IdeaZation

Web & Mobile Apps

Privacy Policy

Last updated: September 8, 2026  ·  Effective: September 8, 2026  ·  Version 1.2 (Beta)

This Privacy Policy explains how IdeaZation collects, uses, shares, and protects your information when you use our website and web application at www.theideazation.com and our mobile applications for iOS and Android (together, the "Service").

IdeaZation is a collaborative idea-evaluation tool that helps teams weigh the pros, debate the cons, and raise the questions around new ideas. We care about your privacy and have written this policy in plain language wherever we can. By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

1. Who we are & how to contact us

The Service is operated by IdeaZation, a product operated by Noor Bahr Al Uloom as an individual sole operator based in Redmond, Washington, United States ("IdeaZation," "we," "us," or "our"). IdeaZation is currently an unregistered trade name used while we validate the product in beta; the responsible operator is Noor Bahr Al Uloom.

For any privacy question, or to exercise your rights, contact us at support@theideazation.com. For most purposes under applicable data-protection laws, IdeaZation acts as the controller of the personal information described in this policy.

2. Information we collect

We collect the following categories of information.

a. Information you give us

• Account & profile data — such as your name (or display name), email address, and any optional profile details or organization/team name you add, plus a password if you create your account with one. Passwords are stored in hashed, non-readable form by our authentication provider; we do not see your plain-text password. If you sign in with Google or Apple instead, no password is created or stored.
• Content you create — the ideas, pros, cons, questions, comments, and votes you and your collaborators add to the Service, and the text of those contributions.
• Communications — messages you send us (for example, support requests, beta feedback, or survey responses) and their contents.

b. Information we collect automatically

• Usage data — how you interact with the Service, such as features used, pages or screens viewed, actions taken, and timestamps.
• Device & technical data — your IP address, browser type, operating system, device type and settings, app version, language, and similar diagnostic data. On our web app this includes crash and error logs collected through our error-monitoring provider (see Section 7).
• Identifiers — browser local storage and similar web technologies (see Section 5), and, on mobile, on-device storage used to keep you signed in and remember your settings.

c. Information from third parties

• Authentication provider — we use Supabase to register accounts and verify sign-ins. If you sign in with an email address and password, we process those to authenticate you; your password is kept only in hashed form.
• Sign in with Google or Apple (optional) — instead of a password, you may choose to sign in using your Google or Apple account. If you do, that provider confirms your identity to us and shares a limited set of details: from Google, your email address, name, and profile picture; from Apple, your name and email address. We never receive your Google or Apple password. Choosing this option also tells that provider that you have an IdeaZation account, and their own privacy policy governs what they do with that information.
• Apple's Hide My Email — if you use Sign in with Apple and choose to hide your address, Apple gives us a private relay address (one ending in “privaterelay.appleid.com”) instead of your real one. That relay address is then the only address we hold for you, and it is what our emails are sent to. Because we cannot match it to your real address, an account created this way is separate from any account you may already have under your real email, and invitations sent to your real address will not reach it.
• App stores — when you download our mobile app, the Apple App Store or Google Play may share limited information (such as download and basic device data) in accordance with their own policies.

We do not intentionally collect special-category or sensitive personal data (such as health, biometric, or precise-location data), and we ask that you not submit such information into the Service.

3. How we use your information

We use your information to:

• provide, operate, and maintain the Service and its collaboration features;
• create and secure your account and authenticate you;
• enable you to create, share, and evaluate ideas with your collaborators;
• send you service-related messages (for example, account emails such as email-confirmation and password-reset links, in-app notifications you enable, and important updates);
• respond to your requests and provide support;
• understand how the Service is used so we can fix problems and improve it (analytics);
• protect the Service, our users, and the public — including detecting, preventing, and addressing fraud, abuse, security issues, and violations of our User Agreement; and
• comply with legal obligations and enforce our terms.

During beta we may send you occasional emails about the product and invitations to give feedback. You can opt out of non-essential emails at any time using the unsubscribe link or by emailing us. We do not use your content to serve third-party advertising, and we do not sell your personal information.

4. Legal bases for processing (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

5. Local storage & similar technologies (web)

On our website and web app we rely on a small amount of browser local storage and similar technologies — not advertising cookies:

• Essential — keeps you signed in and keeps the Service working securely; your login session is stored in your browser's local storage.
• Functional — remembers your preferences and settings, such as light or dark mode.
• Diagnostics — our error-monitoring provider (see Section 7) helps us detect and fix problems.
• Analytics — we use Umami, a privacy-first, cookieless analytics service, to count visits and understand, in aggregate, how the Service is used. It sets no cookies and stores no identifier on your device, does not track you across other sites, and honors your browser's Do Not Track signal. Umami processes this data on our behalf (see Section 7); like our other infrastructure it is processed in the United States, and international transfers are handled as described in Section 12.

We do not use advertising cookies or cross-site / cross-context tracking technologies, and we do not track you across other sites or sell or share your personal information. Our analytics honors your browser's Do Not Track signal, and because we do not track you across sites there is nothing further for a Global Privacy Control signal to disable; you can clear locally stored data at any time through your browser settings. Our mobile apps do not use browser cookies; they use on-device storage to keep you signed in and remember your settings, and the analytics they send stores no identifier on your device.

6. How we share information

We share information only as described below. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

• With your collaborators. IdeaZation is a collaborative tool. Content you contribute to a shared idea, workspace, or team is visible to the other members of that space, along with your name or display name.
• With service providers. We use trusted vendors that process data on our behalf to run the Service (see Section 7). They may access personal data only to perform services for us and are bound by confidentiality and data-protection obligations.
• For legal and safety reasons. We may disclose information if we reasonably believe it is necessary to comply with a law, regulation, legal process, or governmental request; to enforce our terms; or to protect the rights, property, or safety of IdeaZation, our users, or the public.
• In a business transfer. If IdeaZation is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction; we will notify you of any change in control or use of your personal information.
• With your consent. We may share information for other purposes with your permission.

7. Service providers we use

We rely on a small set of reputable providers to operate the Service. As of the "Last updated" date these fall into the following categories:

We may add or change providers as the Service evolves. You can request an up-to-date list of the providers that process personal data on our behalf by emailing support@theideazation.com.

8. Mobile app specifics

Our iOS and Android apps behave like the web app but run on your device, which means a few extra points apply:

• Device permissions. The app asks only for the permissions it needs to function. You can grant or revoke permissions at any time in your device settings; some features may not work without them.
• Notifications. The app shows in-app notifications about activity in your groups and ideas. It can also send device push notifications for the things addressed to you personally — a group invite, a reply in a discussion you are part of, a decision on your idea, or a change to your admin role. Push is off until you turn it on in Profile → Notifications, which asks for iOS notification permission at that moment. When it is on, we store a push token for that device so the notification can be delivered; the token is deleted when you turn push off, sign out, delete your account, or uninstall the app. Delivery goes through Expo's push service and Apple's Push Notification service, and the message contains the same text as the matching in-app notification. You can also revoke permission at any time in your device settings.
• On-device storage. The app stores your session and content on your device so it can keep you signed in and work smoothly, and syncs that data with the providers described in Section 2.
• No cross-app advertising tracking. We do not track you across other companies' apps and websites for advertising, and we do not use advertising identifiers for that purpose. Because of this, the app does not present Apple's App Tracking Transparency prompt.
• App store data. Your download and any in-app purchases (if introduced later) are also subject to the privacy practices of the Apple App Store and Google Play.

9. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, or when we close it, we will delete or anonymize your personal information within a reasonable period (generally within 30 days), except where we need to retain certain information to comply with legal obligations, resolve disputes, prevent abuse, or enforce our agreements. Residual copies may persist in encrypted backups for a limited time before they are overwritten on a rolling basis.

10. Your privacy rights & choices

You can review and update much of your information directly in your account settings, and you can delete your account at any time from within the app (or by asking us, as described below).

All users

You may ask us to access, correct, update, or delete your personal information, or to provide a copy of it. To do so, email support@theideazation.com. We may need to verify your identity before acting on a request.

EEA / UK users (GDPR)

You have the rights to access; rectify; erase; restrict or object to processing; data portability; and to withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with your local data-protection authority (in the UK, the Information Commissioner's Office).

California users (CCPA/CPRA)

You have the right to know the categories and specific pieces of personal information we collect, use, and disclose; to correct inaccurate information; to delete your information; and to not be discriminated against for exercising these rights. We do not sell or share (for cross-context behavioral advertising) your personal information, and we have not done so in the past 12 months. We do not knowingly process sensitive personal information for purposes that would trigger a right to limit its use.

Other U.S. state residents

Residents of other states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and a growing number of others — have similar rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, sale, and certain profiling. We honor these rights regardless of where you live. To exercise any of them, contact support@theideazation.com. If we decline a request, you may appeal by replying to our response.

11. How we protect your information

We use reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS/TLS), encryption at rest through our hosting provider, access controls, and limiting who can access personal data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Because the Service is in beta, please do not use it to store information you cannot afford to lose or that is highly sensitive. If we become aware of a data breach affecting your personal information, we will notify you and the appropriate authorities as required by law.

12. International data transfers

We are based in the United States, and our primary database and infrastructure are hosted in the United States (US West / Oregon region). We and our service providers process information in the United States. If you access the Service from outside the United States, you understand your information will be transferred to and processed in the United States. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or another lawful transfer mechanism.

13. Children's privacy

The Service is intended for users who are at least 16 years old. It is not directed to anyone under 16, and we do not knowingly collect personal information from them. If you are between 16 and the age of majority in your location, you may use the Service only with the involvement and permission of a parent or legal guardian. If you believe someone under 16 has provided us personal information, please contact support@theideazation.com and we will delete it promptly.

14. Third-party links

The Service may contain links to third-party websites or services that we do not operate. This policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to review their policies before providing them any information.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service or by email. Your continued use of the Service after an update means you accept the revised policy.

16. Contact us

If you have questions, requests, or concerns about this policy or your information, contact us at:

IdeaZation (operated by Noor Bahr Al Uloom)
Redmond, Washington, United States
Email: support@theideazation.com

↑ Back to top