Sayless
Privacy Policy
Effective October 6, 2026
Sayless is an operating system for college clubs. It gives students one place to find clubs, keep track of tasks and events, chat with the groups they belong to, and see their week. This policy explains what we collect, why we collect it, and the control you have over it. Sayless is an independent product and is not affiliated with, endorsed by, or operated by any university or school.
Information we collect
We only collect what the app needs to work.
- Your account. Your school email address, the display name you choose, and an optional profile photo. We confirm it is a student email so clubs stay to real campus members.
- Sign in. Sayless has no passwords. We send a short code to your email each time you sign in, so we process your email for that purpose.
- Club activity. The clubs you join, your role in them, teams you are on, tasks assigned to you, events you RSVP to, check ins and attendance, announcements, and messages you send in club and direct chats.
- Media you upload. Your profile photo, and, if you help run a club, the photos and files that appear on that club’s page.
- Your schedule. Classes you add yourself, plus the club events, meetings, and deadlines that appear on your schedule.
- Your preferences. Your settings, including whether you want to receive email notifications from Sayless.
- Device basics. Simple technical information such as your device type and app version, used to serve the app and keep your account secure. Sayless does not run analytics, does not record your screen, and does not use crash or tracking tools.
How we use your information
- To run the core features: your clubs, tasks, chat, events, and schedule.
- To keep you signed in across visits and keep your account secure.
- To send the email notifications you have turned on, and to honor it when you turn them off.
- To keep the community safe and enforce our rules, including acting on reports.
- To meet legal duties and respond to valid requests from authorities.
How information is shared
We do not sell your personal information, and we never have. Sayless shows no ads, so your information is never used to target you or handed to advertisers.
- With clubs you join. When you join or request to join a club, that club’s leaders can see your membership, your role, and your activity in the club. Other members see what the club setup makes visible, such as who is in a shared chat.
- With Amazon Web Services. Sayless runs on AWS. Your account and sign in codes live in Amazon Cognito, your clubs, tasks, events, and schedule in Aurora PostgreSQL, your chat messages in DynamoDB, and your uploaded photos and files in private S3 storage. Nothing in that storage is public: when the app needs to show a photo or file, it hands you a short lived signed link that expires on its own. AWS holds this data only to run Sayless for us.
- For legal and safety reasons. We may share information if the law requires it or to protect people from harm.
Email notifications
Sayless sends email so you do not miss what your clubs need from you. You may get an email when a club posts an announcement, when a task is assigned to you, when your membership or a team you are on changes, and about events you are part of. You can turn email notifications on or off at any time in Settings, and we will honor that choice. Email we send to run the product, such as your sign in code, is not something you can opt out of while you keep your account.
Your choices and rights
- Get a copy of your data. From the account screen in the app, tap "Get a copy of my data" and we will email you a copy of the information tied to your account. This covers your profile, schedule, club memberships, messages, uploaded media, and notification settings.
- Delete your account. You can delete your account at any time from the app. This removes your profile, schedule, club memberships, messages, uploaded media, and notification settings. Some content you posted in shared spaces may remain in a de identified form, and we may keep limited records where the law requires it.
- Privacy defaults. Your schedule and club membership are personal. Sayless defaults to the most private setting and makes any sharing an explicit choice.
How we protect your information
Your information is encrypted while it travels and while it is stored. Sayless keeps you signed in across visits without ever leaving a token lying around. On mobile, sign in tokens are kept in the device secure store. On the web, the access token lives only in memory for the current session and the token used to refresh it is held in a secure cookie your browser will not expose to page scripts; we never put either one in browser storage. Uploaded photos and files sit in private storage and are reachable only through short lived signed links. Access inside Sayless follows least privilege, and only the people and systems that need data to run a feature can reach it.
Data retention
We keep your information for as long as your account is active and for a short period afterward, or longer where the law requires it. When you delete your account, we remove your personal information within a reasonable time.
Students and young members
Sayless is built for college students. It is not directed to children under 13, and we do not knowingly collect their information. If you believe a child under 13 has given us information, please contact us and we will remove it.
Changes to this policy
If we make a meaningful change, we will update the effective date above and, when the change is significant, let you know in the app.
Contact us
Questions about your privacy or this policy? Reach us at privacy@sayless.now.
Sayless is an independent product and is not affiliated with any university or school.