Privacy Policy

Privacy Policy (U.S. users)

Effective Date: August 27, 2026
Last Updated: August 27, 2026

1. Who We Are

Anyone, Inc. ("Anyone," "we," "our," or "us") operates the Anyone mobile application and related websites (the "Services"). We are located at 1500 N Grant St, Ste R, Denver, CO 80203 USA.

This Privacy Policy explains how we collect, use, share, and protect your personal information. It describes what we do today. If we begin collecting, using, or sharing information in a way this policy does not cover, we will update this policy before we do so — see Section 14.

2. Scope & Age Requirements

This Privacy Policy applies to users in the United States who are 18 years or older.

If you are under 18, you may not use our Services. If we learn that an account belongs to someone under 18, we terminate the account and delete its data. Parents who believe we have collected information from a minor should contact us at privacy@anyone.social.

3. Information We Collect

4. How We Use Your Information

We use your information to:

1. Provide the Services: Create and secure accounts, send one-time passcodes, authenticate sign-ins, display profiles, and run events, groups, and chat
2. Recommend Content: Suggest nearby events and people
3. Safety & Security: Confirm age, detect abuse, investigate reports, and enforce our policies
4. Communications: Send notifications, service updates, safety alerts, and, when you opt in, event reminders and event-related updates from hosts
5. Improvements: Analyze usage and diagnose crashes to develop and improve the product
6. Legal Compliance: Respond to legal requests, protect rights, and prevent harm

5. Legal Bases for Processing

We process your data based on:

• Contract Performance: To provide the Services you requested
• Legitimate Interests: Safety, security, and platform improvements
• Legal Obligations: Compliance with laws and regulations
• Consent: For optional features such as location, push notifications, and event texts

6. Information Sharing

We share information with the following recipients, and no others:

7. Your Rights & Choices

You have the right to:

Access & Portability

• Request a copy of your data by emailing privacy@anyone.social

Correction

• Update your profile information at any time in the app
• Contact support for anything you cannot change yourself

Deletion

• Delete your account in Settings → Advanced. This permanently deletes your profile, connections, and personal data
• Messages you have already sent remain visible to the people you sent them to, attributed to "Deleted User" rather than to your name
• Certain records may be retained where required by law or for safety purposes

Notifications

• Control push notifications in Settings → Notifications, and in your device settings
• Unsubscribe from emails using the link in any email we send
• Turn event texts off in Settings → Notifications or reply STOP to any event text; reply HELP for help

Event Texts: If you separately consent, Anyone may use your verified mobile number to send automatic reminders and event-related updates written by hosts for events you join. Message frequency varies with your event participation, and message and data rates may apply. Consent is optional and is not a condition of creating an account, joining an event, purchasing anything, or using the Services. You may withdraw consent in Notification Settings or by replying STOP at any time.

Mobile Information: Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. We use mobile numbers for authentication and, when a user separately consents, for event texts. No text messaging originator opt-in data or consent will be shared with any third parties, except for vendors and carriers required to deliver SMS messages, or as necessary to comply with law or protect our rights.

Do Not Sell or Share

• We do not sell your personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of

Do Not Track

We do not currently respond to browser "Do Not Track" signals, as there is no industry standard for how to handle them. We do not perform cross-site tracking.

8. Data Retention

• Active account data is retained while your account exists.
• When you delete your account, we delete your profile, connections, and personal data. Messages you already sent remain visible to their recipients, attributed to "Deleted User". Residual copies may persist in routine backups for a short period before those backups age out.
• Safety reports and moderation records are retained for as long as needed for safety and legal purposes.
• Crash and analytics data is retained according to our providers' configured retention periods.
• SMS consent and suppression records are retained as needed to document your choice and ensure that an opt-out continues to be honored.
• Records subject to a legal hold or a legal retention obligation are retained for as long as that obligation requires.

9. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information:

• Identifiers: Name, username, email, phone number, device identifiers, IP address
• Personal Information: Date of birth, photos, profile content
• Internet Activity: Usage data, interactions, session information
• Geolocation Data: Precise location (with permission) and coarse location

Your California Privacy Rights

• Right to Know: You can request information about the personal information we collect, use, and disclose
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions
• Right to Correct: You can request correction of inaccurate personal information
• Right to Opt-Out: We do not sell personal information, and we do not share it for cross-context behavioral advertising
• Right to Limit Use: You can limit use of sensitive personal information
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Shine the Light

California residents may request information about disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

10. Data Security

We are a small company, and we do not claim controls we cannot evidence. Here is what we actually do:

• Encryption in transit. All connections use TLS.
• Encryption at rest. Provided by our database and storage platform, Supabase.
• Database-enforced authorization. Access rules are enforced by the database itself through row-level security policies, not by application code alone, and those policies are covered by an automated database test suite that runs before every release.
• Automated security testing on every change. Every code change must pass static application security testing and a dependency vulnerability audit before it can be merged. These are blocking checks, not advisory ones.
• Least-privilege database grants. Privileged database functions are explicitly revoked from anonymous and general authenticated access, and that restriction is enforced by an automated test.

We are a small technical team. We are not SOC 2 audited, and we have not commissioned a third-party penetration test. We conduct internal security reviews of our own codebase and track findings to resolution.

11. International Users

We do not offer the Services in the EU or the UK and do not target users there. Registration requires a U.S. phone number. Information you provide is stored in the United States, and if you access the Services from outside the U.S. your information is transferred to and processed in the United States.

12. Third-Party Services

Our app integrates with:

• Google Sign-In: if you choose to register or sign in with Google
• Google Maps Platform: for maps, geocoding, and place search
• Amplitude: for product analytics
• Sentry: for crash and error reporting
• Supabase: for database hosting, authentication, and file storage
• Twilio: for delivering one-time sign-in codes and optional event texts by SMS
• Resend: for delivering transactional email
• Expo: for push notification delivery and app updates

These services have their own privacy policies. We are not responsible for their practices.

13. Children's Privacy

14. Changes to This Policy

This policy describes our practices as they exist today. If we introduce a feature that involves collecting, using, or sharing personal information in a way this policy does not already describe, we will update this policy before that feature becomes available to you, rather than relying on general language written in advance.

For material changes we provide at least 30 days' advance notice by email or in-app notification, along with an opportunity to review the change before continuing to use the Services, and the option to delete your account if you disagree.

Check the "Last Updated" date above for the current version.

15. Contact Us

Related Documents:

• Terms of Service
• Community Guidelines
• Safety Resources (available in the app)