Privacy Policy

We believe event discovery should feel helpful, not creepy. Here's how we protect your data and use it responsibly.

What We Collect and Why

We collect only the data that helps us provide a better experience for you and your community. Here’s what we gather and why:

Account Info (email, password, or a linked Google/Apple account): For secure login and important communications about your account and events. You can sign in with a password or with your Google or Apple account.
Phone number (optional): If you add and verify a phone number, we use it to send the text-message notifications you opt into. You can remove it anytime in Settings.
Profile Info (name, handle, photo): So your friends can find and connect with you, and you can build meaningful relationships.
Location (optional, precise or city-level): If you turn on location features, we use your device's precise GPS location to find nearby places and events. A live session location is held in a temporary, secure cookie and is not saved to your profile unless you choose to set a home location. You can clear it anytime in Settings.
Event interactions: RSVPs, invites, and clicks help us suggest relevant events you'll actually want to attend.
Usage and analytics: We record basic events about how people use Joinue and our website, such as pages visited, buttons clicked, and the steps of signing up. We use this first-party data to understand what works and improve the product. Some of it is collected before you create an account and is not linked to your identity. We do not sell it, share it with advertisers, or use it to track you across other sites.
Connections (your Orbit): Who you connect with helps us surface events from people you know and suggest who to invite.
Messages and content you create: Direct and group messages, plus photos and other content you post, so you can coordinate events with others.
Payment information: If you make a payment (for example, a donation), our payment processor handles your card details. We never see or store your full card number. If you add a peer-payment handle (like Venmo or Cash App) to settle costs with friends, we store that handle so it can be shown to people you choose to share it with.
Technical and device data: We process your IP address and basic device information to keep accounts secure, prevent abuse, and rate-limit requests.
Business engagement (for business accounts): Helps Joinue match events to the right local audiences and support local businesses.
Device tokens (mobile app): To send push notifications about events, messages, invitations, and updates you've opted into.

Cookies and Local Storage

Joinue uses cookies and similar local storage only to make the app work. We do not use advertising cookies or third-party tracking cookies, so there is nothing here to opt into or out of.

Sign-in and session cookies: Keep you logged in securely and remember your session between visits.
Preference cookies: Remember choices like your theme so the app behaves the way you left it.
Demo cookies: Hold temporary state if you explore the demo, and are cleared when you leave it.

You can clear these at any time through your browser settings. Because they are essential to running Joinue, clearing them will sign you out and reset your preferences.

What We Don't Do

Sell your personal data
Let advertisers track you
Share data with third parties for profit

What We Do

Suggest events based on what's near you, what you attend, and who you know
Let users and businesses reach interested people only inside Joinue

How We Use Your Data (Responsibly)

To show you events that match your interests, location, or social circles: We analyze your preferences and connections to surface events you'll actually want to attend.
To surface local businesses, venues, or recurring events you may like: We help you discover great local spots and regular events in your area.
To help business accounts reach relevant, nearby users (no outside ad networks): Businesses can promote events to interested local users, but only within Joinue.

You Can Control Your Data

Your Settings put you in control. From there you can:

Set or clear your home location and control location-based suggestions
Hide your online status from others
Choose which notifications you receive, by category and channel
Export your data or delete your account at any time

Text Messaging (SMS)

If you opt into text-message notifications, we use your mobile number only to send the notifications you asked for. We do not sell your mobile number, and we do not share your mobile number or your SMS opt-in and consent with any third parties or affiliates for their own marketing or promotional purposes. The only third party that receives your number is our SMS delivery provider (Twilio), and only to transmit the messages you opted into.

You can opt out anytime by replying STOP to any message, or by turning off the “Also text me” toggles in Settings. For details, see our SMS Messaging Policy.

Your Data Rights

Depending on where you live, you may have specific rights regarding your personal data. We honor these rights for all users, regardless of location.

Right to Access: You can request a copy of the personal data we hold about you.
Right to Deletion: You can request that we delete your personal data. We will comply unless we have a legal obligation to retain it.
Right to Correction: You can update or correct inaccurate personal data through your account settings or by contacting us.
Right to Data Portability: You can request your data in a commonly used, machine-readable format to transfer to another service.
Right to Opt Out: We do not sell your personal data. If this ever changes, you will have the right to opt out.

To exercise any of these rights: You can export your data and delete your account yourself anytime in Settings. For anything else, email us at privacy@joinue.com with your request. We will respond within 30 days. We will not discriminate against you for exercising these rights.

How Long We Keep Your Data

Account Data: Retained while your account is active. Removed promptly when you delete your account from Settings, except as required by law.
Event Data: Public events remain visible. Your RSVPs and attendance history are deleted with your account.
Messages: Messages you've sent stay visible to other participants in a conversation, shown as from a deleted user once you leave. May be retained longer if part of an active report or investigation.
Backups: Encrypted backups are retained for a limited period for disaster recovery, then permanently deleted. Deleted data may persist in a backup until that backup rotates out.
Consent records: A limited record that you accepted our Terms and opted into texts (the date, the version you agreed to, and the number you consented to) is kept even after you delete your account, so we can honor those choices and, if ever needed, show they were made. It is not used for anything else.

How We Protect Your Data

All data transmitted using TLS/SSL encryption
Passwords hashed using industry-standard algorithms
Regular security assessments and monitoring
Access controls limiting employee access to personal data

Where Your Data Is Stored

Joinue is operated from the United States, and your data is stored and processed on infrastructure located in the United States. If you use Joinue from another country, you understand that your data is transferred to and handled here.

We rely on a small set of trusted service providers to run the app. They process your data only to provide their service to us, never for their own purposes:

Hosting and database (Supabase, Vercel): Stores your account, profile, events, and messages securely, and runs the app.
Email delivery (Resend): Sends account, verification, and event emails you have opted into.
SMS delivery (Twilio): Sends the text-message notifications you opt into, to your verified phone number.
Push notifications (Google Firebase Cloud Messaging, Apple Push Notification service): Delivers app notifications to your device. On iOS the notification is relayed through Apple's Push Notification service to reach your phone. A notification can include a short preview, such as a sender's name or message snippet.
Sign-in providers (Google, Apple): If you choose to sign in with Google or Apple instead of a password, that provider verifies your identity and tells us the basic account details you approve (such as your email). We do not post anything to those accounts.
Weather forecasts (Open-Meteo): Powers the weather shown on a trip itinerary and outdoor plans. To return a forecast, the coordinates of a place on your plan, or a place name you search, are sent to Open-Meteo. It receives no account details and does not identify you.
Maps and location (Mapbox): Powers place search, event maps, and the small map previews shown with a shared location. Place search and those location previews are routed through our servers, so your device's location and IP are not sent directly to Mapbox. Interactive maps you can pan and zoom load their map tiles from Mapbox in your browser, so Mapbox sees your IP address, the same as any website that shows a live map, but not your account or your precise location.
GIF search (Giphy): Powers the optional GIF picker in chat. When you search for or view GIFs, the request is made from your device to Giphy, so Giphy receives your search terms and your IP address to return and show the results. If you never open the GIF picker, nothing is sent to Giphy.
Product analytics (Vercel Analytics and Speed Insights): Measures aggregate, privacy-friendly usage and performance, like page views and load times, with no advertising cookies and no tracking of you across other sites. It helps us see what works and keep the app fast.
Payments (Stripe): Securely processes payments such as donations. Stripe handles your card details directly; we never receive your full card number.
Content moderation (OpenAI): Helps keep the community safe. When you post in a shared conversation tied to an event, space, or trip, or when you message a performer or venue page, the text and any image attachments are sent to OpenAI's moderation service to be screened for harmful content. Your private direct messages and group chats are not sent for automated screening. OpenAI processes this only to return a safety classification, does not use it to train its models, and receives nothing else from your account.
Error monitoring (Sentry): Helps us find and fix crashes and errors. When something goes wrong, technical diagnostic data is sent to Sentry. We mask text and media in any session recordings, and do not send it your messages or account details.
Bot protection (hCaptcha): Protects our sign-in, sign-up, and account-security forms from automated abuse. When you complete one of those forms, hCaptcha (operated by Intuition Machines) receives your IP address and interaction signals from that page to tell a real person from a bot. It is used only to verify the request, not to build an advertising profile of you.

Keeping Joinue Safe

We work to keep Joinue free of harmful and abusive content. This involves both automated screening and human review.

Messages you send in shared conversations (events, spaces, trips, and pages) are automatically screened for harmful content when sent, using the moderation service noted above. Private direct messages and group chats are not sent to that automated screening service, though we may check any content against known-illegal-material databases as the law requires, and you can still report them.
You can report a person, a message, or an event, and you can block anyone, from the menus throughout the app.
Reports go to our safety team for review. We may remove content, warn, or remove accounts that break our rules.
Content tied to an active report or investigation may be retained longer so we can act on it.

To report something or reach our safety team, use the in-app report and block tools or email legal@joinue.com.

Children's Privacy

Joinue is not for children. You must be at least 16 years old to use Joinue, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us at privacy@joinue.com and we will delete it.

Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we commit to:

Notifying affected users without undue delay, and within the timeframes required by law
Clearly explaining what data was affected
Describing what steps we're taking to address the breach
Providing guidance on how you can protect yourself
Notifying relevant authorities as required by law

No Exploitation, Just Utility

We believe event discovery should feel helpful, not creepy. That’s why Joinue only uses your data inside the platform, never for outside ad targeting or data brokering.

Questions About Privacy?

We’re committed to transparency. If you have questions about how we handle your data, we’re here to help.

Contact our privacy team at privacy@joinue.com

Last updated: July 23, 2026