Add a Refetch privacy policy page

[lohanidamodar]

The footer's Privacy link points at appwrite.io/privacy, which describes Appwrite's services rather than what Refetch itself collects. Both app stores require a policy covering this product — and the Flutter app's ios/fastlane/metadata/en-US/privacy_url.txt already points at https://refetch.io/privacy, which currently 404s. This adds the page and repoints the footer link.

Contents

Written from what the code actually does, not from a template:

Claim	Source
Name, email, hashed password	account.create(...) in the sign-up flow
Posts, comments and votes keyed to an account	userId on the posts/comments/votes tables
Push tokens, only when notifications are on	the Flutter app's push registrar
Cookie-free, non-personal analytics	Plausible, loaded in app/layout.tsx
Data held in the EU	Appwrite Cloud fra. (Frankfurt) and Plausible
Content is not used to train models	OpenAI is used on linked articles in the scout/enhancement functions, never on user data

I initially wrote "you can edit or delete your submissions and comments" and then checked — there is no edit path anywhere in the app, only owner-side delete. The page now says delete only.

Layout

/privacy is added to the isFullWidth list in app/(main)/layout.tsx, so it renders as a centred document with no sidebars and the footer beneath it — the same treatment as /submit and /signin. The repo has no @tailwindcss/typography, so the small PolicySection / PolicyList helpers carry the styling instead of prose classes.

Verification

tsc --noEmit is clean for app/ and components/ (the pre-existing errors under tanstack/ are untouched). The page was rendered against pnpm dev: HTTP 200, correct <title>, all sections present, footer link resolving to /privacy, and no errors in the dev log.

Two things to decide before merging

• privacy@refetch.io must exist, or the contact route is broken. Change it if that mailbox isn't real — the page also offers GitHub issues as an alternative.
• This has not been reviewed by a lawyer. It is an accurate description of current behaviour, which is what the stores ask for, but GDPR/CCPA specifics — a named data controller, a legal-basis table, a stated retention period — are not in it. Worth a look before you rely on it for the App Store submission.

Terms still points at appwrite.io/terms, which has the same mismatch. Out of scope here; happy to do it as a follow-up.

[appwrite]

Refetch

Project ID: 63ef1792594ff4f50de2

Sites (1)

Site	Status	Logs	Preview	QR
App 688e6ad00039239f1ecc	Ready	View Logs	Preview URL

Functions (4)

Function	ID	Status	Logs
Readme	68a18eba0012c97a0017	Ready	View Logs
Algorithm	689b8b5f00075917c520	Ready	View Logs
Scout	689bd7b6002c5d783925	Ready	View Logs
Enhancement	6897c57600169dfb0b92	Ready	View Logs

Tip

Each function runs in its own isolated container with custom environment variables