Draft: not yet in effect. It still needs the owner's details and a legal review.
Privacy Policy
Effective date: [to be filled in]
Globeville helps neighbors in Denver find and go to events in their neighborhood. This policy explains what we collect, why, who can see it, how long we keep it, and the choices you have. "We" means Andrew Charles Dubin, which runs Globeville.
The short version
- We never store your home address. You type it once so we can find your neighborhood, and then it's gone, from our servers and from your phone.
- No ads, no tracking, no selling. We don't sell or rent your information, show ads, or use advertising or analytics tools that follow you around.
- Neighbors see your first name and last initial, never your email.
- Auto check-in stays on your phone. If you turn it on, your phone notices when you arrive at an event. We only learn that you attended, never where you are.
- We never read your contacts. Invites go through your phone's own share menu.
- You can delete your account in the app at any time (Settings → Delete account).
1. What we collect
When you create an account
- Email address and password. To sign you in and to send account emails, such as a sign-up code or a password reset. Your password is stored scrambled (hashed), so no one, including us, can read it.
- Profile: your first name and the first letter of your last name (we never ask for or store your full last name), an optional profile photo, your neighborhood and the local name you choose for it, your language (English or Spanish), and the kinds of events you're interested in.
- Your home address, used once. To find your neighborhood, we send the address you type to the U.S. Census Bureau's free address-lookup service, which returns map coordinates. We check which official Denver neighborhood they fall in, then discard both the address and the coordinates. We don't store or log them.
- Profile photos: before a photo is saved, we remove the hidden information photos can carry, such as where it was taken.
When you use the app
- Events you post: title, description, category, date and time, the meeting spot you type and its map pin, who can see it (your neighborhood, or only people with the link), and an optional Partiful link.
- "I'm going": the events you say you're going to, and which screen you tapped it on (for example the calendar or an invite link). The screen is only ever counted in totals, never shown per person.
- Attendance and badges: the events you attended, whether that was recorded by auto check-in or by tapping "Collect", and the badges you earn from them.
- Invite links you open, so you can keep seeing an event you were invited to from another neighborhood.
- Organizations: organizations you follow, request or help run, and what you post for them.
- Safety tools: reports you make about an event, an organization or a member, and the members you block.
- Settings: who can see your badges, your notification choices, and whether auto check-in is on.
- Push notifications: if you allow them, a notification address for your phone from Apple or Google, so we can send event reminders and cancellations.
- Last active time: a single date and time, updated at most once an hour, so we can count how many people use the app. It doesn't record what you did or where.
When you report a problem
Your message, an optional screenshot (with hidden location information removed), the app version, your phone model and system version, your language and the screen you were on. If you aren't signed in, the email address you give us so we can reply.
Location (auto check-in)
Auto check-in is optional and off until you turn it on. If you do, your phone's own location service watches for your arrival at events you said you're going to, even when the app is closed. This happens on your phone. Our server receives only "this member arrived at this event". We never receive or store your location, coordinates or location history. You can turn it off in the app's Settings or your phone's settings at any time.
Technical information
Like any website or app, our servers see your device's internet (IP) address when you connect. We use it briefly to stop abuse, such as too many sign-in attempts. Rate-limit counters expire within a day. Our hosting provider's request logs may include it for a limited time. We make sure these logs never contain addresses, coordinates or the text of problem reports.
Guests who RSVP on the web
Some events can be shared with an invite link. Anyone can open the link and see the event, without the app. We count how many times event pages are viewed, but not who viewed them. We remember your language choice in a cookie.
When guest RSVPs by text are available, a guest gives us their first name and a U.S. mobile number, confirmed with a code we text them, and tells us whether they agree to event texts and to a text after the event. We keep a record of that agreement, the events they RSVP to, and the texts we send. We use the number only for texts about the events they RSVP'd to. Hosts see a guest's first name, never their number. Reply STOP to any text to stop them all at once, or HELP for help.
What we don't collect
Your home address (after the one-time lookup), your location or location history, your contacts, your browsing history, payment information, advertising identifiers or your full last name. We don't use third-party analytics, advertising or crash-reporting tools.
2. How we use it
- To run the app: show you your neighborhood's events, let you post events and say you're going, record attendance and badges, and show your impact.
- To send you account emails, and the notifications and texts you've agreed to.
- To keep the community safe: review reports, remove content that breaks our Terms of Use, and stop abuse.
- To understand whether the app is working, using counts only (for example, how many people signed up this week). These counts never show who you are.
- To fix problems you report.
We don't use your information for advertising, and we don't make automated decisions about you that have legal or similarly significant effects.
3. Who can see what
- Other members see your first name and last initial, your photo, your neighborhood, the events you post (including the meeting spot), and your badges (unless you choose to hide them in Settings). They never see your email address.
- Who's going: members see only how many people are going, not who. The host of an event, and its organization's admins, can see the names of the people going so they can plan. For resource fairs and donation drives, hosts see only the count. Hosts never see who didn't come.
- People with an event's invite link can see that event, including from another neighborhood. The meeting spot is shown on the web page only to guests who have RSVP'd, and never in link previews.
- Organizations: an organization's page, events and impact numbers are public in the app. The member who posts for an organization isn't shown.
- Our team can see account information when needed to run the app, answer you, or review a report. Access is limited and protected by two-step sign-in.
4. Who we share it with
We don't sell or rent your personal information, and we don't share it for advertising. We use a small number of service providers who handle information for us, only to provide their service:
- DigitalOcean: hosts our servers, database and photo storage, in the United States.
- Postmark: sends our emails.
- Expo, Apple and Google: deliver push notifications. They receive your phone's notification address and the notification text, such as an event's title and time, never its meeting spot.
- U.S. Census Bureau address lookup: receives the address you type when you join, as described above.
- Maps: event maps are shown by Apple Maps on iPhone and Google Maps on Android, which load map images for the area shown. "Open in" hands an event's location to the maps app you pick.
- Twilio (when guest texts are on): sends texts to guests who asked for them.
- A translation service (if we turn one on): would receive an event's title and description when you ask to read it in your language, never anything about you.
We may also share information if the law requires it, to protect someone's safety, or as part of a transfer of the app to a new operator, who would have to honor this policy.
5. How long we keep it
Your account, profile, attendance, badges and the basics of events you hosted (title, category, neighborhood and time) are kept as long as your account exists, because your history and impact are built from them. A daily job deletes the rest once it's no longer needed:
| What | Deleted |
|---|---|
| Meeting spots and descriptions of past events, and their translations | 1 year after the event |
| "I'm going" taps | 1 year after the event |
| Reminders that were sent | 30 days after sending |
| Phone notification addresses | After 90 days unused, when you log out on that phone, or when you delete your account |
| Badge celebrations you've already seen | 90 days after you see them |
| Reports (events, organizations, members), problem reports and their screenshots | 1 year |
| Sign-ins unused for 90 days, and expired email codes | As soon as they stop working |
| A guest's name, phone number and consent records | 30 days after the last text we sent them, unless they have another event coming up or joined the app |
Backups of our database are kept by our hosting provider for a short period and then replaced.
6. Your choices and rights
- Change your information in the app: your name, photo, interests, language, badge visibility and notifications.
- Turn off auto check-in, notifications or location permission at any time.
- Block a member so you no longer see their events.
- Delete your account in the app (Settings → Delete account). This removes your sign-in, profile, photo, interests, "I'm going" taps, attendance, badges and notification addresses. Upcoming events you posted are cancelled, and past ones show "Former neighbor" instead of your name. Problem reports you sent are kept without your name or email, so we can still fix the problem. If you can't use the app, see how to ask us to delete your account.
- Get a copy, or ask us to correct or delete your information, by emailing [email protected] from the email address on your account. We'll answer within 45 days. We won't treat you differently for asking.
Depending on where you live, including Colorado, you may have legal rights to access, correct, delete or get a copy of your personal data, and to opt out of its sale or use for targeted advertising (we do neither). Email us to use them. If we turn down a request, you can appeal by replying to our answer.
7. Children
Globeville is not for children under 13. We don't knowingly collect information from anyone under 13. If you believe a child under 13 has an account, email us and we'll delete it.
8. Security
All connections to Globeville are encrypted (HTTPS). Passwords are stored hashed. Photos and screenshots are stored privately and shown only through short-lived links. Our team uses two-step sign-in. No system is perfectly secure, but if a breach affects your information, we'll tell you as the law requires.
9. Changes to this policy
If we change this policy, we'll update the date at the top. If a change matters, such as a new kind of information or a new way we use it, we'll tell you in the app or by email before it takes effect.
10. Contact us
Andrew Charles Dubin
4438 Logan Street, Denver, CO 80216
[email protected]