Privacy Policy

We collect the following types of personal data when you use Aftrs:

• •Account details: your name and phone number.
• •Profile information: profile photo, status updates, and other content you choose to share.
• •Location data: your approximate or precise real-time location, to show friends and nearby parties.
• •Device and usage data: IP address, device type, operating system, crash reports, and analytics information.
• •Sensitive information: certain information you provide (such as status updates, location, or photos) may indirectly reveal sensitive personal data (for example, sexual orientation or social habits).

We process special category data on the basis of Article 9(2)(e) UK GDPR.

Aftrs is only available to individuals over the age of 18. We do not knowingly collect data from anyone under 18. If we become aware that we have collected data from someone under 18, we will delete it.

Aftrs offers an optional contact sync feature.

If you choose to enable it, we may access, upload, and store the phone numbers contained in your device's address book. This may include phone numbers of both Aftrs users and individuals who do not use Aftrs.

If you turn on contact syncing, we may use this information to make it easier to connect with friends on the app by:

• •Helping you discover which of your contacts already use Aftrs
• •Allowing other Aftrs users to discover you on Aftrs where you appear in their address book

You will be asked whether you want to sync your contacts when you first log in. If you enable contact sync, you confirm that you have the right to share contact information from your address book for this purpose.

Contact data is stored while your Aftrs account remains active and is deleted or anonymised when your account is deleted, unless retention is required for legal or security purposes.

We use your personal data to:

• •Provide the Aftrs service (e.g. to connect you with friends, to suggest friends, to display locations and statuses).
• •Allow you to invite friends to Aftrs, using only the phone number you choose to share.
• •Operate, maintain, and improve the app.
• •Send you push notifications and emails relating to the app (e.g. updates, invitations, and reminders).
• •Monitor usage and trends for analytics and product improvement.
• •Comply with our legal obligations and enforce our terms.

These uses are based on contractual necessity, legitimate interests, consent, or legal obligations as described in Section 5 below. We do not sell or rent your data to third parties. Marketing emails are sent only where you have provided your consent, and you may unsubscribe at any time.

We share your data only with trusted service providers who help us run Aftrs, including:

• •Supabase (for database and hosting).
• •Mapbox (for maps and location services).
• •Twilio (for phone verification and messaging).
• •MailerLite (for email communications).
• •OpenAI (for data processing and analytics).
• •PostHog (or customer experience analytics).

These providers may store or process data in the UK, US, or other jurisdictions. We require all service providers to process personal data only on our instructions and under appropriate data protection agreements.

We may also disclose personal data where required by law or to protect our legal rights.

We do not share your personal data with advertisers or data brokers.

If you are located in the UK or EU, we rely on the following legal bases to process your data under GDPR:

• •Contractual necessity: to provide the Aftrs service you've requested.
• •Legitimate interests: to improve and operate the app safely. Where we rely on legitimate interests, we ensure that those interests do not override your fundamental rights and freedoms.
• •Consent: we send marketing emails only with your explicit opt-in consent. You can withdraw your consent at any time by clicking 'unsubscribe'.
• •Legal obligations: to comply with applicable laws.
• •Explicit consent: for processing special category data, including information that may reveal sexual orientation.

We retain personal data only for as long as necessary to provide the Aftrs service and fulfil the purposes described in this policy.

• •Account data is deleted or anonymised within 30 days of account deletion, except where retention is required for legal, security, or fraud-prevention purposes.
• •Contact data uploaded through the contact sync feature is stored while your account remains active and is deleted or anonymised when your account is deleted, unless retention is required for legal or security reasons.
• •Analytics data is retained for as long as necessary, typically up to 24 months, after which it is anonymised or deleted.
• •Certain limited information may be retained in secure backups for a short period before permanent deletion.

We may retain information for longer where required by law, to resolve disputes, prevent fraud, or enforce our terms. We will update this policy if our retention practices change.

Depending on where you live, you may have rights to:

• •Access the personal data we hold about you.
• •Request correction or deletion of your data.
• •Object to or restrict how we use your data.
• •Withdraw consent (where we rely on consent).
• •Receive your personal data in a structured, commonly used, machine-readable format (data portability).

To exercise your rights, email us at hello@aftrsapp.com.

You can also lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.