Your data, your rights.
We believe privacy is a right, not a feature. Here's a clear and honest summary of how Awaiit handles your data.
Technical Security Architecture
Database Isolation (RLS)
We utilize Supabase's Row Level Security (RLS). This means your data is isolated at the database level. Even if a malicious actor gained access to our API, they cannot "query" your private information because the database itself requires a specific JWT (JSON Web Token) tied to your unique session.
End-to-End Encryption
All data in transit is protected by TLS 1.3 encryption. Your password is never stored in plain text; it is hashed using Argon2 or Bcrypt via Supabase Auth before it even hits our storage.
Infrastructure
Awaiit is hosted on Vercel's Edge Network, providing enterprise-grade DDoS protection and a global firewall to prevent automated attacks.
Geolocation & Anti-Spoofing
Verified Reporting
To maintain data integrity, our submit_verified_report function checks your physical coordinates
against the store's location.
Privacy-First Location
We do not track your movement in the background. We only request a "point-in-time" snapshot when you submit a report to verify you are within the 250m geo-fence.
Anonymous Mode
If enabled, your reports are stripped of your UserID and Username before being added to the public feed, making your contribution completely untraceable to your account.
Legal & Data Rights
Data Minimization
We follow the principle of "Less is More." We only collect your email, a username, and your contributions. We do not ask for, or store, your real name, phone number, or contacts.
Right to Erasure (GDPR/CCPA Compliance)
You own your data. You can request a full "Account Purge" at any time by emailing support@awaiit.com. This deletes your profile, your favorites, and your streak history from our servers permanently. We will process your request within 30 days.
No Third-Party Selling
Awaiit's business model is built on community utility, not data brokerage. We will never sell your email or behavior patterns to advertisers.
Last updated: May 2026