verification codes expire and are deleted automatically a few minutes after they're issued, whether or not you use them. Your alias and campus activity remain for as long as your account is active. If you delete your account, your alias is retired and never reissued to anyone else.
07Your choices
- Reply
STOPto any Plotit text message to stop receiving SMS entirely — note that this also disables SMS-based sign-in. - Request account deletion at any time from Settings, or by emailing info@leavenup.app.
- Ask us what information we hold about your account by emailing the address above.
08Children's privacy
Plotit is intended for enrolled college and university students, verified through an institutional .edu email address. It is not directed to, and is not knowingly used by, children under 13.
09Changes to this policy
If this policy changes in a way that affects how your phone number, email, or SMS opt-in data is used, we'll update the effective date above and, where the change is material, notify you in the app before it takes effect.
10Contact
Questions about this policy, or about your data specifically, go to info@leavenup.app.