Privacy Policy
Effective August 24, 2026 · Last updated August 24, 2026 · Version 1.0
Plain English: we collect what's needed to keep an adults-only meetup community safe, we never sell your data, and other members never see your phone number, email, last name or date of birth.
On this page+
- 1. Our privacy principles
- 2. What we collect
- 3. Identity verification and sensitive data
- 4. How your phone number is used
- 5. What other members can see
- 6. Location
- 7. How we use your information
- 8. Who processes your data
- 9. Retention
- 10. Your choices and rights
- 11. Deleting your account
- 12. Security
- 13. No one under 18
- 14. Contact and changes
Our privacy principles
- Collect the minimum needed to run a safe 18+ meetup community.
- Never sell your personal data.
- Never show your phone number, email, date of birth or exact address to other members.
- Be specific about who processes what, and why.
What we collect
Account and identity: your legal first and last name, email address, date of birth (used to confirm you are 18+), phone number, and profile photo.
Profile: city and state, travel distance, bio, interests and vibe tags, what you're here for.
Activity: hangouts you create or join, attendance, check-ins, hangout chat messages, reviews you submit.
Safety and trust: reports you file or that are filed about you, blocks, trust feedback, moderation outcomes, and records of legal-policy acceptance.
Payments: a payment reference, amount, status and time for the $2.00 identity verification fee or any optional paid plan. We do not store full card numbers.
Verification: phone verification status, and the outcome of your Stripe Identity check.
Technical: device, browser and log information necessary to operate and secure the service.
Identity verification and sensitive data
Identity verification is performed by Stripe Identity. During that check Stripe may collect government ID documents, document and selfie images, and biometric-style comparison data derived from those images, and processes them under Stripe's own privacy practices.
Who's Down IRL™ does not receive or retain your ID document images. We receive the verification result and limited related status information.
Full detail is in the Verification Policy. Never send ID images through hangout chat or support messages.
How your phone number is used
Your phone number is used for verification codes, account security and authentication, fraud and duplicate-account prevention, and account or safety-related communications. It is never displayed to other members and is not sold or used for third-party advertising.
What other members can see
Other members see your first name, profile photo, city and state, bio, interests and vibe tags, your verification badges, and the hangouts you host or attend.
They never see your email address, phone number, last name, date of birth, exact address, payment identifiers, or any report or trust feedback about them.
Location
We use the city, state or ZIP and travel distance you provide — plus, only if you allow it, an approximate device location — to show nearby hangouts. We do not track your live location in the background and we do not publish precise coordinates for your home.
How we use your information
- To create your account and confirm you are 18 or older.
- To show you relevant nearby hangouts and let you join or host them.
- To operate hangout chat, check-ins and Share My Plan.
- To verify members and reduce fake, duplicate and banned accounts.
- To investigate reports and enforce our policies.
- To process payments for verification and optional paid features.
- To provide support and send service and safety notices.
- To keep records of policy acceptance and comply with legal obligations.
Who processes your data
- Our cloud backend and database provider — hosting, authentication, storage of profiles, hangouts and messages.
- Stripe — payment processing and Stripe Identity verification.
- Google — only if you choose Google sign-in.
- Phone verification and email delivery providers — sending codes and transactional email.
These providers act on our behalf under their own security and privacy obligations. We do not sell personal data, and we do not share it with advertisers.
We may disclose information where legally required, or where there is a credible risk to someone's safety.
Retention
We keep your account data while your account exists. After deletion, we remove your profile and content, except records we must retain for safety, fraud-prevention, legal, tax or accounting reasons — for example, ban records, report records and payment receipts.
We do not apply fixed, published retention windows. We retain personal information only for as long as reasonably necessary for the purposes listed below, and then remove or de-identify it where appropriate.
- operate the platform
- provide the services you request
- maintain account security
- prevent fraud and abuse
- investigate trust-and-safety incidents
- resolve disputes
- enforce platform agreements
- comply with applicable legal obligations
When you delete your account, we remove or de-identify your information where appropriate, subject to legitimate security, fraud-prevention, legal, payment or dispute-retention needs. Stripe Identity and other third-party processors may keep information according to their own policies and retention requirements.
Your choices and rights
- Edit or remove most profile details at any time in your profile.
- Control notification and privacy preferences.
- Block or report any member.
- Request a copy of your personal data.
- Request correction of inaccurate data.
- Request deletion of your account.
Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA/CPRA, including the right to object to certain processing. We do not sell or share personal information for cross-context behavioral advertising.
Deleting your account
You can request account deletion from your profile settings, or through Support. We confirm the request, then remove your profile, photo, hangouts you created and your membership in others, subject to the retention exceptions above.
Security
We use access controls, row-level database security and encryption in transit, and we limit sensitive data to authorized administrators. No online service can promise perfect security — use a strong, unique password and tell us immediately if you suspect account misuse.
No one under 18
Who's Down IRL™ is strictly for adults. We do not knowingly collect personal information from anyone under 18. If we learn an account belongs to a minor, we restrict and remove it. If you believe a minor is using the platform, report them immediately — see Reporting & Enforcement.
Contact and changes
Privacy questions or requests: Support.
whosdownirl@gmail.com
[OWNER REVIEW REQUIRED: business mailing / virtual address to be provided. No personal residential address is published.]
If we make a material change to this policy, we will update the effective date and, where appropriate, ask you to review and accept the new version.