Silent by default
No student can see who picked them unless a mutual match is confirmed.
Your feelings are private data.
We explain what is stored, why it is needed, and who can access it. Privacy here means honest boundaries — not an impossible promise that nobody operating the service can ever access data.
Only what is needed
Identity verifies campus access; pick records make matching, cooldowns, and deletion possible.
Server-only matching
The browser does not receive the pick database. Sensitive matching happens in protected server code.
Who can see what?
InformationWho can see itWhy
Your campus identityPrivate to your accountUsed to verify eligibility and prevent abuse.
A one-sided pickOnly youNever shown to the person you picked or to other students.
A confirmed matchYou and the matched personRevealed to both students at the same time.
Popularity or pick countsNot shown to studentsThere are no rankings, trends, or popularity signals.
No popularity product
Students never receive “most picked,” profile views, popularity scores, trends, or hints. Private interest is never turned into a campus ranking.
Deletion and retention
You can delete your own picks and request deletion of your account data. Records may be retained briefly when needed for security, abuse prevention, or legal obligations; the final policy will state the exact period before launch.
Service operation
Google handles sign-in and Supabase hosts the database. A limited service team can access records only when needed to operate matching, resolve reports, fix problems, or complete deletion requests. bphc.social does not sell personal data or use picks for advertising.
Private does not have to mean mysterious.
You should know the rules before you share anything.
Continue with BITS Google Private by design · BITS Hyderabad only