Privacy Policy

1. Who is responsible

Againli, Inc., a Delaware corporation, whose registered office and address for legal notices is c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States, is the controller of the personal data described here. Againli, "we", "us" and "our" mean Againli, Inc..

For anything about your personal data, use Your data and privacy in your Againli account, or the contact form at againli.com/contact. We have not appointed a data protection officer at this stage. If that changes, this page will say so and give the contact details.

2. What we collect

• Account: email address, password credentials handled by our authentication provider, and the record of the terms and standards you accepted.
• Profile: first name, date of birth, city, general area, languages, phone number, and a photo if you upload one. A phone number is required so that one person holds one account. When you delete your account we keep a one way hashed form of your email address and phone number, which cannot be read back, only so that a closed or restricted account cannot immediately be recreated.
• Children, for the mothers walk only: walks are paused, so we are not collecting this now. Where a member added children in the past, we hold only the broad age range chosen for each child, so that walks could group parents at a similar stage. We do not collect a child's name and a child never has an account.
• Compatibility answers: life stage, friendship intent, social style, lifestyle, interests, plus any optional prompts you choose to answer.
• Availability: the evenings and windows you can meet, and how far you are willing to travel.
• Sex: collected once, held privately, used only to keep Circle composition balanced. It is never used in compatibility scoring and is not shown to other members. Gender is optional and also private.
• Circle activity: RSVPs, attendance, messages in your Circle, meetup feedback, connection choices and check-in responses.
• Safety records: reports you make, reports about you, blocks, case notes and enforcement outcomes.
• Reliability signals: attendance outcomes, late cancellations and no-shows.
• Payment: membership status, plan, and identifiers from our payment provider. We do not receive or store your full card details.
• Technical: the browser user agent recorded with a waitlist submission to prevent abuse, plus ordinary server logs kept by our hosting provider.

Your choice about who you would like to see again is private. A one-sided choice is never revealed, hinted at, reported to the other person or used to form a Circle. Only a mutual choice can become a visible connection in My People and a positive continuity input for a future Circle.

We do not ask you for special category data such as health, religion, political opinion or sexual orientation. Some practical fields are free text, for example dietary or access needs for a meetup, so you can choose to write something there that reveals information of that kind. Please share only what is needed for the logistics of the meetup. Anything you write there is used to organise the meetup, and it is not used to score compatibility or to match you.

3. Why we use it, and on what legal basis

Each purpose below is matched to the legal basis we rely on for it. Where we rely on legitimate interests, we have weighed our interest against your rights, and you can object at any time by contacting us. Where we rely on consent, you can withdraw it at any time without affecting anything sent before you did.

• Creating your account and taking steps you ask for before you buy anything: Account details, first name, city, country, age confirmation. Legal basis: Performance of a contract, and steps taken at your request before a contract.
• Running your Membership, Circles and Single Ticket meetups: Compatibility answers, availability, languages, general area, age band, membership status. Legal basis: Performance of a contract.
• Keeping Circle composition balanced and running women only Circles: Sex, held privately and never used for compatibility scoring. Legal basis: Performance of a contract.
• Running Circle logistics, coordination and service messages: RSVPs, attendance, Circle messages, meetup feedback, transactional email. Legal basis: Performance of a contract.
• Taking payment, issuing receipts and keeping accounting records: Payment status, payment provider references, purchase and refund records. Legal basis: Performance of a contract, and legal obligation for tax and accounting records.
• Recording your acceptance of the Terms and your withdrawal requests: Policy versions accepted, timestamps, purchase reference, withdrawal statements. Legal basis: Legal obligation, and performance of a contract.
• Trust and safety, reports, blocks, cases and enforcement: Reports you make or that concern you, blocks, case records, restrictions. Legal basis: Our legitimate interests in keeping members safe and enforcing our rules, and legal obligation where one applies.
• Reliability signals such as attendance and no-shows: Attendance outcomes, late cancellations, no-shows. Legal basis: Our legitimate interests in a service that people can rely on.
• Preventing fraud, spam and abuse, and keeping the service secure: Hashed IP address, user agent, submission time, security events. Legal basis: Our legitimate interests in service integrity and security.
• First party product and service analytics, with no advertising trackers: Aggregated in-product events already generated by using the service. Legal basis: Our legitimate interests in understanding and improving the service.
• Optional updates and marketing: Email address and your consent record. Legal basis: Consent, which you can withdraw at any time without affecting past sending.

4. What other members see

Before a Circle session is confirmed, other members see nothing about you. After confirmation, the people attending see your first name, your photo if you uploaded one, and any prompts you chose to share. Your answers, availability, sex, gender, one-sided connection choices, feedback, reliability record and safety records are never shown to other members.

5. Who else receives data

We share personal data only with service providers acting on our instructions. These are the providers we actually use:

• Supabase: Database, authentication and file storage. Account, profile, matching, Circle, safety and billing status records.
• Stripe: Payments and subscription billing. Payment and subscription data. Card details go to Stripe and are never held by us.
• Resend: Transactional email delivery. Email address, name and the content of service emails we send you.
• Lovable: Application hosting and delivery. Requests to the service, which necessarily include technical connection data.

We do not sell personal data and we do not share it for advertising. We may disclose data where the law requires it, or where it is necessary to protect someone's safety.

6. International transfers

Some of these providers process data outside the European Economic Area, including in the United States. Where personal data leaves the EEA, we rely on the lawful transfer mechanisms each provider makes available, such as an adequacy decision or framework where one applies, including the EU-US Data Privacy Framework, and, or, the European Commission's Standard Contractual Clauses together with the provider's supplementary safeguards. You can ask us which mechanism applies to a specific provider at any time.

7. Deleting your account

You can delete your account at any time from your account settings. Deleting your account removes your profile and access to Againli. We may retain limited records where necessary for safety, fraud prevention, legal obligations, payments, disputes, or enforcement. Anything we keep is kept only as long as it is needed for that purpose or for as long as the law requires, and it is never shown to other members. Deleting your account stops any future Membership renewals and does not create a refund or a credit.

8. How long we keep it

Retention is set out record by record in Data Retention and Deletion. In short: account and matching data live as long as your account, safety records can outlive it where that is needed to protect other members, and billing records are kept for the period the law requires.

9. Security

• Access to member data is restricted at the database level, per member.
• Safety records are restricted further, to the Againli team and safety reviewers.
• Photos are served through short-lived signed links, not public URLs.
• Changes made by staff to member records are written to an append-only audit log.
• Data is encrypted in transit.

10. Your rights

• Access a copy of the personal data we hold about you
• Correct data that is wrong or out of date
• Delete your account and the data tied to it
• Receive your data in a portable format
• Object to, or ask us to restrict, certain processing
• Withdraw consent where we relied on it, such as optional updates

Use Your data and privacy in your Againli account, or the contact form at againli.com/contact, signed in where you can. Some rights have limits, for example where a safety record must be kept to protect someone else. We will tell you when that applies.

Signed-in members can download a copy of their data, correct it, or ask for deletion from Your data and privacy. What we store in your browser is described in Cookies and Local Storage.

11. Complaints

Tell us first through Your data and privacy in your Againli account, or the contact form at againli.com/contact and we will try to put it right. If you are in the EU or the EEA, you may lodge a complaint with the data protection supervisory authority of the Member State where you habitually reside, where you work, or where you believe the alleged infringement took place. You do not need to contact us first, although we would like the chance to put things right.

12. Children

Againli is for adults aged 18 and over. We do not knowingly collect data from anyone younger, and we remove such accounts when we find them. The only data we hold about a child is the broad age range a parent chose for a mothers walk while that experience ran, described in section 2. A child cannot create an account, is never shown to other members, and that record is deleted when the parent removes it or deletes their account.

13. Changes to this policy

We update this page when what we do changes. The date at the top always reflects the current version, and we tell members about material changes before they take effect.