GroupThat — Privacy Policy

This Privacy Policy describes how GroupThat (“we,” “us,” or “our”) collects, uses, and shares information when you use our mobile application (the “App”), which helps people coordinate group meetups and RSVPs.

By using the App, you agree to the collection and use of information as described in this policy.

1. Information We Collect

Account & Sign-In Information

To create an account, we collect information depending on how you sign in:

Google Sign-In: your name, email address, and profile photo, as provided by Google.
Apple Sign-In: your name and email address (or Apple’s private relay email, if you choose to hide your email), as provided by Apple.
Email or Phone Sign-In: the email address or phone number you provide, and a verification code sent to confirm it.

Profile & Location Information

Zip Code: used to show you meetups and groups near you and to connect you with members in your area. Zip code is the only location signal we collect — the App does not request or use precise GPS/device location.
Profile Picture: if you choose to add one.

Group, Meetup & Chat Data

Groups you create, join, or manage.
Meetups you organize or RSVP to, including your RSVP status.
Messages you send in group chats.

Information From Device Permissions

We request the following permissions, which you can grant or deny through your device settings:

Permission	Why we ask
Notifications	To alert you about RSVPs, meetup reminders, and chat activity.
Photo Library	To let you select an existing photo for your profile or to share in a group. We only access photos you actively choose to select.
Calendar	To add meetups you’ve RSVP’d to onto your device calendar, at your request. We do not read your existing calendar events.
Camera	To let you take a new photo for your profile or to share directly in a group chat.
Contacts	To let you invite people to a group from your contact list. We do not upload or store your full contact list on our servers — it’s used locally on your device to help you pick who to invite, and we only retain contact info for people you actually invite.

Automatically Collected Information

Standard device and usage data (device type, OS version, app version, crash logs) to help us maintain and improve the App.

2. How Groups Work (Access & Discovery)

GroupThat has no public directory or search feature for users or groups. Groups are formed only when someone shares a direct invite link (via text, email, messaging apps, etc.). Because membership is based on being personally invited, the App does not expose your profile, zip code, or group activity to other users outside groups you’ve joined, or to the public.

3. How We Use Your Information

We use the information above to:

Create and authenticate your account.
Match you with relevant groups and meetups based on your zip code.
Facilitate group creation, RSVP tracking, and in-app chat.
Send notifications about meetups and group activity.
Add meetups to your device calendar when you request it.
Show advertising, as described in Section 4.
Maintain the security and reliability of the App.

4. In-App Chat & Advertising

The App includes an internal chat feature for group members, which may include promotional or sponsored content.

Advertising within the App is targeted, meaning ads are selected based on factors like your general area (zip code) or the type of group/meetup you’re part of. Importantly:

Advertisers and ad partners do not receive your name, phone number, email address, or exact identity.
Advertisers and ad partners do not see the contents of your chat messages.
We do not sell your personal information to advertisers.

If you are a California resident, you may have the right to opt out of “sharing” for cross-context behavioral advertising under the CCPA/CPRA — see Section 7.

5. How We Share Information

We do not sell your personal data. We share information only with service providers who help us operate the App, such as:

Google and Apple — for sign-in authentication.
Clerk, MongoDB, and Supabase — to store and manage account and app data securely.
Various ad networks — to serve targeted advertising as described in Section 4.

These providers may only use your data to provide services to us, not for their own independent purposes, except as described for advertising.

We may also disclose information if required by law, or to protect the rights, safety, and security of GroupThat, our users, or the public.

6. Data Retention

We retain your information for as long as your account is active. If you delete your account, we delete or anonymize your personal information within 7 business days, except where we’re required to retain it for legal or security purposes.

7. Your Rights & Choices

Access & Correction: You can view and update most of your profile information within the App.
Notifications: You can disable push notifications at any time in your device settings.
Permissions: You can revoke Camera, Contacts, Photo Library, or Calendar access at any time in your device settings; some features may stop working if you do.
Deletion: You may request deletion of your account and associated data at any time by contacting us at the email below.
California Residents (CCPA/CPRA): You have the right to know what personal information we collect, to request deletion, and to opt out of “sharing” of your information for cross-context behavioral advertising. To opt out, contact us at the email below.

8. Children’s Privacy

The App is intended for users 13 and older. We do not knowingly collect personal information from children under 13. Because groups are formed by direct invite link rather than public discovery, we rely on this closed-invite model plus this age restriction to limit exposure — but we do not verify age at signup. If we become aware that we’ve collected personal information from a child under 13, we will delete it.

9. User Content & Moderation

Group chats are user-generated content. GroupThat provides minimal moderation of chat messages — we do not review messages before they’re sent, and we rely primarily on users to report inappropriate content. We may review reported content and remove users or content that violates our terms of service.

10. Security

We use reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We’ll notify you of material changes through the App or by other reasonable means, and update the “Last updated” date above.

12. Contact Us

If you have questions about this Privacy Policy or want to request account/data deletion, contact us at:

dallin.hull@outlook.com