Privacy policy

• Account: your email address and the first name you choose. We use your email only to sign you in and to contact you about your account.
• Plans and activity: plans you host (title, category, city, area, venue, time, cost, group size, description, notes, cover photo), and plans you join or ask to join.
• Notifications: if you allow notifications in the phone app, a device token that lets us send you updates about your plans. It is deleted when you sign out or delete your account.
• Feedback: anything you send through the feedback form, and the contact detail you add if you want a reply.
• Safety and abuse prevention: times of actions such as joining plans and uploading photos, used to stop spam.
• Technical data: like any website, our hosting providers process your IP address, device and browser type in short-lived server logs to run and secure the service.

We do not collect your phone number, contacts, exact location, date of birth or payment details, and we don't use advertising or tracking cookies.

• To create your account and sign you in.
• To show plans, let you host and join them, and let hosts manage who comes.
• To keep people safe: preventing spam and abuse and acting on reports.
• To meet legal obligations.

We process your data on the basis of your consent, which you give when you sign up, and for these specific purposes only. You can withdraw consent by deleting your account.

• Anyone: plans (what, where, when, cost, group size, how many are in) and the host's first name.
• People on the same plan, and its host: who else is going, by first name.
• The host: the first names of people asking to join their plan.
• Nobody else: your email address is never shown to other users.

We use a small number of trusted providers to run the service. They process data only on our instructions:

• Supabase: database, sign-in, email delivery and photo storage. Our data is stored in Mumbai, India.
• Vercel: website hosting and privacy-friendly visitor statistics (page views and rough device type, no cookies, no tracking across sites). Our servers run in Mumbai, India.
• Google Firebase: delivers notifications to the phone apps. It receives your device token and the notification text.
• Unsplash: some default photos load from Unsplash, which receives your IP address when they load.

We store your sign-in session on your device so you stay signed in. It is removed when you sign out. We use no advertising or analytics cookies.

We keep your account data while your account exists. When you delete your account, we delete your profile, plans, memberships and photos, except where the law requires us to keep something for longer. Abuse-prevention records are kept only as long as needed for that purpose.

Under India's Digital Personal Data Protection Act, 2023, you can:

• ask what personal data we hold about you and how we use it;
• ask us to correct or update it;
• ask us to delete it, and withdraw your consent;
• raise a grievance with us, and if unresolved, with the Data Protection Board of India;
• nominate someone to exercise these rights if you are unable to.

You can delete your account yourself in My lineup, or make any request through the contact page.

We protect data with access rules on every database table, encrypted connections, limits against abuse, and regular security checks. No system is perfectly secure. If a breach affects you, we will tell you and the authorities as the law requires.

The service is only for people 18 and over. If we learn that an account belongs to someone under 18, we delete it.

We may update this policy. If changes are significant, we will tell you in the app before they take effect.