Privacy Policy
iDisagree ("we", "our", "the app") is an argument-mapping tool that uses AI to structure and analyze productive disagreements. This page explains what data we collect, why, and how you can control it. It applies to both the web app at idisagree.trolleysolution.com and the Android app.
What we collect
| Data | Why we collect it |
|---|---|
| Email address | Used to create and sign in to your account (via Supabase Auth). We don't collect your name, phone number, or any other profile information. |
| Password | Stored as a salted hash by our authentication provider (Supabase Auth) — we never see or store your password in plain text. |
| Your arguments / disagreement content | The statements you enter and the argument map built from them (nodes, speakers, structure) are saved to your account so you can revisit them from the History tab. |
| AI credit balance & purchase records | We track how many credits you have and deduct them as you use AI features. When you buy credits, we store the amount purchased and a Stripe transaction reference — never your card number. |
| Theme & sound preferences | Saved only in your browser or device's local storage. This never leaves your device or reaches our servers. |
If you use the app without signing in ("guest mode"), your work stays in the app's memory for that session only — nothing is sent to our servers until you sign in and it auto-saves.
How your content is used
Each statement you submit is sent, along with the current state of your argument map, to Anthropic's Claude API so it can generate the updated map, detect contradictions and rhetorical tactics, and power the Moderator tab. This is the core function of the app — your content isn't sent anywhere else, isn't sold, and isn't used for advertising. Under Anthropic's standard API terms, content sent to the API is not used to train their models. See Anthropic's own privacy policy (linked above) for details on how they handle API data.
Payments
AI credit purchases are handled entirely by Stripe. When you buy credits, you're taken to a Stripe-hosted checkout page — your card details go directly to Stripe and never touch our servers. We only receive confirmation that a payment succeeded and the amount, so we can add the corresponding credits to your account.
Who we share data with
We use a small number of service providers to run the app, each of which processes data on our behalf:
- Supabase — database, authentication, and server-side functions.
- Anthropic — AI processing of your disagreement content (see above).
- Stripe — payment processing for credit purchases.
- Cloudflare — hosts and serves the web app.
- Sentry — crash and error reports (see below).
We don't sell your data or share it with advertisers.
Crash reports
When the app hits an error, it sends a report to Sentry so we can find and fix it. A report contains the error itself, where in the code it happened, which version of the app you were running, and whether you were on Android or the web.
It does not contain your email address, your account id, your IP address, or the content of your productive disagreements. We deliberately strip the two things that could otherwise carry your own words — logged messages and the text of whatever you tapped — because people paste real arguments into this app and a stack trace is what actually fixes a crash.
Data security
All traffic to and from the app is encrypted (HTTPS). Your productive disagreements and account data are protected by row-level security in our database, meaning only you can read or write your own data — not even other signed-in users can see it.
Deleting your data or your account
There are two separate things you can delete, and they're deliberately kept apart. Open Settings → Account → Delete my data; the option to remove your sign-in as well appears there, as a second, separate confirmation.
| Option | What it removes |
|---|---|
| Delete my data | Every saved productive disagreement and your credit balance, immediately and permanently. Your sign-in stays active, so you can keep using the app with an empty History if you want to. |
| Delete my account too | Everything above, plus the sign-in itself — your email address and password are removed from our authentication provider. This cannot be undone, and you'd need to create a new account to use the app again. |
You can also delete individual productive disagreements at any time from the History tab.
Deleting your account here affects only this app. iDisagree has its own separate sign-in system, so removing your account removes it from iDisagree and nothing else — even if you use another of our apps with the same email address, that is a separate account and is left alone. The app confirms this for you before you commit to it.
If you've already uninstalled the app
Uninstalling the Android app does not delete your account — it only clears what was stored on your phone. Your account and saved content remain on our servers until you delete them.
You don't have to reinstall to get rid of them. Email [email protected] from the address you signed up with, say whether you want your data or your whole account removed, and we'll do it and confirm by reply. We aim to action these within 30 days.
What's kept after deletion
Deleted content is removed from our live database straight away. Records of credit purchases are held by Stripe, who retain transaction records to meet their own legal and tax obligations — that's outside our control and isn't removed by deleting your account. We keep no copy of your card details at any point.
Children's privacy
iDisagree is not directed at children under 13, and we do not knowingly collect data from anyone under 13.
Changes to this policy
If this policy changes, we'll update the date at the top of this page. Continued use of the app after a change means you accept the updated policy.
Contact
Questions about this policy or your data: [email protected].