Who's Outside privacy policy

What we collect

Data	Why	Where it comes from
Your verified phone number	Signing you in with a one-time text code	You type it in
Your school email address, if linked	Optional campus verification	You choose to link it
Your display name	Showing you to friends, to people in your plans, and to anyone with your friend link	You type it during onboarding
When you confirmed you are 18 or older	Keeping the app 18+	You tap "I'm 18 or older"
Events you mark going or not going	Going counts, and showing mutual friends where you are going	You tap the button
Your plan answers: "I'm in", "I'm in if" a number of people go, or "Out"	Locking the plan, and showing everyone in it who answered what	You answer a plan
Your "I'm in" and "Leaving soon" taps at an event	Showing mutual friends you are inside, and telling mutual friends inside that you are leaving soon	You tap the button; the app never reads your location
Your "I'm outside" and "Left the line" taps, and your line and crowd answers at an event	Showing everyone combined line and crowd summaries	You tap the buttons; the app never reads your location
Got-home check-ins: your home-by time, the home buddies you pick, and when you tap "Ride home" or "I'm home"	Telling your home buddies that you got home, or that you have not	You tap "Heading out"
Ratings you give events	Average ratings that help us improve listings	You tap stars after an event
Reports you send, with any note you add	Reviewing problems with events or people	You fill in the report form
Friend requests, ignored requests, friends, and people you block	Showing friends going, hiding ignored requests from your list, and hiding people you blocked	You send, accept, or ignore a request, or block someone
A notification token for each device where you turn on notifications	Sending you alerts and got-home reminders	You allow notifications for the app
Promoter requests: the promoter name, organizer page link, optional logo, Instagram, website, bio and note you send	Checking that you run the events before approving you as a verified promoter	You review and send the promoter request form, optionally filled from your Posh page
Scout access and door updates	Letting invited scouts post labelled event updates	You open a private host link and post an update
The phone number you send from the account deletion page	Verifying and processing that deletion request, and nothing else	You type it on the account deletion page
Your email address, if you join the waitlist on our website	Telling you when Who's Outside opens on your campus	You type it on our website

Promoter logo copies are publicly readable after you send the request. The request itself is visible to you and the team reviewing your application. Your approved promoter name appears on events you post.

We do not collect your device location, your birth date, your contacts, or any advertising identifier. We do not track you across other apps or websites, and we do not show ads.

Who can see what

• Every member sees how many people are going to an event. Your mutual friends also see your name on events you are going to. A one-way friend never sees it.
• Anyone signed in with a plan link sees who started the plan and how many people are in. Once you answer a plan, you see the name and answer of everyone else who answered it, and they see yours, whether or not you are friends. Someone you blocked, or who blocked you, is left out of that list.
• Mutual friends see that you are inside an event after you tap "I'm in", until 6 AM, unless you turn off "Friends see when I'm inside" in Me. A one-way friend never sees it.
• "Leaving soon" alerts only your mutual friends who are inside the same event.
• Only the home buddies you pick see your got-home check-in. They see it when you tap "Ride home" or "I'm home", or once you are 30 minutes past your home-by time.
• Anyone with your friend link or QR code sees your display name, even without an account.
• Your line and crowd answers, and the line waits measured from your door taps, show only in combined summaries that need at least two people, never with your name.
• Nobody else sees how you rated an event. Our team sees each event's average and count, and a verified promoter sees them for their own events after rating closes, once enough people have rated.
• Reports go only to us; the person or host you report is never told who reported.
• A house-party address is shown only to members who linked their school email and marked going, and only from the release time the event lists. Whoever posted the event, and our team, can always see it.
• House entrance directions follow the same address rule.
• A verified promoter's name shows on the events they post. Promoters see each of their events' going count and average rating, never who is going or who rated.
• Our team can see who is going to an event, to moderate door reports.
• Door updates show a HOST or SCOUT label and time, without the author's name. Admins can see the scouts for an event and remove their access.

Who processes your data for us

• Supabase hosts the database and sign-in ([region]).
• Twilio sends phone sign-in codes.
• [email provider] sends school email codes.
• Expo's push service, with Apple and Google, delivers notifications to your device.

We do not sell or share your personal data with anyone else, and we do not use it to train AI models.

How long we keep it

We keep your data while you have an account. When you delete your account in the app (Me, then Delete account), your account and its identifying links are deleted at once, and you leave every going count. Star ratings you gave stay in each event's anonymous average and count, with nothing linking them to you. A plan you started stays for the people who answered it, with nothing linking it to you. Events you posted as a verified promoter stay up for the people going, with nothing linking them to you, and your promoter requests are deleted. Reports you sent, and reports other people sent about you, stay with our team for moderation, with nothing linking them to your account. Door updates lose their author link when you delete your account. They are deleted by a job that runs every minute after the event has ended for six hours. "Leaving soon" taps are deleted within 15 minutes after the 6 AM cutoff that follows them. Your door taps and line and crowd answers are deleted six hours after the event ends. When you ask for deletion on the account deletion page, we keep the request only if the number belongs to an account, and we delete it once the request is resolved or withdrawn. [If daily backups are enabled: copies remain in backups for up to [7] days, then are gone.]

Your choices and rights

• Turn off "Friends see when I'm inside" in Me, which hides it from friends at once.
• Edit your display name, change any going mark, and delete your account in the app at any time.
• Without the app, ask us to delete your account on the account deletion page.
• Ask us for a copy of your data, or ask any question about this policy, at admin@whosoutside.app.

Who's Outside is only for people 18 and older, and we do not knowingly collect data from anyone younger.

Changes

We will post any change here and update the effective date, and we will tell you in the app before a change that affects how your data is used.