Privacy policy
What the REALITY app at app.realitydn.com collects, why, how long we keep it, and how to have it deleted — including Send out, the tool our team uses to post REALITY's videos to Instagram, Facebook, Threads, TikTok and YouTube.
Last updated 15.10.26
Who we are
The app is run by REALITY, a bar, café and community space at 86 Mai Thúc Lân, Đà Nẵng, Vietnam ("REALITY", "we"). Questions about this policy or your data go to reality.dn@gmail.com.
What we collect
- If you sign in
- Signing in uses Google. Google shares your name, email address and profile picture with us, and nothing else — we never see your Google password. We use them to run your account and to show your name where you take part, like a guest list or a game leaderboard.
- If you don't
- You can read the calendar without an account. If you save a night or join a game without signing in, we set a cookie with a random guest id so the app remembers you on that device.
- What you do in the app
- Your RSVPs, reminders, waitlist places, the event series you follow, your language and notification settings, games you play and your scores, feedback you send, and photos you upload with any tags on them.
- Notifications
- If you turn notifications on, your browser gives us a push address. We use it only to send the REALITY notifications you asked for.
- How the app is used
- We count page views and taps ourselves (the page, the event, your language, and your account id if you're signed in) to learn which parts of the app get used. Cloudflare Web Analytics also counts visits, without cookies.
- If you work here
- The staff tools also hold your shifts, schedule, clock-ins, task check-offs and any proof photos you take on shift.
- Event proposals
- If you propose an event through realitydn.com, we keep what you send so we can answer it, and copy it to our Notion workspace as a backup.
We don't sell your data, we don't run ads, and the app has no advertising or tracking pixels.
Send out: Instagram, Facebook, Threads, TikTok and YouTube
Send out is part of Media Studio, the app's back-of-house media tools. Only REALITY's own team (admins, and staff we give Media Studio access) can use it, and only to connect REALITY's own business accounts. Guests of the app never connect a social media account, and Send out never reads anyone else's account.
A team member uploads a finished video, writes a caption, ticks where it should go and presses Send. The app hands the video to each platform through that platform's official API and shows whether the post went live. Nothing is posted unless a person on our team presses Send.
When an account is connected, Send out receives and uses only this:
- Facebook + Instagram
- Through Facebook Login: the Facebook Pages the connecting person manages and an access token for the REALITY Page; the Instagram professional account linked to it (its id, username and profile picture). Used to publish Reels to the REALITY Page and the REALITY Instagram account, and to read back each post's processing status and link. Permissions: pages_show_list, pages_read_engagement, pages_manage_posts, business_management, instagram_basic, instagram_content_publish.
- Threads
- The Threads profile's id, username and profile picture (threads_basic), and permission to publish (threads_content_publish). Used to publish videos to REALITY's Threads profile and read back each post's status and link.
- TikTok
- The account's id, display name and avatar (user.info.basic), the posting options TikTok returns before each post (such as the allowed privacy levels and the longest video it accepts), and permission to upload and publish videos (video.upload, video.publish). Until TikTok approves direct posting, videos arrive as drafts in the account's TikTok inbox for a person to finish there.
- YouTube
- The channel's id, title and thumbnail (youtube.readonly), and permission to upload videos (youtube.upload). Used to upload Shorts to REALITY's channel and check that they've processed. Send out uses YouTube API Services; Google's handling of data is covered by the Google Privacy Policy.
Send out does not read followers, comments, messages, likes, insights or any other content from these accounts. We don't sell or share what we receive from these platforms with anyone else, use it for advertising, or use it to train AI models.
Access tokens are encrypted (AES-GCM) before they're stored in our database, and are only ever used by the app's server to make the requests above. For each post we keep the caption, the video and its cover, where it was sent, and each platform's post id, link, status and any error, so the team can see what went out. To publish, Instagram, Facebook, Threads and TikTok fetch the video from our file storage at img.realitydn.com using a link the app gives them; YouTube receives it from the app directly.
REALITY's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The same is true of Google sign-in.
How long we keep it
- Your account and what you've done in the app: until you delete your account.
- Sign-in sessions: they end 180 days after your last visit.
- Our page-view and tap counts: deleted after 180 days.
- Push addresses: until you turn notifications off, delete your account, or your browser tells us the address no longer works.
- Send out tokens and connected-account details: until the account is disconnected. If access is revoked on the platform's side instead, we delete them once the app notices — within 30 days at most.
- Send out post records (caption, video, links, status): kept as the team's record of what REALITY has posted, until the team deletes them.
Your choices
Change your name, language and notification settings on the You tab. Turn notifications off there or in your browser. To get a copy of your data or to correct it, email reality.dn@gmail.com.
Deleting your data
- Your app account
- Signed in? Open the You tab, scroll to the bottom and press Delete my account. That deletes your photos and the tags of you, your RSVPs, reminders, follows, push addresses and sign-in sessions, and removes your name, email and picture. Game scores stay as a row with no name on it, because other players' rankings depend on them.
- Without an account
- Clear this site's cookies in your browser.
- By email
- Or email reality.dn@gmail.com from the address you signed in with, and we'll delete your account within 30 days and tell you when it's done.
To remove Send out's access to a connected account, a team member presses Disconnect on it in Send out. That revokes the app's access with the platform where the platform allows it, and deletes the stored tokens and account details straight away. Access can also be removed on each platform's side:
- Facebook: Settings & privacy → Settings → Business integrations → REALITY Send out → Remove.
- Instagram: Settings → Website permissions → Apps and websites → REALITY Send out → Remove.
- Threads: Settings → Account → Website permissions → REALITY Threads → Remove.
- TikTok: Settings and privacy → Security & permissions → Apps and services → REALITY Send out → Remove access.
- YouTube / Google: Google security settings — third-party access → REALITY Send out → Remove access.
When access is revoked on the platform's side, we delete everything we hold from that account within 30 days. To have Send out data deleted sooner — or any data you think we received about you through one of these platforms — email reality.dn@gmail.com; we'll delete it within 7 days and confirm.
Security
The app is only served over HTTPS. Staff tools are open only to accounts REALITY has given access, and social media tokens are encrypted at rest.
Children
The app isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, email reality.dn@gmail.com and we'll delete the account.
Changes
When this policy changes, we update this page and the date at the top of it.
Contact
REALITY · 86 Mai Thúc Lân, Đà Nẵng, Vietnam · reality.dn@gmail.com