Privacy

Last updated September 26, 2026

The Best Person asks one question: who’s the best person you know? You name up to three people, one at a time, and text each of them a link to your note from your own phone; if you don’t, we text them for you. This page explains what that takes, in plain words. The Best Person is run by [Company legal name].

What we collect

• Your name, as you type it, so the people you name know who it’s from.
• Your mobile number, to send you a one-time code and to allow one ballot per phone per group.
• The names of the people you name, and their mobile numbers if you give them, so each person gets one note however many people name them, and so we can text them if you don’t, plus the words you pick about them, how you know them and for how long. A number is optional: without one you pick the person in your own Messages app, and we learn their number only if they open the note and verify it themselves. When you tap “Text” to send a note yourself, we only record that you tapped.
• Whether a note was opened: the time its link was first opened and the time it was first read, not who opened it or from where. This is how we know a note reached the person it was written for.
• Groups: a group’s name and reveal time, and who started it.
• Basic technical data: your IP address is used briefly to stop abuse and is stored only as a scrambled key for two days. Vercel Analytics counts page views without cookies and without identifying you.

How we protect phone numbers

We never store a phone number in plain text. We match numbers using a one-way fingerprint (a keyed hash), and keep the number itself encrypted, only so we can text it. Nobody using The Best Person ever sees anyone’s number, not even the last four digits. The one exception is our sign-in provider (Supabase Auth), which keeps the number of each person who verifies a code so it can manage the sign-in.

Who sees what

• A person you name sees your full name and the words you picked. They never see where you ranked them. To read your words, they name someone of their own and text them their note (or we do).
• After a group’s reveal, the top three are shown, but only people who verified their number and said yes to being included. Nobody sees a full ranking or anyone’s place below third.
• The person who started a group sees participation counts only, never names or votes.

Public pages (only if you turn yours on)

Your page is private unless you choose to make it public, which is only for people 18 and older. A public page can be found by your name inside The Best Person and shows your name, how many people named you, the words from notes you’ve opened, how each writer knows you, and which people you named, if their pages are public too. Whoever wrote a note is named only if their own page is public; otherwise it says how they know you (for example, “From a friend”). It never shows a phone number or anyone’s rank. We ask search engines not to index these pages. Make yours private again at any time from the page itself; deleting your data removes it.

Who helps us run it

Supabase (database and sign-in codes), Vercel (hosting and privacy-friendly analytics) and Twilio (sending texts and verification codes). They process data only to provide these services to us. We don’t sell personal information, and we don’t use it for advertising.

How long we keep it

Until you ask us to delete it. Rate-limit records expire after two days. If you delete your data we keep only the fingerprint of your number, so we never text it again.

Your choices

• Reply STOP to any text to stop all texts from us. Reply START to undo that.
• Tap “Not for me” on a note to stay out of that group’s results.
• Your page is private unless you make it public, and you can make it private again at any time.
• Delete your data at any time by verifying your number.

Children

The Best Person is not meant for children under 13, and we don’t knowingly collect their information. If you think a child under 13 has used it, contact us and we’ll delete it.

Contact

Questions or requests: [contact email].