Privacy policy
This policy covers the Headby website at headby.com and the Headby app. The first part covers the website; the section called "The Headby app" covers the app.
What we collect
If you join the early access list, we collect the email address you enter. Our hosting provider (Netlify) also records standard technical logs when you visit, such as your IP address, browser type and the pages requested.
How we use it
We use your email address to tell you about Headby, including when it opens near you. We use technical logs to keep the site secure and working. We do not sell your information.
Cookies and tracking
We use Google Analytics to count visits and see which pages people read. It sets cookies and records things like your approximate location, device and browser. We turn off Google signals and ad personalisation, and we do not use advertising cookies. For visitors in the European Economic Area, the UK and Switzerland, analytics storage is off unless you consent, and this site does not currently ask, so no analytics cookies are set. You can block analytics with your browser settings or the Google Analytics opt-out add-on.
Who we share it with
We share information only with service providers that help us run the website, measure visits and send email, and only so they can do that work for us. We may also disclose information when the law requires it.
How long we keep it
We keep early access emails until Headby launches in your area or you ask us to remove them, whichever comes first. Hosting logs are kept for a short period set by our provider.
The Headby app
This section applies to people who use the Headby app, including members who test early versions.
What the app collects
- Your phone number, used to sign you in with a code sent by text message. The code is sent by Twilio.
- Your profile: your name, username, photo and the area you choose, and the details you add to events you host or join, including photos and text.
- Events you create, requests to join, replies, attendance, contacts, and the messages you send in event chats and direct messages.
- Locations. When you host an event you drop a pin; the exact meeting point is shown only to people the host accepts. If you use the address search or the "use this pin" lookup, the text you type, or the pin's coordinates, is sent to our address provider (Amazon Location Service) to find or name the place.
- Notification details, if you allow notifications: a device token issued by Apple, your device's time zone and your notification choices. We use Apple's push service to deliver them. A notification can show the name of the event it is about on your lock screen. It never shows the address, the place, the time, or the text of a message. You can hide previews in iOS settings, and turn notifications off in the app.
How we protect your privacy in the app
- Your exact position stays on your phone. To show events near you, the app sends a coarse grid square about 3 miles (5.5 km) across, not your exact location. The dot that shows where you are on the map is drawn on your phone only.
- Event addresses are private until the host accepts you. On the map an event shows an approximate area. The exact meeting point and address are shown only to guests the host has accepted, at the time the host chooses.
- Rules are enforced on our servers, not only in the app. Who can see an event, an address, a photo or a message is decided by the database, so a modified app cannot read what it is not allowed to.
- You decide who can reach you. You can block members, report messages, and set who may send you requests. Event chats close after the event.
- Photos follow the event's audience. A photo you add to an event is shown to the people that audience allows (everyone who can see the event, or only accepted guests). Only add photos you are comfortable sharing with them.
- No advertising and no sale of your information. The app does not show ads, and does not currently include advertising or analytics software from third parties. We do not sell your information.
- Your contacts. The app does not currently read your phone's contacts. If we add that, we will ask you first, explain what is used, and update this page before it launches.
- Adults only. Headby is for people aged 18 and over.
Who the app shares it with
Providers receive only what they need to do work. Other members of Headby see the parts of your profile and events that the app shows them, and event hosts see the people who ask to join. We do not sell your information.
How long the app keeps it
In-app notifications are deleted after 90 days. Queued push notifications are deleted after 48 hours. We keep your account information while your account exists. You can ask us to delete your account and the information tied to it by writing to dev@headby.com.
Your choices
You can ask us to see, correct or delete the information we hold about you, or unsubscribe from our emails at any time, by writing to dev@headby.com.
Age
Headby is for adults aged 18 and over. We do not knowingly collect information from anyone younger.
Security
We use reputable providers and take reasonable steps to protect the information we hold. No system is perfectly secure, so we cannot guarantee absolute security.
Changes
We may update this policy. The date at the top shows when it last changed.