How AUTISTIK Hub handles your data

Last updated 22 October 2026

AUTISTIK Hub (autistik.io) is a community site for autistic adults and holders of the $AUTISTIK token. It is run by the AUTISTIK team ("we", "us"). This page explains what information we collect, why, who it is shared with, how long we keep it, and how you can see or delete it. Questions: email team@autistik.io.

1. What we collect

When you create an account

Email address and, if you sign up with email, a password. Your password is stored only as a secure hash by our login provider; we never see it.
If you sign in with Google or Apple: we receive your email address, your name and your profile picture link from that account. We do not receive your Google or Apple password, contacts, files, calendar or anything else.
Your Hub profile: the nickname (@handle) you choose, a colour, and your confirmation that you are 18 or older.
2-step verification: if you turn it on, the secret that links your authenticator app to your account, kept by our login provider.

When you use the Hub

Things you post: posts, replies, hearts, follows, session sign-ups, reports you send, and groups you join.
Wallets: public wallet addresses you link or create, and token pins and alerts you set up. If you create a wallet in the Hub, it is made by our wallet provider (Privy); we never see or store your private key or secret phrase.
Payments: if you buy a Pro or Assistant Pass with crypto, the transaction hash and the wallet it came from.
Forms: if you register interest in the AUTISTIK Fund or apply as a practitioner, the details you type in (such as name, email, country and, if you give it, phone number).
Notifications: if you allow push notifications, the technical address your browser gives us to deliver them.
Assistant (Believer and Purity): how many messages you send each day, so we can apply the daily limit. The content of your chats is not stored on our servers.

Automatically

Visit counts: the page you opened, a random browser id stored in a cookie, a one-way scrambled version of your IP address (the IP itself is never stored), your country, the kind of device (phone, tablet or computer) and the site that linked you here. Login and account pages are never counted.
Security logs: our hosting and login providers keep short-lived technical logs (such as IP address and browser type) to block abuse and attacks.

What stays on your device

Your battery check-ins and some display settings are kept in your own browser and are never sent to us.

What we never collect

We do not ask for, or store, medical records, diagnoses, your real name on your public profile, wallet secret phrases or private keys, or card details.

2. How we use it

To create your account, sign you in and keep it secure (including email codes and 2-step verification).
To run the features you use: posting, following, sessions, wallets, token tools, alerts and the assistant.
To send you emails you need, such as sign-up codes and password resets, and notifications you turned on.
To give Pro and Assistant Pass holders their benefits, and to send airdrops to linked wallets.
To keep the community safe: review reports, stop spam, enforce the community guidelines and the 18+ rule.
To understand, in total, how many people visit and which pages are useful.

Google and Apple sign-in data (your email, name and picture) is used only to create and sign in to your AUTISTIK Hub account. Your email is used to contact you about your account. It is never shown to other members, never sold, never used for advertising, and never shared except with the service providers listed below that run the Hub for us.

We do not sell your data. We do not show ads. We do not use your data to train AI models.

3. Who can see it

Other members see your nickname, colour, and what you post publicly. They never see your email address or real name.
Admins can see account details, linked wallets, reports and form entries when needed to run the Hub, send airdrops or keep it safe. Admin access is protected with 2-step verification.
Anything on a blockchain (such as wallet addresses and transactions) is public by nature, and we can't change or delete it.

4. Service providers we share data with

We only share what each provider needs to do its job for us:

Supabase: our database and login system (accounts, posts, settings).
Vercel: hosts the website and gives us your approximate country.
Google and Apple: only if you choose to sign in with them.
Privy: creates and secures in-Hub wallets.
Anthropic: powers the Believer and Purity assistant; your messages are sent to it to get a reply.
Cloudflare Turnstile: checks forms are filled in by people, not bots.
Email delivery: sends sign-up codes and account emails.
Blockchain data services (such as public RPC nodes, DexScreener, Moralis and Etherscan): look up public token and wallet information. They receive wallet addresses, not your account details.

We may also share information if the law requires it, or to protect members from harm or fraud.

5. Cookies

We use a small number of cookies: ones that keep you signed in, and one random id ("hv") to count visits. We do not use advertising or cross-site tracking cookies.

6. How long we keep it

Account data and posts: until you delete your account or ask us to.
Visit counts: deleted automatically after 180 days.
Fund interest and practitioner applications: until the purpose is finished or you ask us to delete them.
Security logs at our providers: usually a few days to a few weeks.

7. Your choices and rights

See or copy the data we hold about you.
Correct anything that is wrong.
Delete your account and the data linked to it.
Turn off push notifications, alerts and 2-step verification at any time in the Hub.
Disconnect Google: you can remove AUTISTIK Hub's access at myaccount.google.com/connections.

To do any of these, email team@autistik.io from the email address on your account. We reply within 30 days. Depending on where you live (for example the UK, EU or California) you may have further rights, including complaining to your local data protection authority.

8. Security

Data is encrypted in transit (HTTPS) and at rest by our providers. Database rules let each member reach only their own private data, and optional 2-step verification protects accounts. No system is perfectly secure, so please use a strong password and turn on 2-step verification in Account security.

9. Adults only

AUTISTIK Hub is for people aged 18 and over. We don't knowingly collect data from anyone younger. If you think a child has signed up, email team@autistik.io and we'll remove the account.

10. Changes and contact

If we change this policy we'll update the date at the top, and tell members on the Hub about important changes. Questions or requests: email team@autistik.io or ask in our Telegram.