Privacy Policy

Joinue is operated by Joinue LLC, an Arizona limited liability company (“Joinue,” “we,” “us”). We are the company responsible for the personal data described in this policy, and we can be reached at privacy@joinue.com or by mail at Joinue LLC, PO Box 40441, Tucson, AZ 85717, United States.

Joinue is built and operated in the United States, and every service provider that handles your data for us is described below. We offer the app in the United States, Canada, Mexico, and a number of countries in Central America, South America, and the Caribbean. Wherever you use it from, your data is stored and processed in the United States. We don’t offer the service in the European Economic Area, the United Kingdom, Switzerland, Australia, or Brazil, and we don’t target it to people there.

Joinue LLC is responsible for the personal data described here, and the person accountable for it is Joinue’s founder and operator, reachable at privacy@joinue.com. If you are in Canada or another country whose law gives you the right to ask, that address is where to write, and we answer in English.

We collect only the data that helps us provide a better experience for you and your community. Here’s what we gather and why:

Account Info (email, password, or a linked Google/Apple account)

For secure login and important communications about your account and events. You can sign in with a password or with your Google or Apple account.

Phone number (optional)

If you add and verify a phone number, we use it to send the text-message notifications you opt into. You can remove it anytime in Settings.

Profile Info (name, handle, photo, and anything else you add)

So your friends can find and connect with you, and you can build meaningful relationships. Alongside your name and photo this covers what you choose to fill in: a tagline, a bio, your interests, links to your other profiles, your city, and your cover art.

Date of birth

We ask for it when you create your account, to check you are at least 18, and, if you leave birthday sharing on, to show your birthday to your connections. Joinue is for adults only. If we find that an account belongs to someone under 18, we close it. Until your date of birth is on file and confirms you are 18 or over, your profile stays visible to your connections only. We never show your birth year or your age to anyone. The only part of your date of birth other people can see is the day and month, and only the people you are connected with. You can correct it once yourself in Settings, under Privacy; after that, contact us at privacy@joinue.com.

Your birthday (the day, not the year)

We show the day and month of your birthday to people you are connected with, on your profile, on their calendar, and as a reminder on their home screen around the date. We show you this choice when you create your account, with sharing already switched on, and you can change it anytime in Settings, under Privacy. It never includes your birth year or your age, and it is never shown to anyone outside your connections, whatever your profile visibility is set to. It is not shown at all until your date of birth confirms you are 18 or over.

Location (optional, precise or city-level)

If you turn on location features, we use your device's precise GPS location to find nearby places and events. A live session location is held in a temporary, secure cookie on your device. If you have not set a home location yet, the first location you allow becomes your home location, so Joinue still knows your area next time; if you already have one, a session location never changes it. You can change your home location anytime in Settings. Your home location is never shown to anyone else. Separately, some features let you deliberately send where you are to people you choose. That is described in its own section below, "Sharing Where You Are".

Event interactions

RSVPs, invites, and clicks help us suggest relevant events you'll actually want to attend. An RSVP can also carry what you add to it: a note to the host, how many people you're bringing, when you checked in, and your answers to any questions the host asks.

Usage and analytics

We record basic events about how people use Joinue and our website, such as pages visited, buttons clicked, and the steps of signing up. We use this first-party data to understand what works and improve the product. Some of it is collected before you create an account and is not linked to your identity. We do not sell it in a form tied to you, share it with advertisers, or use it to track you across other sites.

Answers to a host's questions

A host can ask guests questions when they RSVP, written by the host. If a host asks something like dietary needs or allergies and your answer mentions a medical condition, that is health information, so only answer what you're comfortable sharing. Your answers go to the event's hosts so they can plan, and to nobody else. We don't use them for anything else, and they are deleted with the event or when you ask.

Plans, games, and trips you take part in

What you add while planning with other people: when you're free on an Align plan, your votes in polls, a gift-swap wishlist and who you're giving to, a role in a murder mystery or another party game, and on a trip, the itinerary, travel details like flight and confirmation numbers, where you're staying, documents you upload, and shared costs, receipts, and who owes whom. It is shown to the people in that plan, event, or trip.

Regulars you're in for

If a Space you belong to runs a Regular (a weekly trivia night, say), we keep whether you said you're in or out each week, so the group can see who's coming. You can hide yourself from that list in Settings, under Privacy.

Connections (your Orbit)

Who you connect with helps us surface events from people you know and suggest who to invite.

Messages and content you create

Direct and group messages, plus the photos, video clips, voice messages, posts, comments, events, trips, and saved game scores you make, so you can coordinate and remember things with other people.

Feedback and support requests

If you send feedback or report a problem, we keep what you wrote, any screenshot you attach, and basic details about the app version and device, so we can reproduce the problem and answer you.

Things we work out from how you use Joinue

We compute a small amount of information from your activity rather than collecting it directly. The main one is Gravity, a rough measure of how much you bring people together: it rises when you host events, organize trips, and show up, and it eases off when you go quiet. Your profile shows it as a tier name, and opening that tier shows the score as a number alongside the tier ladder. Anyone who can see your full profile can see both, unless you turn it off in Settings under Privacy, which takes it off your profile for everyone but you. It is not a ranking against other people, and it reads the same whoever is looking. We do not use any of this to guess sensitive things about you, such as your health, beliefs, or who you are attracted to.

Payment information

If you make a payment (for example, a donation), our payment processor handles your card details. We never see or store your full card number. If you add a peer-payment handle (like Venmo or Cash App) to settle costs with friends, we store that handle so it can be shown to people you choose to share it with.

Technical and device data

We process your IP address and basic device information to keep accounts secure, prevent abuse, and rate-limit requests.

Business engagement, claims, and applications

Helps Joinue match events to the right local audiences and support local businesses. If you claim a venue or performer page, apply to contribute listings, or send a performer a booking request, we keep what you submit (your name, contact details, links, and message) so we can review it and answer you.

Job applications

If you email us to apply for a role, we keep what you send (your résumé, links, and message) and use it only to consider you for that role and answer you.

Device tokens (mobile app and browser)

To send push notifications about events, messages, invitations, and updates you've opted into, on your phone or in a browser where you've allowed them.

Some features let you send where you are to people you pick. This is always something you start, it always names who will see it, and it always ends on its own. Joinue has no always-on location sharing, no background tracking, and nothing that follows you when you are not using a feature below.

Lighting a flare

A flare tells the audience you choose (your Orbit, one of your clusters, a crew, a trip, or an event's guests) that you're out and up for company. If you tap to drop a pin, we take one accurate reading from your device at that moment and store it as a short location code, so a friend can walk to where you actually are. It is a single point in time, not a trail. It is visible only to the audience you picked, and it disappears when the flare expires or when you end it.

Sending your location in a chat

You can attach where you are to a message. That location becomes part of the message, so it stays in the conversation and is visible to everyone in it until the message is deleted.

Sharing a live location in a chat

You can share a location that keeps updating, for 15 minutes, 1 hour, or 8 hours. Everyone in that conversation can see where you are for as long as it runs. It stops by itself when the window ends, and you can stop it sooner. Once it stops, the message keeps the last place it showed, like a location you sent, until the message is deleted.

Your device asks your permission before any of these can read your location, and you can withdraw that permission in your device settings at any time. We do not sell your location, we do not hand it to advertisers or data brokers, and we do not use it to build a history of where you have been.

Some things you do on Joinue involve someone else’s details. We keep what we need to do the thing you asked for, and nothing more.

Inviting someone by email or text

If you type in an email address or a phone number to invite someone to an event, a trip, or a Space, we store it so we can send that invitation and so you can see who you've invited. For an event or a trip, if the address or number already belongs to someone on Joinue, we send them the invitation in the app instead, and they appear on the guest list like anyone else you invited. If they create an account later with that same address or number, the invitation is waiting for them there. We use it for that invitation and for reminders about it, and for nothing else. We do not add these people to a mailing list, and we do not use their details to advertise to them.

Tagging someone in a photo

You can tag people in photos, including by email if they're not on Joinue yet. Anyone tagged can have the tag removed, and you control in Settings who is allowed to tag you.

Lists you keep about people

Who you've blocked or muted, people you've added to your Radar so you hear when they light a flare, and anyone you've reported. These are private to you (and, for a report, to our safety team). The person is never told they are on one.

A payment handle you share

If you settle costs on a trip, the handle you added (Venmo, Cash App, or similar) is shown to the people on that trip so they can pay you back.

Joinue never reads your phone’s contacts. There is no address book import anywhere in the app, so the only details of other people we hold are the ones somebody typed in on purpose.

If someone invited you and you would rather we didn’t hold your address, write to privacy@joinue.com and we’ll remove it. You don’t need an account to ask.

Some things work without signing up. You can open an invitation link and RSVP as a guest, join a trip someone shared with you, or start a plan on Align. When you do, we keep what you gave us to make it work: your name, and an email address or phone number if you entered one, so the organizer can reach you and so you can be sent details about that event or trip.

We may also use that address to contact you about Joinue itself, for example to ask how the plan went. Every such message tells you how to stop, and we keep a list of the addresses and numbers that have asked us to, so we honor it. Guest details are kept only for as long as the event, trip, or plan they belong to is around, and you can ask us to delete them sooner at privacy@joinue.com. The rights described below are yours whether or not you have an account.

Joinue lists venues and the performers who play them so people can find something to do. Much of that comes from public sources rather than from the people listed: venue websites and calendars, ticketing sites, and other public listings. For a performer, that can mean a stage name, a photo, a hometown, a short bio, links to their own public pages, booking contact details they publish, and where they are playing next. We don’t gather anything private about the people we list, and we ask search engines not to index performer pages.

If a page is about you, you can claim it and run it yourself, or email privacy@joinue.com and we’ll correct it or take it down. You don’t need a Joinue account to ask.

Joinue uses cookies and similar local storage to make the app work, plus one first-party cookie that notes how you first found us. Every one of them is our own. We do not use advertising cookies or third-party tracking cookies.

Sign-in and session cookies

Keep you logged in securely and remember your session between visits.

Security cookies

Remember a device you've already passed two-step sign-in on, so you aren't asked for a code every time.

Location cookies

Hold the location you allowed for this visit (described above), and the area you're browsing on the map.

Guest cookies

If you RSVP, join a trip or game, or manage an Align plan without an account, let this browser keep acting as you for that one thing.

Preference cookies

Remember choices like your theme, what you told us you came to do, which tips you've already dismissed, and whether this device has signed in before (so the app opens to the right screen), so the app behaves the way you left it.

Local storage

Keeps a few things on your device only: messages and events you started but haven't sent, pages and searches you opened recently, and your accessibility settings.

Demo cookies

Hold temporary state if you explore the demo, and expire when you leave it or close your browser.

Signup source cookie

Before you have an account, notes how you arrived: the site that sent you (such as a search engine), the kind of link you opened, any campaign tags on it, and, when a Joinue member shared the link, a coded tag naming who shared it (no one can read the tag but us). It stays on your device and is never read unless you sign up. When you do, we save it with your new account so we can see which ways people find Joinue, credit the member who invited you, and let them know you joined, then delete the cookie. If you joined from someone's Add me link, you start out connected to them. It is never shared or used for advertising, and it expires after 90 days.

You can clear these at any time through your browser settings. Clearing them will sign you out and reset your preferences.

• To run the features you use, and to show what you post, send, or share to the people you chose
• To suggest events, places, and people based on what's near you, what you attend, and who you know
• To show you what venues, performers, and organizers near you are putting on
• To send the notifications, emails, and texts you've asked for, and messages about your account
• To email you now and then about Joinue itself, such as new features or a city we've opened. Every one of those emails has an unsubscribe link, and unsubscribing stops them without stopping messages about your account or the events, trips, and plans you're part of
• To keep your account secure and keep Joinue safe, including reviewing reports and preventing abuse
• To understand how Joinue is used and make it better
• To produce aggregated or de-identified insight, as described below
• To meet our legal obligations

• Sell your personal data, or a profile of you
• Let advertisers track you, or use your data for ad targeting outside Joinue
• Hand your personal data to data brokers
• Let political campaigns or political organizations target you with it

Your information stays inside Joinue except in the situations below. We do not sell it, hand it to data brokers, or share it with advertisers, and not one of the situations below is any of those things.

With other people on Joinue

What you post, send, or share goes to the audience you chose for it, and your profile is shown according to the visibility you set. Public posts and public profiles can be seen by anyone, including people who are not on Joinue. The same goes for a share link you or a host sends out (an event invitation, a trip, an Align plan, a group chat invite): anyone holding the link can open what it shows. The preview cards those pages and links unfurl into, which can show things like an event's title, date and city or the name and photo of the person who shared it, can be cached by search engines, chat apps, and social networks we don't control.

With the providers who run the app for us

The list further down this page names every one of them and what each receives. They process your data only to provide their service to us, never for their own purposes.

When the law requires it

We may disclose information in response to a valid legal request, such as a subpoena, court order, or search warrant. We review each one before responding. Where we are allowed to tell you, and telling you would not defeat the purpose of the request, we try to.

To stop someone getting hurt

If we believe in good faith that it is necessary to prevent death or serious physical harm to someone, we may share what is needed with emergency responders or law enforcement, without waiting for legal process.

To report child sexual exploitation

US law requires us to report apparent child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC). A report includes the content and the account details connected to it, and NCMEC shares its reports with law enforcement.

To keep Joinue safe, and to defend ourselves

We may use and share information to investigate a report, enforce our Terms, protect the rights, safety, or property of Joinue, our users, or the public, or bring or defend a legal claim.

With our professional advisors

Our lawyers, accountants, and insurers may see information when they need it to advise or cover us. They are bound by professional confidentiality or by contract.

If the business changes hands

If Joinue is acquired or merged, takes investment, reorganizes, or sells all or part of its assets, your information may transfer as part of that, and a prospective buyer or investor may review limited information beforehand to evaluate the deal, under a confidentiality agreement. The buyer would be bound by this policy as it stands at the time unless you agree to something else, and we will let you know if Joinue changes hands.

As aggregated or de-identified insight

Information combined across many people, or stripped of anything that could point back to you, is no longer about you. We may share it, as the next section describes.

We may combine information across many people, or remove anything that identifies you from it, and use the result to understand how Joinue is used, to improve it, and to earn money to keep it running. For example, a venue might see that interest in live comedy is up in its city. We may share or sell insights like that, and we may publish them.

Insights like these describe groups, never a person. We do not attempt to re-identify anyone from them, we require anyone we share them with not to try either, and we do not report a figure drawn from so few people that it could point to someone. We do not sell them to political campaigns or political organizations, and we do not let anyone use them to profile or target individuals.

Your Settings put you in control. From there you can:

• Set or change your home location and control location-based suggestions
• Choose who can see your profile, send you a connection request, or tag you
• Hide which events you're going to, your Gravity, and which Regulars you attend
• Hide your online status from others
• Stop sharing your birthday with your connections
• Turn read receipts off, and manage who you have blocked or muted
• Reset your private calendar link, so a calendar app you gave it to stops receiving your events
• Choose which notifications you receive, by category and channel
• Export your data or delete your account at any time

If you opt into text-message notifications, we use your mobile number only to send the notifications you asked for. We do not sell your mobile number, and we do not share your mobile number or your SMS opt-in and consent with any third parties or affiliates for their own marketing or promotional purposes. The only third party that receives your number is our SMS delivery provider (Twilio), and only to transmit the messages you opted into.

You can opt out anytime by replying STOP to any message, or by turning off the “Also text me” toggles in Settings. For details, see our SMS Messaging Policy.

Depending on where you live, you may have specific rights regarding your personal data. We honor these rights for all users, regardless of location.

Right to Access

You can request a copy of the personal data we hold about you.

Right to Deletion

You can request that we delete your personal data. We will comply unless we have a legal obligation to retain it.

Right to Correction

You can update or correct inaccurate personal data through your account settings or by contacting us.

Right to Data Portability

You can request your data in a commonly used, machine-readable format to transfer to another service.

Right to Opt Out

We do not sell your personal data, we do not share it for cross-context behavioral advertising, and we do not use it for targeted advertising or to profile you in ways that produce legal or similarly significant effects. There is nothing here to opt out of. If any of that ever changes, we will tell you first and give you a way to say no.

Right to Appeal

If we turn down a request, we will tell you why, and you can appeal by replying to that answer or writing to privacy@joinue.com with the word Appeal. A different reading of the request is made and we respond within 45 days. If we deny the appeal, we will tell you how to complain to your state Attorney General or other regulator.

To exercise any of these rights: You can export your data and delete your account yourself anytime in Settings. For anything else, email us at privacy@joinue.com with your request. We will respond within 45 days, and will tell you if we need longer. We will not discriminate against you for exercising these rights.

To protect your account we have to be sure a request is really yours, so we will ask you to make it from the email address on the account, or to confirm something only the account holder would know. An authorized agent can act for you if they provide your written permission, and we may still confirm the request with you directly. If you have no account, tell us the address or number you gave us and which event or plan it was for.

Some browsers and extensions send an opt-out preference signal such as Global Privacy Control. Because we do not sell or share personal data in the first place, there is nothing for that signal to switch off, and it changes nothing about how we treat you.

Some browsers also offer an older “Do Not Track” setting. There is no agreed standard for what a site should do with it, so we don’t act on it. We don’t track you across other sites whether it is on or off.

A few of the things Joinue handles count as sensitive under some privacy laws: your precise location, your date of birth, the contents of messages that were not addressed to us, and your account credentials.

We use each of them only to provide the feature you asked for, to keep your account secure, and to meet our legal obligations. We do not use them to work out anything about your characteristics, we do not use them for advertising of any kind, and we do not sell or share them. That is the same standard the law would let you require of us, so there is no separate setting to limit it.

Account Data

Retained while your account is active. When you delete your account from Settings, your profile is removed immediately, along with your email address, phone number, date of birth, home location, avatar, cover art, and personal gallery, and everything private to you: your RSVPs and attendance history, your connections, your saved places, your settings, and your notifications.

What you leave behind

Things you made that other people are still using don't vanish with you, because deleting them would take away someone else's memories or break a plan they're on. A message in a group, an event you hosted, a photo in a shared album, a post, a comment, a score in a game you played: these stay, with your name and photo removed, shown simply as from a deleted user. They can no longer be traced back to you through Joinue. Some things get handed on rather than kept: if you were the main host of an event, that role passes to whoever has been a co-host longest; a Space you owned passes to its longest-standing admin, then moderator, then member (a Space with nobody else in it is deleted); and a performer page you ran passes to Joinue, because it is a shared listing other people rely on. An upcoming event you were hosting alone is cancelled, and its guests are told. A draft event nobody was ever invited to is deleted outright.

Event Data

Public events remain visible. Your RSVPs and attendance history are deleted with your account.

Messages

Messages you've sent stay visible to other participants in a conversation, shown as from a deleted user once you leave. May be retained longer if part of an active report or investigation.

Usage and analytics

The usage events described above are kept for 180 days and then deleted automatically. Almost all of them are written anonymously and are never connected to you at all. Three carry your account's id: the record that you finished signing up, the record that your new account picked up plans you had joined as a guest, and your answer to the question we ask when you first arrive (what you came to do). We keep those so we can tell which ways of finding Joinue actually work and what people come here for. If you delete your account that link is removed, and the events themselves age out on the same 180 days. Separately, we note which days you opened the app (the date only, nothing about what you did), so we can tell how many people come back. That record is kept while your account exists and is deleted with it.

Backups

Once a night we copy the database and stored files to backup storage that is encrypted at rest, so a failure or a mistake can be undone. Database copies are kept for 30 days and deleted as they age out, so something you deleted can sit in one for up to 30 days before it is gone for good. Stored files are mirrored rather than copied whole, so a file you delete leaves the mirror on the next nightly run, though the backup storage can keep an earlier version of it for a while after. Backups are used to restore the service and for nothing else.

Consent records

A limited record that you accepted our Terms and opted into texts is kept even after you delete your account, so we can honor those choices and, if ever needed, show they were made. It holds the date, the version of the wording you agreed to, the number you consented to, and the IP address and browser your device reported at that moment, which is what proves a consent was really given. The same limited record is kept when you leave a phone number on an event RSVP form as a guest, without an account. It is not used for anything else.

Opt-out lists

If you unsubscribe from our emails or reply STOP to a text, we keep that address or number on a short suppression list for as long as we send anything at all. That is the only way to be sure we never message you again, and it is used for nothing else.

Safety records

Content and account details tied to a report, an investigation, or a legal obligation are kept for as long as that lasts, and longer where the law requires it, even if the account has been deleted.

• All data transmitted using TLS/SSL encryption
• Passwords hashed by our authentication provider using industry-standard algorithms, with optional two-factor authentication
• Who can read your profile is enforced by row-level rules in the database itself, not only in app code, so a bug in the app can't hand out what you haven't shared
• Sensitive profile fields (email, phone number, home location, date of birth) are restricted at the column level, so the app's browser-side client cannot read them at all, on any screen, for any account
• Automated bot protection on sign-in, sign-up, password reset, and phone verification
• Probes we run against the live database to confirm those access rules are actually holding

Joinue is small and independently run. Access to production data is limited to the people who operate the service, and is used only to run and support it.

No service can promise perfect security. We can’t guarantee that unauthorized access will never happen, and you play a part too: keep your password to yourself, and turn on two-factor authentication in Settings.

Joinue is operated from the United States, and your data is stored and processed on infrastructure located in the United States. If you use Joinue from another country, you understand that your data is transferred to and handled here.

We rely on a small set of trusted service providers to run the app. They process your data only to provide their service to us, never for their own purposes:

Hosting and database (Supabase, Vercel)

Stores your account, profile, events, and messages securely, and runs the app. Vercel also tells us the rough area your connection comes from (worked out from your IP address, city-level at best), which we use to show the right city before you've picked one.

Backups (Cloudflare R2, GitHub)

So a failure at one provider can never take your data with it, a nightly encrypted copy of the database and stored files is made by an automated job running on GitHub and written to storage we control at Cloudflare. Neither company reads the contents. See how long we keep those, below.

Email delivery (Resend)

Sends account, verification, and event emails you have opted into.

SMS delivery (Twilio)

Sends the text-message notifications you opt into, to your verified phone number.

Push notifications (Google Firebase Cloud Messaging, Apple Push Notification service)

Delivers app notifications to your device. On iOS the notification is relayed through Apple's Push Notification service to reach your phone. A notification can include a short preview, such as the sender's name and photo, the name of the conversation, event, or trip, and the start of the message.

Sign-in providers (Google, Apple)

If you choose to sign in with Google or Apple instead of a password, that provider verifies your identity and tells us the basic account details you approve (such as your email). We do not post anything to those accounts.

Weather forecasts (Open-Meteo)

Powers the weather shown on a trip itinerary and outdoor plans. To return a forecast, the coordinates of a place on your plan, or a place name you search, are sent to Open-Meteo. It receives no account details and does not identify you.

Maps and location (Mapbox, OpenStreetMap)

Powers place search, event maps, and the small map previews shown with a shared location. Place search, turning your location into a neighborhood or city name, and those location previews are routed through our servers. Mapbox does receive the coordinates involved (a point to search near, the spot being turned into a place name, or the location being previewed), but it receives them from us, not your device, so it never gets your IP address or anything about your account. Interactive maps you can pan and zoom load their map tiles from Mapbox in your browser, so Mapbox sees your IP address, the same as any website that shows a live map, but not your account or your precise location. Where Mapbox has no coverage (searching for a place abroad, for instance), the same search is also answered from OpenStreetMap through Photon, routed through our servers the same way, so what leaves us is the search text and nothing about you.

Link previews

When you paste a link into a message or a post, our servers visit that page to build a preview card, so the site sees a visit from Joinue, not from you. A YouTube link is looked up through YouTube's own preview service, so Google receives that link. The preview's picture loads from the site that hosts it, and in chat the small site icon on a link card loads from Google's icon service, so those see the IP address of the device showing the card. Opening a link, or tapping for directions or to add an event to your calendar, takes you to that service, which then sees what any website you visit does.

Calendar subscriptions

If you subscribe to your Joinue calendar from Google Calendar, Apple Calendar, or another calendar app, that app fetches your upcoming plans through a private link, on its own schedule, and handles them under its own privacy policy. Reset the link in Settings and it stops working.

GIF search (Giphy)

Powers the optional GIF picker in chat. When you search for or view GIFs, the request is made from your device to Giphy, so Giphy receives your search terms and your IP address to return and show the results. If you never open the GIF picker, nothing is sent to Giphy.

Music search (Spotify, Songlink)

Powers the song picker on an event's playlist. When you search for a song, the words you type are sent from our servers to Spotify to find matching tracks, so Spotify receives the search text but not your device's IP address, your name, or anything else about your account. Once a song is added, we ask Songlink for that track's links on Apple Music and YouTube Music, so someone who uses a different service can open it there. Neither service is told who searched.

Product analytics (Vercel Analytics and Speed Insights)

Measures aggregate, privacy-friendly usage and performance, like page views and load times, with no advertising cookies and no tracking of you across other sites. It helps us see what works and keep the app fast. The more detailed usage events described above are recorded in our own database, not by a third party.

Payments (Stripe)

Securely processes payments such as donations. Stripe handles your card details directly; we never receive your full card number.

Content moderation (OpenAI)

Helps keep the community safe. What strangers can read is automatically screened, and what you kept to people you chose never is. Screened: public posts and photos on a page, a profile, or a Space anyone can join, the title and description of an event open to the public or to friends of friends, the bio on a public profile, comments under any of those, messages to a performer or venue page, and messages in the conversation for one of those events or Spaces. That text is sent to OpenAI's moderation service to be classified, along with the photos on those posts or attached to those messages. Never screened: direct messages, group chats, trips, private and Orbit-only events, private Spaces, posts to your connections, and the comments under them. You can still report anything, and reporting reaches every audience. OpenAI processes what it receives only to return a safety classification and receives nothing else from your account. Under the terms we use their service on, they do not train their models on what we send.

Error monitoring (Sentry)

Helps us find and fix crashes and errors. When something goes wrong, technical diagnostic data is sent to Sentry. A short recording of the screen is kept only when an error happens, with all text and media masked out, and we do not send it your messages or account details.

Bot protection (hCaptcha)

Protects sign-in, sign-up, password reset, and phone verification from automated abuse. When you complete one of those forms, hCaptcha (operated by Intuition Machines) receives your IP address and interaction signals from that page to tell a real person from a bot. It is used only to verify the request, not to build an advertising profile of you.

We work to keep Joinue free of harmful and abusive content. This involves both automated screening and human review.

• What strangers can read is automatically screened for harmful material as you post it, using the moderation service noted above: public posts, public events, public profiles, and the comments and conversations around them. What you kept to people you chose (direct messages, group chats, trips, private events and Spaces, posts to your connections) is never sent to that service, and you can still report anything in it.
• You can report a person, a message, or an event, and you can block anyone, from the menus throughout the app.
• Reports go to our safety team for review. We may remove content, warn, or remove accounts that break our rules.
• Content tied to an active report or investigation may be retained longer so we can act on it.

To report something or reach our safety team, use the in-app report and block tools or email legal@joinue.com.

Joinue is not for children or teenagers. You must be at least 18 years old to use Joinue, and we do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has provided us with personal data, contact us at privacy@joinue.com and we will delete it.

We ask for your date of birth when you sign up so we can check your age, and we keep it. We never show your birth year or your age to anyone. If you have turned birthday sharing on, the people you are connected with see the month and day only.

We also fail safe on age. Until an account’s date of birth is on file and confirms the holder is 18 or over, that profile stays visible to their connections only, and the wider options (friends of friends, and fully public) are not offered. That is a safeguard for accounts whose age we have not confirmed. It is not a way for someone under 18 to use Joinue, and it does not make an under-18 account permitted. An account we learn belongs to someone under 18 is closed.

In the unlikely event of a data breach that affects your personal information, we commit to:

• Notifying affected users without undue delay, and within the timeframes required by law
• Clearly explaining what data was affected
• Describing what steps we're taking to address the breach
• Providing guidance on how you can protect yourself
• Notifying relevant authorities as required by law

We may update this Privacy Policy as Joinue changes, as we add or replace a service provider, or as the law requires. The date at the bottom of this page always tells you when it was last revised.

If a change materially affects how we handle your personal data, we will tell you in the app or by email, and where the change is significant we may ask you to accept it before you keep using Joinue. Continuing to use the Service after an update means you accept the revised policy. If you don’t agree with a change, you can export your data and delete your account from Settings.

We’re committed to transparency. If you have questions about how we handle your data, we’re here to help.

Contact our privacy team at privacy@joinue.com