Privacy Policy

SimplyMe is a creator-first social platform operated by SLRI Solutions LLC, Texas, USA. When this policy says “we”, “us” or “SimplyMe”, that is who we mean. For data-protection purposes we are the data controller for the information described here.

SimplyMe is made up of connected parts that share one account: the social feed (photos, videos, articles), the Creative Studio (our in-house design tool), SimplyMe Music (listening and adding audio to your posts), AI assist (captions, post drafts and résumé generation), and your professional profile (résumé, work showcase and referrals). This policy covers all of them.

Information you give us

• Account details: name or handle, email address, password hash, date of birth (to confirm you meet the age requirement), and optionally a phone number.
• Profile content: avatar, bio, links, pronouns, location if you add one, and the interests you pick during onboarding.
• Content you create: posts, images, videos, articles, comments, messages, designs made in the Creative Studio, playlists and audio you attach to posts.
• Professional information: your résumé or CV, education and work history, skills, portfolio links, and the details you give the AI résumé builder.
• Support and safety reports: what you write to us, plus any files you attach.
• Payment details: if you subscribe or receive creator payouts, our payment providers process your card, bank or UPI details. We store only the last four digits and a provider token, never full card numbers.

Information we collect automatically

• Device and app data: device model, operating system, app version, language, crash logs and performance traces.
• Log data: IP address, timestamps, pages or screens viewed, referring URL, and the actions you take (posting, liking, following).
• Approximate location: derived from your IP address, for security, local trends and legal compliance. We read your device’s precise GPS location only when you ask for it, by opening place tagging on a post or opening Explore, and only to work out which city you are in. We do not store those coordinates.
• Cookies and similar technologies: described in our Cookie Policy.

Information from others

• Social sign-in: if you sign up with Google or Apple, we receive your name, email and profile picture. We never receive your password.
• Other people’s content: someone may mention you, tag you, message you or report you.
• Referral partners: if you apply for a referral through SimplyMe, the referring member or employer may share the outcome with us.

• To run the product: showing your feed, delivering posts to your followers, streaming music, saving your Studio designs, syncing across devices.
• To personalise, gently: ranking what appears in discovery based on who you follow and what you interact with. You can always switch to a strictly chronological feed.
• To power AI features: generating captions, post drafts, alt text, hashtag suggestions and résumés when you ask for them. See AI transparency for the detail.
• To keep people safe: detecting spam, impersonation, harassment, child sexual abuse material, and enforcing our Community Guidelines.
• To support you: answering your questions and fixing bugs.
• To improve SimplyMe: aggregated, de-identified analytics about which features get used and where people get stuck.
• To communicate: service emails and notifications you can control, plus product news you can unsubscribe from in one tap.
• To meet legal obligations: responding to valid legal requests, tax and accounting rules, and consumer-protection duties.

SimplyMe uses AI to help you write captions, draft posts and generate a résumé from a few details. Here is how that works with your data:

• You trigger it. AI generation only runs when you ask for it. Nothing is posted automatically.
• What gets sent. The prompt you write, and the content you point the tool at (for example the image you want a caption for, or the details you enter for a résumé), is sent to a model to produce the output.
• Model training. We do not use your private content, direct messages, résumé data or drafts to train generative models by default. If we ever offer a programme that does, it will be opt-in, clearly labelled, and revocable.
• Third-party model providers. Where we use an external model provider, they act as our processor under contract, are barred from training on your data, and retain it only as long as needed to return a result.
• Outputs are yours. You are responsible for reviewing AI output before you publish it. AI can be confidently wrong, especially with facts, dates and names in a résumé.

The Creative Studio and SimplyMe Music are part of the same account, so a design or a track can move into a post in one tap. What that means for your data:

• Studio projects are private to you until you publish or share them. We store the project file, its version history and the assets you upload.
• Listening activity: what you play, skip and save. We use it to build your recommendations and to report plays to rights holders. You can clear your listening history at any time.
• Sharing between apps: when you push a Studio design or a track into a post, the post carries an attribution reference back to the source. Anyone who can see the post can see that attribution.
• Fonts, templates and stock assets inside the Studio may be provided by licensors. We report aggregate usage counts to them, never who you are.

The professional side of SimplyMe handles some of the most sensitive information on the platform, so it has extra rules.

• Your résumé is private by default. You choose whether it is visible to everyone, to your connections, to verified recruiters only, or to nobody.
• Referrals are consent-based. We only pass your profile or résumé to another member or an employer when you ask us to, for the specific role you named.
• We do not sell candidate data. Recruiters cannot buy a list of members.
• Sensitive categories. Please do not put information such as race, religion, health, disability, immigration status or government identifiers (including your Social Security number) into your résumé unless a role genuinely requires it. Where you do, we treat it as special-category data and restrict access accordingly.
• No automated rejection. AI may help rank or summarise applications, but a human makes referral decisions. You can ask for a human review of any automated outcome that affects you.

We share personal data only in these situations:

Advertising leads. If you interact with an advertisement on SimplyMe — liking, commenting on, resharing or clicking it — we pass your email address, display name, handle and any comment text to the advertiser behind that ad, so they can follow up with you. They use it for their own marketing. Under California law that is a “sale” or “sharing” of personal information even though no money changes hands, and comparable rules may apply elsewhere.

You can switch this off permanently with Do Not Sell or Share My Info in Settings → Privacy, or by objecting to direct marketing in the same place. We also honour the Global Privacy Control (Sec-GPC) browser signal automatically, so if your browser sends it you are opted out without having to find the setting. We never disclose this information for anyone under 18, or for anyone whose age we cannot establish, whether or not they have opted out.

Beyond that, we do not sell personal information. We do not disclose your posts, private messages, Studio projects, listening history or résumé to advertisers, and we do not build cross-site behavioural advertising profiles.

If you are in the UK, EU or another region with equivalent law, we rely on the following bases:

• Performance of a contract: providing the account and features you signed up for.
• Legitimate interests: keeping the platform safe and secure, preventing fraud, and improving the product, balanced against your rights.
• Consent: optional cookies, precise location, marketing email, and any special-category data you choose to provide. You can withdraw consent at any time.
• Legal obligation: tax records, complaint handling, and lawful disclosure requests.

• Account and content: for as long as your account is open.
• After you delete your account: your profile, posts, comments, reactions, uploaded photos and videos, follow relationships, notifications and live-stream history are deleted from our live systems, and from encrypted backups within 90 days as those backups age out.
• Two exceptions, both to protect other people’s data. Messages you sent stay in the recipient’s inbox with your name replaced by “Deleted user” — that conversation is their personal data too, and it means deleting an account cannot be used to erase evidence of harassment from someone else’s device. Communities you created are not deleted while other members still have posts and history there; ownership is transferred instead.
• Deleted posts: removed from your profile and feeds at once, and from backups within 90 days.
• Login history (IP address, device, browser): 90 days after the session expires, so we can investigate suspicious sign-ins.
• Search history: 180 days, and you can clear it yourself at any time.
• Consent records: kept while the consent is in force, since they are the record of what you agreed to; deleted 2 years after withdrawal.
• Security and audit records, including records proving a deletion request was carried out: 2 years.
• Safety records: reports, enforcement decisions and ban-evasion signals may be kept for up to 3 years so repeat offenders cannot simply start over.
• Transaction records: retained as long as tax and accounting law requires, typically 7 years in the United States.

See Data & account deletion for how to start the process.

• Encryption in transit (TLS 1.2+) and at rest for stored content and backups.
• Passwords stored only as salted, slow hashes, never in readable form.
• Least-privilege internal access, with audit logging on anything containing user data.
• Optional two-factor authentication on your account, and alerts for new sign-ins.
• Regular dependency scanning, penetration testing and a private disclosure channel.

No system is perfectly secure. If a breach affects you, we will notify you and the relevant authority within the timeframes the law requires. To report a vulnerability, write to security@simplyme.app.

Whatever jurisdiction you are in, you can:

• See and edit your profile and content from your settings.
• Download a copy of your data: posts, Studio projects, listening history and résumé.
• Correct anything inaccurate.
• Delete individual posts, or your whole account.
• Restrict who sees what, mute or block anyone, and turn off personalised ranking.
• Withdraw consent for optional purposes such as marketing email and personalised advertising, in Settings → Privacy → Consent & permissions. Accepting the Terms and this policy is not an optional consent — it is the agreement your account exists under — so it cannot be withdrawn on its own; deleting your account is the equivalent step.
• Opt out of the sale or sharing of your information, in Settings → Privacy. We also honour the Global Privacy Control browser signal automatically.
• Ask us to restrict processing of your data while a dispute is resolved. This one is not yet a self-service control — write to us and we will apply it manually.
• Ask a human to review an automated decision that affects you.
• Authorise an agent to make a privacy request on your behalf.
• Complain to us, and then to your data-protection authority.

To exercise a right, use the in-app controls or write to privacy@simplyme.app. We respond within 30 days and we never charge for a first request. We will not retaliate against you for exercising a privacy right.

SimplyMe is not for children under 13, and in some countries the minimum age is higher (for example 16 where local law requires it). If you are under 18, accounts default to private, direct messages from strangers are off, and AI features that publish publicly are limited.

We do not knowingly collect data from children below the applicable age. If we learn that we have, we delete the account and its content. Parents and guardians can write to safety@simplyme.app. See our Child Safety Policy for more.

Our primary infrastructure is in the United States, with content delivery edges around the world. Where data moves across borders, whether to a cloud region, a support tool or a model provider, we rely on standard contractual clauses, adequacy decisions, or your consent, and we assess whether the destination offers comparable protection. You can ask us for a summary of the safeguards in place.

When we make a material change we will post the new version here, update the “last updated” date, and tell you in the app or by email at least 14 days before it takes effect. Continuing to use SimplyMe after that date means the new version applies to you. Previous versions stay available on request.

For anything privacy related, write to privacy@simplyme.app.

If we have not resolved something to your satisfaction, escalate it to our Privacy Officer at privacy@simplyme.app. We acknowledge escalations within 5 business days and aim to resolve them within 30 days. After that you may complain to your state attorney general or, in the UK and EU, your data-protection authority.

Postal address: SLRI Solutions LLC, Texas, USA.