Legal
Privacy Policy
Last updated April 18, 2026
The short version
We collect the email you sign up with and the information you enter to look someone up. We use it to run that lookup, deliver your report, and manage your account — nothing else. We don't sell your data, we don't share what you submit with advertisers, and we don't notify the person you're searching. The full detail is below.
Information we collect
From you directly
- Your account email. Used to sign you in, send your reports, and contact you about your account.
- Lookup details.The information you enter about the person you're checking — name, location, birthday or age, and any optional identifiers (their email, phone, or social profile URL) you choose to add.
- Delivery preferences. If you want a report sent to a different email than your account address, we save that preference per report.
Automatically
- Basic technical data. IP address, browser type, device, and timestamps — used for security, fraud prevention, and improving the service.
- Usage events.Which pages you view and which actions you take in the app, so we can fix broken flows and design better ones. We don't sell or share these events.
How we use your information
- To run candidate searches and generate the report you asked for.
- To deliver finished reports to your inbox.
- To manage your account and subscription state.
- To send transactional messages (account verification, finished reports, important service notices). We don't send marketing email to your account address without your opt-in.
- To prevent abuse — for example, detecting attempts to run reports on minors or to use the service for prohibited purposes.
- To debug and improve the product.
Third parties we share data with
We use a small set of service providers to run the service, drawn from the categories below. We share only the minimum data each one needs to do its job, and we have written agreements that restrict how they may use it.
- Identity verification databases. Receive the lookup details you enter (name, location, optional identifiers) to run candidate searches and identity enrichment.
- Government registry providers. Receive the subject's name, state, and (when provided) date of birth to query U.S. sex-offender registries and other public records.
- Authentication provider. Handles account authentication and verification. Receives your account email and the minimum session/device data needed to keep sign-in secure.
- Email delivery provider. Sends transactional email — finished reports and service notices. Receives the recipient address and the message contents.
- Cloud infrastructure provider. Hosts the database and runs the application. Data is stored in US-based data centers.
A current list of named service providers is available on request to privacy@theteareport.com.
We do not sell your personal information, and we do not share it with advertising networks or data brokers.
How long we keep things
- Account data.Kept for as long as your account is active. If you delete your account, we remove your profile and lookup history within 30 days, except where we're required to retain records (for example, billing records for tax purposes).
- Generated reports. Kept in your account so you can re-open them. You can delete any individual report from the report page. Deleted reports are removed from our systems within 30 days.
- Logs and technical data. Kept for up to 90 days for security and debugging.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, email privacy@theteareport.com. We'll respond within 30 days.
You can also delete your account at any time from the account page, and you can unsubscribe from any non-essential email using the link at the bottom of the message.
Security
We use industry-standard practices to protect your data — encrypted connections (TLS), encrypted storage at rest, scoped access for our team, and regular review of vendor security posture. No system is perfectly secure, but we treat your data the way we'd want our own treated.
Children
The Tea Report is for adults. We don't knowingly collect data from anyone under 18, and we block lookups on subjects under 18. If you believe a minor has created an account, contact us and we'll delete it.
Changes to this policy
When we update this policy we'll change the "last updated" date at the top and, for material changes, notify you in-app or by email before the change takes effect.
Contact
Questions, requests, or concerns? Email privacy@theteareport.com.