Privacy Policy

Last updated: October 12, 2026

1. Information we collect

We collect the information you give us directly — name, username, email, password, meeting URLs you submit, and messages you send — plus optional identifiers (phone, LinkedIn) you choose to add to your profile.

2. How we use it

• To match you with other attendees of meetings you submit
• To operate messaging and connections between members
• To send account, verification, and notification emails
• To generate AI-assisted Connection Reports, Flock Reports, and network search results from profile information (see section 4)
• To maintain and improve the service

3. What we share

We don't sell your personal information. Your name and username are visible to members you're connected to. Beyond that, we never reveal your contact information — email, phone, or anything else you haven't chosen to display — to another member within the application. The only way another member learns how to reach you beyond your name and username is if you choose to tell them yourself — in chat — or if you choose to add it to your profile; that choice, and its consequences, are entirely yours. Extra identifiers you add (email, phone, LinkedIn) are used only to match you to your own account unless you choose to display them on your profile — they aren't otherwise shown to other members.

4. AI processing and the providers we use

Several features work by giving the profile information you write about yourself to AI models: Connection Reports between you and a connection, Flock Reports about a room you're in, network search, and the importer that turns a résumé or bio you upload into suggested profile entries.

What that means in practice:

• What is sent: the attributes on the profile used for that report or search — what you're looking for, what you can offer, what you've done, your interests, and so on — as you wrote them. Attributes you haven't put in a profile are not used. Not your email, phone number, password, account identifiers, or private messages.
• Your identity is kept out of it: before profile text reaches an AI provider for a Connection Report, Flock Report, or network search, your name and username are replaced with a placeholder, and the real names are put back only after the result returns to us. The provider is therefore not told whose profile it is processing. The same applies to a résumé or bio you upload to the importer: your own name, email address, and phone number are removed before it is read, and web addresses are hidden from the AI and restored in the entries it suggests, so the links you added still come through. The words themselves are sent as written, so an employer, another person's name, or any other detail you type into an attribute or an uploaded document is part of that text.
• Who it goes to: two providers today. DigitalOcean, through their serverless AI inference service, runs the language model that writes report text — DigitalOcean already hosts FlockUnlock itself, so this is the same company that already holds your account data rather than a new one. TypeSafe AI classifies and scores profile content, and checks AI-written text before it is shown to anyone. That is the complete list, and we will update it here before adding a provider.
• What they don't do with it: we don't permit our AI providers to use your information to train their models, and we don't sell it or share it for advertising.
• Second-degree search: if another member searches beyond their own connections, your profile attributes may be given to an AI model on their behalf even though you and that member aren't connected. The result they see is only your name and which of their connections links them to you — never your profile text. You can switch this off entirely in your settings, and doing so removes you from those searches.
• It isn't verified: AI output describes what members have said about themselves. It can be wrong or incomplete. See section 5.

FlockUnlock is a beta product and these features are still changing. If you'd rather your profile weren't processed this way at all, contact us and we'll tell you what's possible for your account.

5. We can't verify what other members tell you

We have no way to verify claims that members make in their profiles or in chat. We trust each member to complete their profile and communicate truthfully and honestly, but we can't guarantee they will. It's up to each participant to use their own best judgment before revealing their identity or anything else about themselves to other participants.

6. Data retention

We retain your account data for as long as your account is active. You can request deletion of your account and associated data at any time.

7. Security

Passwords are hashed, not stored in plain text, and repeated sign-in attempts are rate limited. You can turn on two-factor sign-in in your settings.

Your profile attributes, your profiles, and the reports generated from them (Connection Reports, Flock Reports, and network search results) are encrypted with AES-256-GCM before they are stored, and the encryption key is kept in our hosting environment rather than in the database. Connections to FlockUnlock use HTTPS, and the connection between our application and its database is encrypted and its server certificate verified. Other information, including your name, email address, and messages, is stored in the same protected database but is not encrypted in this way.

Encryption protects stored information if the database or its backups are exposed. Our application, and the people who operate it, can still read your information in order to provide and support the service, and the AI providers listed in section 4 receive the profile text they process, with names replaced by placeholders as described there. We use reasonable technical measures to protect your data, but no system is 100% secure.

8. Your choices

You can update your name and identifiers, or remove identifiers, at any time from your profile. You can switch off second-degree discoverability from your settings. You can request a copy or deletion of your data by contacting us.

9. Changes to this policy

We may update this policy from time to time. We'll post the updated version here with a new "last updated" date.

10. Contact

Questions about this policy? Reach out via the contact details on our home page.