How we protect
your privacy

1. Who we are

TPCG.com (“TPCG”, “we”, “us”) operates the AI-first professional network at https://tpcg.com and the TPCG Android app. Contact: admin@rehanfoundation.com.

2. Data we collect

Account data you provide: name, email address, password (stored hashed), account type, username, headline, bio, location, profile and cover photos.

Content you create: posts, comments, likes, connection requests, messages, opportunities, and people you tag or follow.

OAuth data (if you use Google or LinkedIn sign-in): name, email address, profile photo URL, and provider user ID, received from Google or LinkedIn after you consent on their screens. We never receive your Google or LinkedIn password.

Automatic data: device type, OS version, app version, crash diagnostics, log data (IP address, timestamps, pages viewed), and cookie / session identifiers needed to keep you signed in.

3. Device permissions (mobile app)

The app requests access only when you use a feature that needs it, and you can deny or revoke access at any time in system settings:

• Camera & photos / media library — only when you choose to take or upload a profile photo, cover photo, or post attachment.
• Storage / media — only to read a file you explicitly pick for upload.
• Notifications — only to deliver likes, comments, messages, and connection updates you opt into.
• Network / internet — required to sync your account with tpcg.com. No background location tracking, no contact-list upload, no SMS or call-log access.

4. How we use data

• Provide, operate, and secure your account, feed, messaging, and networking features.
• Authenticate you, including Google / LinkedIn OAuth, and keep you signed in across web and app.
• Personalize suggestions (people, opportunities, content) and improve relevance and safety.
• Send service messages (security alerts, connection updates, replies) and, only with consent, product notifications.
• Prevent abuse, enforce our terms, debug crashes, and comply with legal obligations.

5. How we share data

We do not sell your personal data. We share it only with:

• Other users, per your settings: your public profile, posts, comments, and likes are visible according to the audience you choose (public / connections).
• Service providers (processors): hosting infrastructure, TLS / CDN, crash reporting, email delivery, and push-notification delivery — each bound to process data only on our instructions.
• OAuth providers, at your direction: Google or LinkedIn, only when you choose their sign-in button and consent on their screens.
• Legal / safety: when required by law or to protect users, our rights, and platform integrity.

6. Cookies and sessions

We use strictly-necessary session cookies to keep you signed in and remember security preferences. The mobile app stores its session token on-device (SharedPreferences / Keychain/Keystore-backed storage) until you tap Sign out. We do not use cross-site advertising cookies.

7. Data retention and deletion

We keep account data while your account is active. You can delete individual posts or messages in-app, and you can delete your account at any time from Settings → Delete account (type DELETE to confirm) or by emailing admin@rehanfoundation.com from your account email. On deletion we deactivate your profile and remove or anonymize personal content within 30 days, except where retention is required by law or for fraud prevention.

8. Your rights and choices

• Access, correct, or export your profile data from the app or by emailing us.
• Control post audience (public / connections), profile visibility, and notification preferences.
• Revoke Google / LinkedIn access anytime in your Google or LinkedIn account settings; your TPCG account stays usable via email sign-in.
• Revoke device permissions anytime in Android Settings; related features will simply be unavailable until re-granted.

9. Security

We use HTTPS/TLS everywhere, hashed passwords, scoped session tokens, and least-privilege server access. No method of transmission is 100% secure, so please use a strong unique password and keep your device updated.

10. Children and child safety

TPCG is a professional network and is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect data from children; if you believe a child provided data, contact us and we will delete it.

Zero tolerance for child sexual abuse and exploitation (CSAE/CSAM): any content that sexualizes, exploits, or endangers children is strictly prohibited on TPCG.com and in the TPCG app. Accounts posting such content are permanently removed, and where required by law we report it to the appropriate authorities (including NCMEC where applicable).

How to report: tap Report on any post (⋯ menu) or profile in the app and choose “Child safety concern”, or email admin@rehanfoundation.com with the subject “Child safety report” and a link to or screenshot of the content. We review safety reports promptly and act within 24 hours on urgent cases. Child-safety point of contact: admin@rehanfoundation.com.

11. International transfers

Your data is processed on servers in the United States and may be processed in other countries where our providers operate, under appropriate contractual safeguards.

12. Changes to this policy

We will post any changes on this page and update the “Last updated” date. Material changes will also be announced in-app or by email.

13. Contact

Questions or requests: admin@rehanfoundation.com. Postal / support: TPCG.com via tpcg.com.