Silent by default
No student can see who picked them unless a mutual match is confirmed.
Your feelings are private data.
We explain what is stored, why it is needed, and who can access it. Privacy here means honest boundaries — not an impossible promise that nobody operating the service can ever access data.
Only what is needed
Identity verifies campus access; pick records make matching, cooldowns, and deletion possible.
Server-only matching
The browser does not receive the pick database. Sensitive matching happens in protected server code.
Who can see what?
InformationWho can see itWhy
Your campus email and directory identityYour account and authorized service administratorsUsed to verify eligibility and prevent abuse. Blind does not send these details to your chat partner.
Your chosen Blind profileYour conversation partner after a normal chat endingHidden before and during the conversation. Safety-related endings do not automatically reveal profiles.
Blind messagesThe participants and authorized safety administratorsAdministrators retain access to identities and transcripts to investigate abuse.
A one-sided pickNot visible to the picked student or other studentsIt stays private unless the choice becomes mutual.
A confirmed matchYou and the matched personRevealed to both students at the same time.
Popularity or pick countsNot shown to studentsThere are no rankings, trends, or popularity signals.
Conversation first, profile afterward
Blind matches eligible students without showing profiles. During chat, you use private aliases. Ending the conversation normally reveals the names, prompt answers, bio, and tags each person chose to provide. Blocking, reporting, or moderation prevents an automatic reveal. A profile that has already been seen cannot be made unseen.
No popularity product
Students never receive “most picked,” profile views, popularity scores, trends, or hints. Private interest is never turned into a campus ranking.
Deletion and retention
You can remove a one-sided pick or delete your account activity. Removing a pick never resets its two-week cooldown. Records may be retained briefly when needed for security, abuse prevention, or legal obligations.
Service operation
Google handles sign-in and Supabase hosts the database. A limited service team can access records only when needed to operate matching, resolve reports, fix problems, or complete deletion requests. bphc.social does not sell personal data or use picks for advertising.
Private does not have to mean mysterious.
You should know the rules before you share anything.
Continue with BITS Google Private by design · BITS Hyderabad only