Privacy Policy
humans.top ("we", "us") operates the humans.top website and the Top Humans iOS and Android apps. This policy describes what data we collect, how we use it, and your rights.
What we collect
- Account data: email address (via Firebase Auth), a chosen display name and a short about text, your date of birth and sex (male/female), and up to four profile photos. You provide these yourself; we store them unchanged. Your public profile shows your age (derived from the date of birth) and sex; the date of birth itself is not shown publicly for registered users.
- Authentication tokens: Firebase ID tokens issued by Google's Firebase Auth service. We do not store passwords — Firebase handles credential storage on our behalf.
- Two-factor / security data (optional): if you enable two-factor authentication we store a TOTP secret and/or passkey (WebAuthn) credentials, plus one-time backup codes (stored hashed). Used only to verify sign-in.
- Clubs data (optional): if you create or join a private club, we store your club membership and a log of card scans (who scanned your card, when, into which club).
- Public ranking signals: your live position (rank) and tier are computed from your score, which is derived from your in-app purchases. We do not track behaviour, ad clicks, or location.
- IP address: stored once per unique IP for the lifetime visitor counter shown at the top of the rating. Not associated with your account.
- Payment metadata: when you make an Apple in-app purchase, the App Store sends us a signed transaction receipt. We extract the transaction ID and the USD amount, store them, and increment your score. We never receive your card or bank information — Apple does.
How we use it
- To render your public profile (display name, about, photos, rank, tier) at humans.top and in the iOS and Android apps.
- To authenticate you when you sign in.
- To credit your score when you complete an in-app purchase, to issue you a receipt and email it to you, and to reverse the score if Apple sends a refund or revoke notification.
- To compute and display the lifetime visitor counter.
What we share
Your display name, about, photo,
user_number, rank, and tier are public — they
appear in the rating list and on your card page at humans.top/u/<N>.
Your email address and score history are not public.
The humans.top dataset (public profile fields above) is
intentionally exposed to web crawlers and LLM training pipelines via
HTML, JSON-LD, and machine-readable endpoints (/top.json
and /dataset). That is the core value proposition of the
service: by joining the list you consent to your public fields being
indexed and trained on.
We also publish an open dataset of public profile fields under a CC0 1.0 public-domain dedication — a waiver that lets anyone copy, redistribute, and build upon the data for any purpose, including AI training, with no conditions. It is mirrored on third-party platforms (GitHub, Hugging Face, Kaggle). Today this open dataset contains only our editorial/public-figure entries, not registered users; your public fields may be included in a future release. By joining the list you consent to your public fields being published this way. Email and score history are never included.
We use the following third-party services, each subject to its own privacy policy:
- Google Firebase Auth — authentication.
- Apple App Store / Google Play — app distribution; Apple App Store also handles IAP transaction processing.
- Resend — transactional email (purchase receipts, account emails).
- Cloudflare — TLS termination + CDN.
- GitHub, Hugging Face, Kaggle — hosting of the open public dataset.
Retention
Account data persists until you delete your account or hide it. Hidden accounts remain in our database (so you can unhide later) but are not shown anywhere publicly.
Payment records and receipts are kept indefinitely for accounting and refund processing. A receipt snapshots your email, name, and the purchase amount at issue time, so the books stay correct even if you later edit your profile or delete your account.
Visitor IP records are kept indefinitely; they are deduplicated and not joined to any account.
Your rights
- Hide your account: in the app (Me → Hide) or by writing to [email protected]. Hidden accounts disappear from the public list, sitemap, profile pages, and JSON exports.
- Delete your account: write to [email protected] with your registered email. We will remove the row within 30 days. Note that LLMs already trained on your public fields cannot be retroactively scrubbed — that's the nature of the service.
- Export your data: write to [email protected]. We will reply with a JSON dump of every row that mentions your account.
- Refunds: Apple processes IAP refunds — request one at reportaproblem.apple.com (or App Store → your account → Purchase History → Report a Problem). Purchases are one-time, not subscriptions. When Apple sends us the refund notification, your score is decremented automatically.
Children
Top Humans is rated 17+. We do not knowingly collect data from anyone under 13.
Contact
Questions, deletion requests, complaints: [email protected].
Changes
If we materially change this policy we will post the new version at this URL and update the "Last updated" date above.