Privacy Policy

Last updated November 12, 2026

Tuppu is an app for Assyrian, Chaldean and Suryoyo families, run by EnkiCube LLC, an Illinois company (“we”, “us”). This policy explains what we collect, why, who helps us run Tuppu, and the choices you have. Questions: support@tuppu.us.

What we collect

Account: your email address and password (stored only in scrambled, hashed form by our sign-in provider). If you sign in with Apple or Google, we receive your name and email from them.
Profile: name, username, profile photo, bio, website, the communities you pick, the tribe or town your family comes from, and settings such as a private account.
What you share: posts, photos, captions, place names you tag, people you tag, stories, highlights, comments, reactions, event RSVPs and direct messages.
Connections: who you follow and who follows you, your Family circle, people you block, vouches, tribes and towns you join, and suggestions you dismiss.
Safety records: reports you make or that are made about your content, results of automatic content checks, and any strikes on your account.
Tickets and payments: the tickets you buy, your orders (event, ticket types, amounts, time of purchase), whether a ticket was scanned at the door, and any refund requests (the reason and note you give). Card details are entered on Stripe’s page and go straight to Stripe: Tuppu never sees or stores your card number.
Organizers: when a Page sets up payouts, Stripe collects the identity, business and bank details it needs. Tuppu only receives the Stripe account ID and whether the account can take payments and pay out.
Location, only when you ask: when you tag a place, the app can use your phone’s location to list nearby places. Your exact location isn’t saved; only the place name you choose is added to your post.
Technical: sign-in session data and basic server logs (such as times and error messages) kept by our hosting providers to run and secure the service.

We don’t collect your contacts, and we don’t track you across other apps or websites.

How we use it

To run Tuppu: show your profile and posts to the people you choose, deliver messages, and show your feed, tribe pages and events.
To suggest people you may know, based on follows, interactions on posts, shared tribe or town, and shared community.
To keep Tuppu safe: photos are checked automatically for content that breaks our rules, and captions are checked for abuse. Content may be held for review by our moderators.
To sell tickets: take payments through Stripe, issue tickets, let organizers check tickets at the door, handle refunds and cancellations, and prevent fraud.
To send account emails, such as password resets. We don’t send marketing email without asking.

We don’t sell your information and there are no ads in Tuppu.

Who can see what

Public profiles and posts can be seen by people using Tuppu. With a private account, only followers you approve see your posts. Family circle stories are visible only to people on that list. Direct messages are visible to the people in the conversation. Our moderators can see content that is reported or held by our automatic checks.

When you buy tickets, the event’s organizers (the admins of the Page hosting it) see your name, username, what you bought, whether your tickets were scanned, and any refund request you send them. They don’t see your card or email address.

Service providers

We use these companies to run Tuppu. They process information only to provide their service to us:

Supabase (hosted on Amazon Web Services in the United States): database, photo storage and sign-in.
OpenAI: automatic photo, caption and comment checks.
Amazon Web Services (Rekognition): automatic photo checks, when we use it instead of OpenAI.
Stripe: ticket payments, refunds, and payouts to organizers (including identity checks for organizers). See Stripe’s privacy policy.
Google: place search when you tag a location, and Google sign-in if you use it.
Apple: Sign in with Apple if you use it.
Resend: sending account emails.
Cloudflare: hosting this website.

We may also share information if the law requires it, or to protect people from harm.

Keeping and deleting your information

We keep your information while your account is open. You can delete your account in Settings: your profile, posts, photos and messages are permanently deleted after 30 days, and signing back in before then cancels the deletion. We may keep limited records longer where the law requires it or to deal with abuse (for example, reports about rule-breaking). Records of ticket purchases, payouts and refunds are kept for as long as tax and financial laws require, even after an account or Page is deleted. Backups are cleared on a rolling basis.

Your choices

Edit or delete your profile, posts, comments and messages at any time.
Make your account private, block people, and hide sensitive content.
Turn off location access for Tuppu in your phone’s settings.
Ask us for a copy of your information, or to correct or delete it, by emailing support@tuppu.us.

Children

Tuppu is not for children under 13. If we learn that someone under 13 has an account, we will delete it. Parents can contact us at support@tuppu.us.

Security

Information is encrypted in transit, and access to your data is limited by security rules in our database. No system is perfect, so please use a strong password that you don’t use anywhere else.

Changes

If we change this policy in a meaningful way, we’ll let you know in the app or by email before the change takes effect.

Contact

EnkiCube LLC · Illinois, United States · support@tuppu.us