Privacy Policy

The short version

Exhibit Tea is built for small, invite-only circles of people following a case together. We don’t sell your data, we don’t run ads, and what you add to a circle is only visible to the members of that circle and, as explained below, to the person who reviews safety reports at Exhibit Tea and the service providers that run Exhibit Tea. This page explains exactly what we collect, why, and what happens to it if you delete your account.

What we collect

• Account information: your email address, the display name and photo you choose, and your password (handled securely by our authentication provider, Supabase — we never see or store it in plain text).
• Content you and your circle add: circle and case names, links and notes about sources, comments, and questions you ask Exhibit Tea’s AI.
• Content Exhibit Tea generates: AI-written source and case summaries and answers. For ordinary web links (such as news articles), Anthropic’s web-fetch tool opens the page so the AI can read it, and we save the page text with the source. For YouTube, X, TikTok, Spotify and Apple Podcasts links we use only the preview text described below.
• Link previews: when your circle adds a link from YouTube, X, TikTok, Spotify or Apple Podcasts, we ask that service’s own public preview feature for the title, author, a thumbnail link, and the caption, post text or description it publishes. We keep these details, including the copy the AI reads, for up to 30 days, then clear them or look them up again. A summary or answer written earlier may still use words from that text until it is refreshed. Thumbnails are loaded straight from the service and are not copied. We do not read or store anything about Instagram or Facebook posts — they appear only as links.
• Circle opinions: your answers to “Do you find this credible?” on a source. A member sees the circle’s answers only after giving their own.
• Safety records: reports you file about content, people you block, and the date and version of the AI notice you agreed to.
• Notification settings: if you allow notifications, a device token used to send them.
• Purchase information: which subscription you bought, for which circle, and its dates and status. Apple handles payment.
• Join page: your waitlist email, optional case and link source, plus anonymous visit and click counts.
• Basic technical information: standard server logs (timestamps, error reports) needed to keep the service running, and simple usage events (for example, that a circle added its first source), which never include what you wrote.

Cookies and device storage

Our website uses cookies needed to keep you signed in. The app stores your sign-in session (and, if you allow notifications, a notification token) on your device. We don’t use advertising or tracking cookies. Link-preview thumbnails load directly from the service that hosts them (for example YouTube), so that service can see your device’s internet address, as with any image on the web. We don’t track you across other websites or apps, so we don’t change anything in response to browser “Do Not Track” signals. Services whose thumbnails appear in Exhibit Tea (such as YouTube) may collect information under their own policies.

Who can see it

A circle’s cases, sources, comments, and AI-generated summaries are visible only to that circle’s own members — enforced at the database level, not just in the app’s interface. Nobody outside a circle, including us, browses circle content as a matter of course. The exception is safety: reported or flagged content can be seen by the person who reviews safety reports at Exhibit Tea, so they can decide whether it stays up, and reports are never shown to the member who is reported.

How AI processing works

When your circle adds a source or asks a question, the relevant text is sent to Anthropic’s Claude API to generate a summary, extract claims, or answer the question. Exhibit Tea asks the AI to back each claim with a citation to a source or comment your circle added (and, when web research is on, to outside web pages). AI can still get things wrong, misread a source, or mix people up, so check the original source before relying on it.

What is sent: the text of sources your circle adds (titles, captions, descriptions and notes), your circle’s comments with the display name of whoever wrote each one, the questions asked, and the case name and description. Your email address and password are never sent. Anthropic uses this text only to screen posts for safety and to write summaries and answers for Exhibit Tea. Its commercial terms say it may not train its AI on this text. It normally deletes it within 30 days, and may keep content flagged by its safety systems for longer, up to two years, for safety review. It may process it in the United States or other countries. You are asked to agree to this before you use Exhibit Tea, and you can withdraw that agreement at any time from your account; text already sent cannot be recalled. If you withdraw, we stop including your sources, comments and questions in future AI requests, and the same happens if you delete your account. Notes you write when you report something are also checked by the AI, except reports about child safety, which are never sent to it. AI output can be wrong — treat it as a starting point and never as proof about a real person.

When members answer “Do you find this credible?” on sources, only the counts (for example, “3 of 5 found this convincing”) are sent for the summary — not who answered what.

Each case has its own web-research setting. It is off by default, and only a circle owner or admin can turn it on. If your circle turns on web research for a case, Claude may search the web using words from this text, such as the case name, and may include what it finds in summaries. For that case we send Anthropic the case name and description, plus the titles of up to eight of its sources (for summaries) or the question asked (for answers). Claude then runs up to two searches per summary or answer using Anthropic’s web search tool. While the setting is off, nothing about that case is used for web searches.

YouTube API Services

Exhibit Tea uses YouTube API Services. When your circle adds a YouTube link, we use the YouTube Data API and YouTube’s public preview to get the video’s title, channel name, thumbnail link and description. We show these under YouTube’s name. We send the title and description to Anthropic with your circle’s other source text, as described above. We delete or refresh the stored title, description and preview within 30 days, including the AI’s saved quotes of them. AI summaries and answers written earlier may still mention them until they are next updated. The AI summary next to them is Exhibit Tea’s own and is labelled as not from YouTube. We do not connect to or access your Google or YouTube account. By using Exhibit Tea you agree to be bound by the YouTube Terms of Service. For how Google handles data, see the Google Privacy Policy. You can review or remove any app’s access to your Google account at Google’s security settings page.

Safety, reports and blocking

Every source, comment and question is screened automatically before the rest of the circle sees it. You can report any content from within the app, and you can block a member so you no longer see their sources, comments or questions; the blocked member is not told. Reports and blocks are visible only to you and to the person who reviews safety reports at Exhibit Tea. That is currently one person, who aims to review each report within 24 hours, with the most serious reports first. Most reports are first checked by our automated safety check: the reported content and any note you add are sent to Anthropic’s AI for that check. Reports about child sexual abuse or exploitation, reports of false or defamatory claims, and reports about the AI’s own summaries and answers are never sent to AI; a person reviews them.

If we find apparent child sexual exploitation, we report it to the National Center for Missing & Exploited Children (NCMEC) as federal law requires, and we keep the reported content and related information for one year after our report, and longer only to help prevent child sexual exploitation or when law enforcement asks. While a report on content is open, or if our safety review has hidden it, that content (and any case or circle that holds it) can’t be deleted. If you delete your account, anything of yours that has been reported or that our safety review has hidden is kept, not deleted, and stays hidden if our review has hidden it. We don’t yet automatically delete closed reports and kept content after a set period. Only the person who reviews safety reports can see this content.

Deleting your account

You can permanently delete your account from the app at any time (Account → Delete account). This closes your login for good, removes your name and photo, stops notifications to your phone, and replaces your email address with a placeholder. Sources, comments and questions you added, and your circle opinions, stay in place, since they’re part of that circle’s shared record, but they show as posted by “Former member,” and your name is replaced wherever the AI’s saved quotes showed it. Anything of yours that has been reported or hidden by our safety review is kept as described in ‘Safety, reports and blocking.’ We keep purchase records as described in “Purchases”. Text already sent to Anthropic can’t be recalled; Anthropic normally deletes it within 30 days. If you’re the only owner of a circle, you’ll need to transfer ownership or delete that circle first.

Purchases

If you buy an Exhibit Tea Circle subscription, Apple processes the payment. We never see your card or Apple payment details. We use RevenueCat to confirm your subscription with Apple and keep it in sync with your account. RevenueCat receives your Exhibit Tea account ID (a random identifier, not your email address) and your purchase details, such as the product, price, dates and renewal status. We keep a record of your subscription (which plan, which circle it covers, and its dates and status) so we can give that circle the right allowance and meet our tax and accounting duties. We keep purchase records for 7 years after the subscription ends, including if you delete your account. After you delete your account, we keep only the purchase record itself and not your posts or profile. Deleting your Exhibit Tea account does not cancel an Apple subscription; to cancel, use your Apple ID settings.

Our join page

Our join page. If you join the waitlist on exhibittea.com/get, we store your email address, the case you name (if you choose to), and which link brought you there. We use these only to tell you when Exhibit Tea is available and to understand which links work. We won’t sell your email or add you to other marketing lists, and every email we send has a way to unsubscribe. Please name only a public case in the optional box, and don’t include private details about yourself or anyone else. Our join page also counts page visits and App Store button clicks by link source. We don’t store IP addresses or device details for these counts, and we don’t set cookies; our web host, Vercel, handles your IP address only to deliver the page. We delete your waitlist entry 90 days after we send the launch email, or after 12 months if we never send one, or sooner if you ask us at exhibittea@gmail.com. We keep the individual visit and click records for 13 months, then keep only totals that can’t be linked to anyone.

Who we share data with

We use Supabase to host our database and handle sign-in; Resend to send sign-in, account-confirmation and password-reset emails, which means it receives your email address and the content of those emails; RevenueCat to confirm and manage subscriptions, which means it receives your account ID and purchase details; Anthropic to power the AI features described above; Vercel to host this website; Expo (through Apple’s and Google’s push services) to send notifications, which can include a source’s title; and the YouTube, X, TikTok, Spotify and Apple services named above to fetch link previews. We don’t sell your information to anyone, and we don’t use it for advertising or tracking.

How long we keep data

• Account information: while your account is open (see “Deleting your account”).
• Circle content (sources, comments, questions, circle opinions and AI summaries): until its author, a circle owner or admin deletes it, or the circle is deleted. If you delete your account, your content stays in the circle as “Former member” (see “Deleting your account”).
• Link-preview details: up to 30 days.
• Records of your AI-notice agreements and withdrawals, blocks, and reports you filed: kept while your account is open, and after you delete your account, so we can show what was agreed and handle safety issues. After deletion they are linked only to an internal ID, not to your name or email address. We don’t yet delete these records on a fixed schedule; if we set one, we’ll update this policy.
• Safety reports: see “Safety, reports and blocking.”
• Server logs: generally 30 days or less.
• Purchase records: 7 years after the subscription ends, even if you delete your account.
• Waitlist and join-page records: waitlist entries are deleted 90 days after the launch email (or 12 months if none is sent); individual visit and click records are kept 13 months, then only totals.
• Text sent to Anthropic: Anthropic normally deletes it within 30 days, and may keep content its safety systems flag for up to 2 years, or longer where the law requires.

Same protection: the service providers we use (Supabase, Resend, RevenueCat, Anthropic, Vercel and Expo) process your information only to provide their services to us, under contracts that require them to protect it.

Age

Exhibit Tea is for people 18 and older. On iPhone, where the law requires it, we ask Apple to confirm through its Declared Age Range feature that you are 18 or older. We receive only an age range, and we don’t keep it. If we learn someone under 18 has an account, we close it. We do not knowingly collect information from children under 13.

Questions

Exhibit Tea is operated by Mulvey Labs LLC, a Missouri limited liability company. For questions about this policy or your data, email exhibittea@gmail.com. We don’t sell or share your information for advertising.

Your requests. You can ask us for a copy of your information, or to correct or delete it, by emailing exhibittea@gmail.com from the email address on your Exhibit Tea account. If you write from a different address, we’ll ask you to confirm from your account email before we act. We’ll respond within 30 days. You can also change your name and photo, withdraw AI consent, and delete your account yourself in the app. We may keep some information when we must for safety or legal reasons, such as content connected to a safety report or information the law requires us to preserve. If we can’t complete part of a request, we’ll tell you so where the law allows. We won’t treat you differently for making a request. If you’re named in content on Exhibit Tea and aren’t a member, you can ask us to review or remove it at the same address.

If we make a material change to this policy, we’ll tell you in the app or by email before it takes effect, and if the change affects what we send to AI services, we’ll ask you to agree again.