NARRATIVE PRIVACY POLICY

Effective as of July 26, 2026

This Privacy Policy explains how Narrative Social Media Inc. (“Narrative,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use the Narrative mobile application, narrativesm.com, and related services (collectively, the “Service”). By using the Service, you acknowledge the practices described here. If you do not agree, do not use the Service.

The Service is intended for people in the United States who are at least thirteen (13) years old. It is not directed to children under 13, and we do not knowingly permit anyone under 13 to create or use an account. If you believe a child under 13 has provided us personal information, contact us at contact@narrativesm.com.

1. Information We Collect

Account and profile information. We use phone-number verification codes provided through Supabase Auth. We collect your verified phone number, account identifier, display name, username, date of birth, and any optional profile information you choose to provide, such as a gender selection. We do not offer a password login. Your phone number and date of birth are not displayed as public profile fields.

Age eligibility. Narrative requires users to be at least 13. During account setup, we ask for your date of birth and use it to determine whether you meet the minimum age requirement, enforce our eligibility rules, and comply with applicable law. We retain your date of birth with your account and a record of when the age check was completed. We do not display your date of birth to other users or use it to train Narrative’s artificial-intelligence models or for third-party advertising. You must provide an accurate date of birth.

Contacts. If you grant contact permission, the App reads names and phone numbers from your device so you can find people you know and invite others. Phone numbers submitted for matching are normalized and converted by our server into keyed lookup values. We do not retain your address book, contact names, or raw submitted contact list. You can decline contact access and search by username instead.

Reflections and AI data. When you deliberately submit a spoken or typed reflection, we collect the content you provide. Reflection audio is streamed for transcription and then discarded; we do not keep an audio recording. We retain the resulting transcript, AI response, optional suggestion, extracted topics or “seeds,” embeddings, model and prompt version information, and the relationship intersections generated for you. You can review and delete your own reflections in the App.

Calls. Narrative supports private one-to-one audio and video calls between accepted connections. We and our backend do not record or transcribe call audio or video. We retain limited call-control metadata—such as participant account IDs, provider call ID, call state, and timestamps—for reliability, security, and support.

Messages. Narrative supports private one-to-one messaging between accepted connections. Message content is used only to deliver the message and is temporary: it is removed after it is read under our deletion process or when the delivery window expires, generally within 24 hours. Delivery, read, and limited routing metadata may be retained for a short period for reliability and abuse prevention.

Connections, reports, and feedback. We collect connection requests, accepted connections, blocks, reports, and product feedback. If you use the Contact Us form on narrativesm.com, we collect the message you submit and, if the form offers it and you provide it, your contact email.

Device and operational information. We collect limited information needed to operate and secure the Service, including push-notification and VoIP tokens, device public encryption keys, IP address, app and operating-system details, request timestamps, feature interactions, error and performance information, and privacy-bounded service logs. We do not use this information for cross-app tracking or third-party advertising, and we do not collect precise geolocation or browsing history.

2. How Narrative Uses Artificial Intelligence

AI processing occurs only when you deliberately submit a reflection. We use third-party AI providers to transcribe spoken reflections, respond to them, extract meaningful topics, create embeddings, and identify possible intersections between you and people with whom you have an accepted connection. The Service does not transcribe calls or human-to-human messages for AI processing.

Matching is limited to accepted connections. We do not compare your reflection against a global public pool. An intersection may be surfaced separately to a connected person when our systems identify a relevant overlap, but we do not show that person your raw reflection, transcript, or seed text, and we do not notify you merely because your information contributed to an intersection shown to someone else. AI output can be incomplete or inaccurate and should not be treated as professional advice.

Model training and improvement. We may use reflection transcripts, AI responses and suggestions, extracted topics or seeds, embeddings, intersection outcomes, and feedback to train, fine-tune, evaluate, test, and improve Narrative’s machine-learning models and AI systems. This material may contain personal or sensitive information you include in a reflection. We apply access controls and data-minimization measures and may also use aggregated or de-identified versions. Our service providers may process this information on our behalf to provide these functions, but they may not use it for unrelated purposes. Where applicable law requires consent or provides a right to opt out, limit, object, or delete, we will provide that choice.

3. How We Use Information

• provide, personalize, maintain, and secure the Service;
• authenticate accounts and maintain profiles, connections, calls, messages, notifications, and feedback;
• process deliberate reflections and generate private AI responses and relationship intersections;
• detect abuse, enforce our Terms, investigate reports, and protect users and the Service;
• train, fine-tune, evaluate, test, troubleshoot, and improve Narrative’s machine-learning models, AI systems, and products; and
• comply with law and communicate with you about the Service.

We do not sell personal information, share it for cross-context behavioral advertising, or display third-party advertising in the Service.

4. How We Disclose Information

Service providers. We disclose information as needed to vendors that support authentication, databases, hosting, communications, push notifications, real-time calls, AI processing, security, and diagnostics. These providers currently include Supabase, Railway, Apple, OpenAI, and real-time communications and infrastructure providers. They may process information only to provide services to us or as permitted by law.

Other users. Your display name, username, connection status, messages, and live call media are disclosed to the people with whom you choose to connect or communicate. A connected user may receive a phrased intersection involving you, but not your raw reflection or transcript. We do not publish reflections or intersections to the public.

Legal and business disclosures. We may disclose information when required by law or legal process; when reasonably necessary to prevent fraud, abuse, or imminent harm; or in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets. We may use and disclose aggregated or de-identified information that cannot reasonably identify you.

5. Retention and Security

We retain information only as long as reasonably needed for the purposes described here. Reflection audio is discarded after transcription. Message content is temporary and generally removed after reading or expiration within 24 hours. Call metadata is generally retained for 90 days after a call ends. Terminal notification-delivery records generally expire within 30 days. Account and profile information, including date of birth and the related age-check record, as well as connection, reflection transcript, AI output, report, and feedback records, are retained until account deletion or until no longer needed, subject to legal, security, fraud-prevention, and dispute-resolution obligations.

We use commercially reasonable administrative, technical, and organizational safeguards, including encryption in transit, encryption at rest where supported, least-privilege service access, and row-level database protections. No security system is perfect, and we cannot guarantee absolute security.

6. Your Choices and Rights

• You can decline contacts, microphone, camera, and notification permissions in your device settings, although some features will not work without them.
• You can accept or reject connection requests, disconnect from or block users, and report safety concerns.
• You can review and delete your submitted reflections and delete your account from the App. Account deletion removes Narrative-owned account data, subject to limited legal and security exceptions.
• You may contact us to request access, correction, deletion, or a copy of personal information, or to appeal a denied privacy request, where applicable law provides that right.

Residents of California and other states with comprehensive privacy laws may have additional rights, including rights to know, access, correct, delete, and obtain a portable copy of personal information, and to be free from discrimination for exercising those rights. We do not sell personal information or share it for cross-context behavioral advertising. To exercise a right, email contact@narrativesm.com. We may verify your identity before responding. An authorized agent may submit a request where permitted by law.

7. Children’s Privacy

Narrative is not directed to children under 13, and we do not knowingly permit anyone under 13 to create or use an account. We collect a date of birth during account setup and use it to prevent a person whose submitted date of birth shows they are under 13 from completing account creation. If we learn that an account belongs to a child under 13 or that an inaccurate date of birth was provided to bypass our age requirement, we will take reasonable steps to suspend or delete the account and associated personal information. Users under 18 should use the Service with the involvement and permission of a parent or legal guardian where required by law.

8. Changes to This Policy

We may update this Privacy Policy as the Service changes. We will post the revised policy and update the effective date. If a change is material, we may provide additional notice as required by law. Your continued use of the Service after the revised policy takes effect means you acknowledge the updated policy.

9. Contact Us

Narrative Social Media Inc., c/o Serendipity Labs, 1 Seneca Street, Buffalo, NY 14203. Email: contact@narrativesm.com.