Privacy Policy

WashedUp PBC (“WashedUp,” “we,” “our,” or “us”) operates the WashedUp mobile app and website at washedup.app. WashedUp is a California-based public benefit corporation (“PBC”) focused on facilitating real-world meetups between verified users. We take privacy seriously: this policy explains what data we collect, why and how we use it, who we share it with, and your rights. It also covers the requirements of Apple’s App Store and Google Play Store.

All users must be 18 or older to use WashedUp. By creating an account or using WashedUp, you agree to this Privacy Policy and to our Terms of Service. You should review this policy before signing up. We may update it from time to time; significant changes will be posted here and via in-app notifications.

Information We Collect

We collect several categories of information to operate WashedUp and provide in-person meetup functionality. We only collect data necessary for core features and always with your consent. Here’s what we gather:

• Account & Profile Data: Email address, phone number (for Twilio verification), username/display name, password (hashed), birthday, profile photos, and a brief bio or social links you choose to add. We request name/email/phone only to set up your account and verify authenticity.
• User-Generated Content: Anything you post on the platform — such as plans/events you create, group chat messages, RSVP/attendance status, and any photos or comments you upload. This content is visible to other plan members or group participants.
• Location Data: Your approximate location (usually city or region level) to match you with nearby events and users. With your permission, we may use device GPS or IP-based location. We do not track precise real-time movements without explicit consent. All location sharing in WashedUp is disclosed to you (e.g. when arranging or joining a meetup) and can be turned off at any time.
• Device and Usage Data: Technical details like your IP address, device type, operating system, app version, crash logs, and performance metrics. We collect analytics on how you navigate the app (pages viewed, buttons tapped, session duration) to improve our service. This data is stored in aggregate to help us debug issues, enhance features, and ensure security.

We do not collect any other sensitive data (no health, financial, or precise biometric data). We do not mine your contacts or social media information unless you explicitly link an account. All data collection is explained at the time of onboarding or feature use.

How We Use Your Information

Your data is used strictly to run and improve WashedUp. Typical uses include:

• Account Setup & Verification: We use your phone and email (via Twilio) to verify your identity and prevent bots or abuse. Twilio handles OTP codes and contact verification securely, and we never use this info for marketing.
• App Functionality: We use your profile info and preferences to match you with relevant plans and groups. Location data is used to display nearby events and calculate distances. Messages and event details you share are delivered to group members so everyone can coordinate meetups.
• Communication: We send you important service messages (account confirmation, safety notices, password reset) via email/SMS. We do not spam or sell your contact details. You can opt out of non-essential notifications at any time.
• Safety and Moderation: We may use data to enforce community guidelines — for example, reviewing flagged messages or validating reports. We have zero tolerance for harassment or illegal activity (see our Terms of Service). If necessary, we may use your info to cooperate with law enforcement.
• Analytics and Improvement: Aggregate usage statistics help us understand how WashedUp is used. We analyze anonymized data to improve features, performance, and user experience. Any analytics partners are bound to keep your data as protected as we do.
• No Marketing Sharing: We do not sell, rent, or trade your personal information to advertisers or third parties. Your data will never be shared for targeted ads without your explicit consent.

In short: WashedUp exists to build your social network, not to monetize your data.

Third-Party Services

We leverage trusted third-party providers to operate WashedUp. These partners process your data on our behalf, under strict confidentiality:

• Twilio: For phone and (optional) email verification. Twilio processes your contact info solely to deliver verification codes and mitigate fraud. They comply with privacy standards and do not use your data beyond this purpose.
• Supabase: Our backend database and authentication service. All your profile, plan, message, and location data are stored on Supabase’s secure servers (hosted in the U.S.). Supabase follows industry encryption for data-at-rest and transit.
• Vercel: Hosts our web frontend (washedup.app). Vercel does not have access to personal data beyond serving the website.
• Expo / React Native Services: If our app uses Expo for push notifications or updates, Expo may see device tokens or push analytics. Any such data is handled according to Expo’s policies.
• App Store / Play Store: Apple and Google act as distribution platforms. If you make in-app purchases, your transaction info goes through Apple/Google and is subject to their privacy policies.
• Resend: If we send emails (newsletters, support replies), we use Resend as our email service. Your email is used only to send WashedUp-related content, and you can unsubscribe at any time.

Each of these services has its own privacy practices, but any provider we use must offer protections equal to ours. We vet partners carefully and only share the minimum data they need.

How We Share Information

Your information is shared only as described in this policy:

• With Other Users: Content you post (plans, comments, photos) is visible to other plan members or group participants by design. For instance, if you RSVP to an event, your display name and photo may appear to other attendees. This is necessary for an IRL meetup app. We encourage safe sharing: your exact address or precise GPS is not public by default.
• With Service Providers: As noted above, we share data with third-party vendors only as needed (e.g. Twilio sees your phone number to send an SMS code). These vendors are contractually required to protect your data.
• Legal Compliance: We may disclose information to law enforcement or courts if required by law, or to prevent fraud and protect rights.
• Corporate Transactions: If WashedUp is sold or merged, your data may be transferred to the new owner under the same privacy commitments.
• Aggregate/Anonymous: We may share de-identified, aggregated statistics (e.g. “X users in LA joined a hiking event last month”) for research or marketing. This can never be linked back to you as an individual.
• Not Shared: We do not share your personal data with advertisers or other third parties for their marketing. We explicitly do not sell data.

Location Data

Because WashedUp revolves around meeting in person, location handling is a key privacy concern. We only collect location data with your consent, and you can disable it anytime in your device settings or the app:

• When In Use: We use your city-level or GPS data to suggest plans and friends near you. This helps the app work. We do not continuously track you in the background beyond what’s needed to provide service. (If the app is closed, we don’t record your whereabouts.)
• Disclosure: We clearly disclose if we collect location data. For example, if you enable background location tracking (to automatically update your meetup radius), we would inform you of this “just-in-time.” By default, WashedUp uses only on-demand or coarse location.
• Sharing: Your approximate location is not shared with advertisers or external parties. Within WashedUp, only organizers of an event or people you meet with in a plan see whatever location info you choose to share (e.g. a meetup address you set). We do not expose your precise geolocation to other users.

In short: WashedUp uses location to match you with local events and attendees, with full transparency and user control.

Data Security

We employ industry-standard security measures to protect your data:

• Encryption: Data in transit is protected by TLS/SSL. Sensitive data at rest (like passwords) is hashed or encrypted.
• Access Control: Only authorized WashedUp staff or systems can access production databases, and only as needed for maintenance.
• Regular Audits: We regularly audit our security practices and may use third-party penetration testing.
• Account Security: You are responsible for your account security (keep your password safe). We encourage using a strong password and not reusing passwords from other sites.

While we strive for top security, remember that no system is 100% foolproof. In the unlikely event of a breach, we will notify affected users and authorities as required by law.

Data Retention and Deletion

We retain personal data only as long as necessary for the purposes stated:

• Active Accounts: While your WashedUp account is active, we keep your profile, content, and history so you can continue using the service.
• Deleted Accounts: If you delete your account, we will remove your personal data from our primary servers within 48 hours. Some non-identifying logs (for fraud prevention) may be retained longer but will be anonymized.
• Revoking Consent: At any time, you can withdraw consent for optional data (for example, push notifications, email updates). You can also request that we erase your data. See “Your Privacy Rights” below for how to do this.
• Inactive Data: If a user is inactive for a long period, we may periodically purge inactive accounts, but we will attempt to notify or gain consent beforehand.

We carefully consider data minimization: we do not retain more information than needed. For example, Twilio logs your phone number only to send an OTP and then discards it according to its policy; we do not keep call records or SMS transcripts.

Your Privacy Rights

Your privacy rights depend on where you live, but we aim to support common data-protection principles globally:

• Access & Correction: You can review or update your personal profile and settings in the app (e.g. update email, birthday, bio). You can also email us at hello@washedup.app to request a copy of the data we hold about you.
• Deletion: You may delete your WashedUp account at any time from within the app or via our account deletion page. This will erase your personal data from our systems (see Data Retention above). We also delete associated content (your plans/messages) unless others need it (for example, the records of events you attended may remain in anonymized form).
• Portability: You have the right to obtain and reuse your data. You can download your profile and activity history by contacting us. (We can provide data in a common format.)
• Opt-Out of Sales: WashedUp does not sell personal information, so this does not apply. If that changes, we will notify users and provide opt-out mechanisms as required by the CCPA/CPRA.
• California Privacy Rights: If you are a California resident, you have additional rights under the CCPA/CPRA, including: the right to know exactly what categories of personal data we collect and how we use it; the right to request deletion of your data; the right to correct inaccurate information; and the right to opt out of any “sale” of data (which we do not do). You can exercise these rights by emailing hello@washedup.app or using the app. We will handle requests promptly, as mandated by California law.
• GDPR and Global Laws: If you are in the EU or other jurisdiction with privacy laws (like GDPR, PIPEDA, etc.), you also have rights to access, rectify, erase, restrict or object to processing, and to lodge a complaint with a supervisory authority. We aim to comply with these requirements as applicable.

We will never charge you for exercising your rights.

Children’s Privacy

WashedUp is not intended for children. You must be 18 or older to use our service. We do not knowingly collect personal data from anyone under 18. If we learn that a person under 18 has registered, we will delete that account immediately.

Updates to This Privacy Policy

We may update this Privacy Policy as WashedUp evolves or to comply with new laws. When we do, we will revise the “Last updated” date above. For significant changes, we will notify users via email or in-app notice. By continuing to use WashedUp after the changes go live, you accept the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us:

Email: hello@washedup.app

Support: washedup.app/support