Privacy Policy

Who we areWhat we collectHow we use itWho can see whatService providersHow long we keep itYour rightsSafetyEarly access list

Who we are

JoinBash is operated by EAO Holdings LLC ("JoinBash", "we", "us"). JoinBash lets people post plans — a dinner, a table, a trip, a hike — and lets others request to join them. We are the responsible party for the personal information described here. Contact: hello@joinbash.com.

JoinBash is only for people aged 18 and over.

What we collect

Information you give us

• Account: your mobile number (to sign in with a one-time code), your name and your date of birth (to confirm you're 18+).
• Profile: profile photo, bio, city, interests, languages and Instagram handle — all optional except your name.
• Email (optional): if you add one, we use it for account messages and — only if you tick the box — news and updates. Your email is never shown on your profile.
• Plans and activity: plans you post (title, description, date, area, venue, cost, flyer), requests to join, approvals, and messages in plan chats and private messages.
• Feedback: reports you make about people or content, and feature ideas you send us.
• ID verification (optional, for the verified badge): handled by our partner Veriff — see Service providers. We receive only the result (approved or not) and a reference number; we do not store your ID document or selfie.

Information collected automatically

• Location (only if you allow it, only while the app is open): used to show places, events and plans near you and how far away they are. We don't store your location history or track you in the background.
• Notifications: a device token so we can send you push notifications. You can turn them off in the app or your phone's settings.
• App diagnostics: when something goes wrong in the app, we record the error, the screen it happened on, your phone type, operating system version and app version, linked to your account so we can fix it.
• Places search: what you type into place and city searches is sent to Google to show suggestions.

We do not use advertising trackers and we do not sell your personal information.

How we use it

• To run your account and sign you in.
• To show your profile and plans to other people and let you join and host plans, chat and message.
• To show places, events and plans near you.
• To send notifications and, with your consent, emails about JoinBash.
• To keep JoinBash safe: checking ages, reviewing reports, blocking and removing people who break our Community Guidelines, and preventing fraud and spam.
• To fix bugs and improve the app.
• To create plan flyers with AI when you ask us to.

We rely on: performing our agreement with you (running the app), your consent (location, notifications, marketing emails, ID verification), our legitimate interest in keeping JoinBash safe and working, and legal obligations.

Who can see what

Information	Who sees it
Name, photo, bio, city, interests, languages, Instagram, verified badge, plans hosted/joined	Other signed-in JoinBash members
Public plans (title, date, area, cost, flyer)	Signed-in members, and anyone you share the plan link with
Private (invite-only) plans	Only you, your guests, and people you send the link to
Exact venue / address of a plan	Only the host and approved guests
Plan chat	Only the host and approved guests of that plan
Private messages	Only you and the person you're messaging
Mobile number, email, date of birth, location	Never shown to other members

People you block can't see your plans or message you. The JoinBash team can access account information when needed to run the service, respond to reports and keep people safe.

Service providers

We use trusted providers who process information for us under contract:

• Supabase — database, sign-in and file storage (servers in the United States).
• Amazon Web Services — website hosting and plan link previews.
• Infobip — sending sign-in codes by SMS, and emails.
• Google — Firebase Cloud Messaging for Android notifications, and Google Places for place and city search, place photos and opening hours.
• Apple — push notifications on iPhone.
• Veriff — optional ID verification. Veriff processes your ID document and selfie under its own privacy notice (veriff.com/privacy-notice) and tells us the result.
• OpenAI — generating plan flyers when you choose AI flyers. We send the plan details you enter; we do not send your name or contact details.

Some providers are outside your country (mainly in the United States and the European Union). We use providers that protect personal information to a standard comparable to POPIA.

We may also share information if the law requires it, to protect someone's safety, or as part of a business transfer (with this policy continuing to apply).

How long we keep it

• Your account information is kept while you have an account.
• Delete your account any time in the app: Settings → Delete my account. This permanently deletes your profile, photos, plans, requests, chats and private messages. Guests of plans you host are told the plan is off.
• Reports and safety records may be kept for up to 2 years after an account is deleted, to stop banned people from coming back.
• App diagnostics are kept for up to 12 months.

Your rights

Under South Africa's Protection of Personal Information Act (POPIA), Nigeria's Data Protection Act, the GDPR and similar laws, you can ask us to tell you what we hold about you, correct it, delete it, or stop using it for marketing. You can edit most information yourself in the app, and turn off emails and notifications in Settings. Email hello@joinbash.com and we'll respond within 30 days.

If you're unhappy with how we handle your information, please tell us first. You can also complain to South Africa's Information Regulator (inforegulator.org.za, POPIAComplaints@inforegulator.org.za) or your local data protection authority.

Safety and children

JoinBash is for adults only. We don't knowingly allow anyone under 18; if we learn someone is under 18, we delete their account. Meeting people from the internet carries risks — please read our Community Guidelines and safety tips in the app. JoinBash never handles payments between members; never send money to someone you haven't met.

Changes

We'll update this page if our practices change and show the new date at the top. For important changes we'll tell you in the app.

Early access list (joinbash.com)

If you joined our early access list on joinbash.com, we collected your first name, email, optional WhatsApp number, city, whether you want to host or join, your confirmation that you're 18+, and where you came from. We use it only to invite you when JoinBash opens in your city and send launch updates, based on your consent. It's stored with Supabase. We keep it until you've had a chance to create an account, or until you ask us to remove you. Email hello@joinbash.com to be removed.