Draft for legal review

Privacy

Last updated September 26, 2026

The Best Person asks one question: who’s the best person you know? You name three people and text them a link to your note from your own phone; if you don’t, we text them for you. This page explains what that takes, in plain words. The Best Person is run by [Company legal name].

What we collect

  • Your name, as you type it, so the people you name know who it’s from.
  • Your mobile number, to send you a one-time code and to allow one ballot per phone per circle.
  • The names and mobile numbers of the three people you name, so each person gets one note however many people name them, and so we can text them if you don’t, plus the words you pick about them, how you know them and for how long. When you tap “Text” to send a note yourself, the number you gave stays on your phone for that; we only record that you tapped.
  • Circles: a circle’s name and reveal time, and who started it.
  • Basic technical data: your IP address is used briefly to stop abuse and is stored only as a scrambled key for two days. Vercel Analytics counts page views without cookies and without identifying you.

How we protect phone numbers

We never store a phone number in plain text. We match numbers using a one-way fingerprint (a keyed hash), and keep the number itself encrypted, only so we can text it. Nobody using The Best Person ever sees anyone’s number, not even the last four digits. The one exception is our sign-in provider (Supabase Auth), which keeps the number of each person who verifies a code so it can manage the sign-in.

Who sees what

  • A person you name sees your full name and the words you picked. They never see where you ranked them.
  • After a circle’s reveal, the top three are shown, but only people who verified their number and said yes to being included. Nobody sees a full ranking or anyone’s place below third.
  • The person who started a circle sees participation counts only, never names or votes.

Who helps us run it

Supabase (database and sign-in codes), Vercel (hosting and privacy-friendly analytics) and Twilio (sending texts and verification codes). They process data only to provide these services to us. We don’t sell personal information, and we don’t use it for advertising.

How long we keep it

Until you ask us to delete it. Rate-limit records expire after two days. If you delete your data we keep only the fingerprint of your number, so we never text it again.

Your choices

  • Reply STOP to any text to stop all texts from us. Reply START to undo that.
  • Tap “Not for me” on a note to stay out of that circle’s results.
  • Delete your data at any time by verifying your number.

Children

The Best Person is not meant for children under 13, and we don’t knowingly collect their information. If you think a child under 13 has used it, contact us and we’ll delete it.

Contact

Questions or requests: [contact email].