Privacy

Last updated 1 October 2026

Who is responsible

TODO: company name, address and contact email. This is the data controller under Article 4(7) GDPR.

What we collect

Your name, email address and profile photo from Google when you sign in. The answers you give when you sign up: city, date of birth (other members see only your age, never the date), gender, languages, whether you are an introvert or extrovert, what you are looking for, your interests, which meetups you would come to, your budget, any dietary needs, and who you would like to meet. Which country you are from, your phone number and how you like to be contacted, which only you and our team can see. What you make and where you are with it. A link to your work, if you add one. When you are free each week. Which meetups you book and which groups you were placed in. Payment records from Stripe, which never include your card details.

Why we can use it

To perform the contract between us, which is putting you in a group and booking a table (Article 6(1)(b)). Where we ask for your consent, such as for the answers used to match you, that consent is recorded when you sign up and can be withdrawn (Article 6(1)(a)).

Sensitive information

Some answers can be sensitive. Telling us who you would like to meet, alongside your own gender, can reveal something about your sexual orientation, which is special category data under Article 9. We only use it to decide who you are grouped with, we never publish it, and you can change or remove it at any time. TODO: confirm the Article 9 basis with a lawyer before launch.

Who else sees it

The people in your group see your first name, photo and interests, never your phone number or where you are from. If you add a link to your work, they see that too. Partner venues are told how many people are coming and any dietary needs, never who you are. We use Supabase for storage and authentication, Stripe for payments, and Resend for email. TODO: list of processors and their locations.

How long we keep it

TODO: retention periods. Payment records must be kept for German tax purposes; everything else should have a stated limit.

Your rights

You can ask for a copy of your data, correct it, delete it, or object to how we use it. Write to the address above and we will answer within a month. You can also complain to your local data protection authority.