Privacy Policy

Last updated: 2026-09-25

This policy explains what HappyLike, LLC ("we," "us," "our") collects when you use HappyLike, why, who else sees it, how long we keep it, and what you can make us do about it. It is incorporated into our Terms of Service.

We have tried to write it as a description of how the product actually works rather than as a list of everything the law would let us do. Where the product does something that could surprise you — sending your posts to an automated classifier, reading the words inside photographs — it is described plainly below rather than covered by a general phrase.

1. What we collect

What you give us. An email address, and a password if you choose one. A username, a first and last name, and a display name. Anything you choose to add to your profile: a bio, a location, links, a profile picture, a cover image. If you buy advertising, your business name, address, phone number and industry.

What you make here. Posts, replies, the photographs attached to them, reactions, saved posts, who you follow, who is in your community, who you have blocked or muted, reports you file, appeals you make, and messages you send us through the contact form.

What the service records as you use it. When your account was created and when its details changed. Your IP address when you ask for a sign-in link and when a credential on your account changes — a password, an email address, a second factor — so that "somebody changed my password" has an answer. Which browser session asked for a sign-in link, as a one-way hash that never leaves our systems. Whether a message we sent you bounced or was marked as spam, so we stop sending to an address that cannot receive.

What automated screening produces. A category, a confidence figure, a positivity score and a short written reason for each post and reply; whether an image was refused; and the text found inside images. See section 4.

We do not use advertising or analytics trackers, build profiles of you across other websites, buy data about you from anybody, or ask for your contacts, your precise location, or access to your device beyond what you actively use.

2. Why, and on what basis

We use the above to run the service you asked for: to show you the sky, to deliver replies and notices, to let people find each other by handle, and to keep your account working. Where the UK and EU GDPR applies, that is performance of a contract.

We use it to keep the place safe: to screen content, to act on reports, to apply the published Community Guidelines and our Acceptable Use Policy, to detect abuse, and to rate-limit requests. That is our legitimate interest in running a service people are not harmed by, and in some cases a legal obligation.

We use it to bill advertisers and keep records of what was bought. That is a contract with them, and a legal obligation to keep the records.

Where we ask for consent we will say so and you can withdraw it. We do not rely on consent for anything described here.

3. What other people see

Your posts, replies, reactions and profile are public. Anybody, signed in or not, can read them, and search engines may index a profile page. Treat everything you write as something a stranger will read, because it is.

These are not public: your email address, your phone number, your real name (we hold your first and last name and publish neither — your display name is whatever you chose), reports you file, who you have blocked or muted, whether you asked for a lighter sky or for strong language to be masked, your saved posts, and how many people follow you.

Your community is private in both directions. Nobody can list it, and every connection in it was agreed to by both people.

Reactions name the people who made them to the person whose post it is, and to anybody who opens that post. There are no counts anywhere on the surface.

4. Automated screening, and what it does not decide

Every post and reply is sent to Anthropic's Claude API to be classified. Images are analysed by Amazon Rekognition, which includes reading any text in them — people put words in pictures to get past text screening, and a filter that cannot see them is not a filter.

What that produces is a category, a score, a reason, and occasionally a flag that somebody may be at risk.

What it can do on its own: withhold clearly violating content from publication, hide a reply until a person looks at it, rank a post lower, and put something in front of a human reviewer.

What it cannot do on its own: suspend or remove an account. That is always a person's decision.

When a person decides something about your content, you are told, with a reason, and you can contest it — see section 8 and /appeals. If you are in the UK or EU, this is also your right under Article 22 not to be subject to a purely automated decision with a significant effect on you.

Content sent for classification is not used to train anybody's models. It is sent to be read and scored, and the answer is stored with the post.

5. Who else handles it

We keep the list short, and each of these is a processor acting on our instructions:

We do not sell personal information, and we do not share it for cross-context behavioural advertising. Advertising here is sold by placement, not by targeting people — see the Advertiser Agreement.

We will disclose information if the law actually requires it. If we are allowed to tell you, we will.

If the business is ever sold or merged, information may transfer with it, and you will be told before anything about this policy changes for you.

6. Cookies

Three, and none of them advertise to you:

• A session cookie, so you stay signed in. It cannot be read by JavaScript.
• A CSRF token, so a form on another site cannot act as you.
• Cloudflare's bot-management cookie.

There is nothing here to opt out of, because there is no tracking to switch off.

7. How long we keep it

Your account, when you delete it: 30 days, then it is destroyed. Deleting is immediate from everybody else's point of view — your posts, replies and pictures leave the service at once — and the 30 days exist so an account deleted at midnight in anger can be brought back. After that a nightly job destroys the account, its content and its files, and it cannot be recovered.

Your username is held for a year after that, and cannot be taken by anybody else in the meantime, because it appears in other people's old posts and in links people have already sent.

Moderation records outlive the account, deliberately. What was decided, when, and why, is kept so that repeat behaviour stays countable and so an appeal can be judged later. Once the account is destroyed those records identify it only by a one-way keyed hash, which cannot be reversed into an account and holds nothing about a person.

The record of changes to your account — who changed a password, a handle, a role, and when — is destroyed with the account, because it holds your old handles and addresses.

Sign-in links last 15 minutes and work once. Sessions last two hours.

Sent mail: we keep the fact that an address bounced or complained, so we stop sending to it.

8. What you can make us do

See it and take it with you. Settings → Download my data gives you a file containing your account, your posts and replies, your reactions, and the moderation decisions made about your content. Other people's data is left out: a report filed about you identifies whoever filed it, and that is theirs rather than yours.

Correct it. Your profile is editable in Settings. A username can be changed once every 30 days.

Delete it. Settings → Delete my account, and then the 30 days above. You do not have to give a reason and we will not ask for one.

Contest a decision. /appeals shows every moderation decision about your content and lets you contest it. An appeal is reviewed by a different person than the one who made the original decision.

Object, restrict, or withdraw. Write to us and we will do it, or explain why we cannot.

We answer within 30 days. We do not charge for any of this, and we will not make the service worse for you because you asked.

Use the contact form — it works whether or not you can sign in, which is deliberate, because the people who most need it are often locked out. If you are in the UK or EU you may also complain to your data protection authority.

9. Children

You must be at least 13. We do not knowingly collect anything from a child under 13, and if we find that we have, we delete it. If you believe a child under 13 has an account, tell us through the contact form.

10. Where your data is

The service runs in the United States and the third parties above are United States companies. If you are in the UK or EU, your information is transferred there — we rely on the standard contractual clauses our providers offer for that transfer.

11. Keeping it safe

Everything travels over HTTPS. Passwords are hashed and never stored in a form we can read. Two-factor secrets are encrypted. Sign-in links are stored hashed, expire, and work once. Access to the moderation tools requires a second factor. We are a small team and we do not pretend to be immune: if something happens that affects you, we will tell you rather than wait to be asked.

12. Changes

If we change this policy in a way that materially affects you, we will tell you at least 14 days beforehand, the same notice the Terms promise. The date at the top always says when it last changed.

13. Contact

HappyLike, LLC St. George, Utah, United States Contact us