Desk privacy policy

Effective: 15 October 2026
Last updated: 20 October 2026

1. Who we are

Desk is a small personal space where people share in-progress work, called Drops, on their own Desk, and see what their Neighbors are up to. Desk is run by Trevon Preudhomme in Trinidad and Tobago ("Desk", "we", "us").

Questions about this policy, or requests about your data: hello@visitdesk.app.

This policy covers the Desk website at visitdesk.app, the Desk web app (including when you add it to your home screen) and the Desk Android app.

2. The short version

• We collect what you give us (an email address to sign in, your name and username, optional profile details, and the Drops, notes and messages you post) and a small amount of technical data needed to run the app.
• Your profile is visible to other people who are signed in to Desk. Your Drops are visible to the audience you choose. People who aren't signed in can't browse profiles or Drops.
• We don't run advertising, don't sell your data and don't use analytics or tracking tools in the app.
• Desk is for people aged 18 and over.
• You can delete your account from Settings. Section 9 explains what that removes.

3. What we collect

Information you give us

Google user data

This part applies if you choose Sign in with Google (labelled "Continue with Google" in the app).

• What we receive. Desk asks Google only for basic sign-in scopes (openid, email and profile). With your permission, Google shares your email address, your Google account ID, and your Google account's name and profile picture. Desk never requests access to Gmail, Google Drive, Google Contacts, Google Calendar, Google Photos or any other Google service or data.
• How we use it. Your email address and Google account ID are used only to create your Desk account, sign you in, keep the account secure and contact you about it. Your Google name and profile picture are kept by our sign-in provider, Supabase, as part of your sign-in record, but Desk doesn't show them or use them for anything: the name and photo on your Desk are the ones you enter yourself during setup.
• Sharing. We don't sell Google user data or share it with anyone, except Supabase, which stores it to provide sign-in on our behalf (section 6), or where the law requires it. We don't use it for advertising, and we don't transfer it to data brokers or information resellers.
• No AI. We don't use Google user data to develop, improve or train artificial intelligence or machine learning models, and Desk doesn't use AI to generate or edit images of anyone.
• Storage and protection. The data is stored by Supabase in Canada, encrypted in transit and at rest, and only the account owner and Desk's administrator can access it, the administrator only for support, security or legal reasons.
• Keeping and deleting it. We keep it while your account exists. Deleting your account (section 9) deletes it. You can also remove Desk's access at any time from your Google Account at myaccount.google.com/permissions.
• Limited Use. Desk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Information collected automatically

• Push notification address. If you turn on notifications we store the address your browser or Android device gives us (a web push endpoint or a Firebase Cloud Messaging token) so we can send alerts such as "Alex clapped for your Drop". Notification text can contain a first name or username.
• Words we blocked. If you try to post text that our word filter refuses, we record the text (first 500 characters), the type of field and your account so administrators can review repeated abuse.
• Activity time. We record when you were last active at your Desk, to order people in Discover.
• Technical logs. Our hosting providers (section 6) keep standard server logs, which can include your IP address, device and browser details and the web address requested. The address of a photo contains the account identifier of the person who uploaded it.
• Data stored on your device. The app keeps a sign-in session, your theme choice, whether you dismissed a prompt, your push address (on Android) and a few interface preferences in your browser or app storage. These are needed to run the app. We don't set advertising or analytics cookies.

Information we don't collect

We don't collect your date of birth, phone number, precise location, contacts, microphone data, advertising identifiers or payment information. The camera is used only when you choose to take a photo to post. When you sign up you confirm that you're 18 or older; we don't store your age.

4. Photos

When you upload a photo, your device re-encodes it to a smaller size, which normally removes location and camera details. This isn't guaranteed. If you care about metadata, remove it before you upload.

Photos and profile pictures are stored with our image storage provider and served from public web addresses on cdn.visitdesk.app. Anyone who has the exact address of a photo can open it without signing in, even if the Drop is no longer shown. Addresses are long and unguessable, but treat photos you upload as potentially public.

Photos can be cached by our delivery network and by browsers, so a photo you've deleted can remain reachable at its address for a while after it's gone from storage.

Deleting a Drop removes the Drop from Desk. The photo file itself is removed when you delete your account. Section 9 has the details.

5. Who can see what

• Your profile (name, username, bio, what you make, country, profile photo, mood, desk objects) is visible to people who are signed in to Desk, and appears in Discover and search for them. People who aren't signed in can't browse profiles or Drops. There is currently no way to hide your profile from signed-in people.
• Drops are shown to the audience you pick when you post: Everyone, Mutual neighbors, or Only me. Drops leave the Floor after 24 hours but stay in your Journal until you delete them. Drops attached to a session take the session's audience.
• Notes are visible wherever the Drop is visible. Desk Mail is visible only to the sender and recipient. Reports are visible only to administrators.
• Settings let you choose who can send you gestures and notes, and your default audience for new Drops.
• People you block can no longer see your profile, Drops or sessions, or contact you, and you can't see theirs. We don't tell them.

6. Who we share data with

We don't sell your personal data and we don't share it for advertising. These service providers handle data on our behalf:

We may disclose information if the law requires it, to respond to valid legal requests, to protect people's safety (for example, reports of child sexual abuse material, which we report to the relevant authorities), or to enforce our Terms. If Desk is sold or merged, your data may transfer under the protections of this policy.

7. Legal bases (EU and UK users)

Where the GDPR or UK GDPR applies, we rely on:

• contract: providing the account, profile, Drops and messages you ask for;
• legitimate interests: keeping Desk safe, preventing abuse and fixing bugs (you can object);
• consent: push notifications, which you can switch off in Settings or on your device;
• legal obligation: where the law requires us to keep or disclose something.

8. How long we keep data

We keep your data while your account exists.

9. Deleting your account and your data

You can delete your account in the app: Settings → Delete account. This removes your sign-in and your profile, Drops, notes, claps, saves, neighbors, sessions, Desk Mail you sent or received, notifications and push addresses from our database. It also deletes the photos and profile pictures you uploaded from our image storage.

If you can't sign in, see the deletion page at visitdesk.app/delete-account for how to ask us to do it.

After deletion we may keep: records of moderation actions, which no longer point to you; copies in backups until they expire; and logs held by our providers. Photos can remain in delivery caches briefly (section 4). Other people's content that mentions you, such as their captions, is theirs and stays.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your data, to receive a copy in a portable format, to withdraw consent, and to complain to your data protection authority. You can edit most information in the app. For anything else, email hello@visitdesk.app. We'll reply within 30 days. There's no in-app data export yet; ask us and we'll send you a copy.

California residents: we don't sell or share personal information for cross-context behavioural advertising.

11. Children

Desk is for people aged 18 and over. We don't knowingly collect personal data from anyone younger. If you believe someone under 18 has an account, email hello@visitdesk.app with the subject "Child safety" and we'll remove it.

12. Security

We use encrypted connections (HTTPS) between the app and our servers, and access rules so people can read only the data they're allowed to see. No online service is perfectly secure and we can't guarantee absolute security. Choose a strong password and tell us promptly if you think your account was accessed without permission.

13. International transfers

Desk's database is in Canada, and our providers also operate in the United States and other countries, so your data may be processed outside the country where you live. Where the law requires a transfer mechanism, we rely on the safeguards our providers offer, such as standard contractual clauses.

14. Changes

We may update this policy. For material changes we'll tell you in the app or by email before they take effect. The "last updated" date above shows the current version.

15. Contact

Trevon Preudhomme, trading as Desk, Trinidad and Tobago
Privacy, support, safety and appeals: hello@visitdesk.app
Website: visitdesk.app