Privacy

Launch interest list

If you join our launch list, we store your phone number, optional name and city, and when you agreed to receive launch texts. We use these details only to contact you about the 333 launch. Cloudflare stores the list. We do not publish or sell it. Consent is not required to use 333. Email hey@friendship.co with your number to be removed. We delete launch-list details within 12 months after launch, or sooner on request.

Earlier email-list signups remain stored for the launch emails those people requested. An email signup does not provide consent for text messages.

The short version

Your friends see a neighborhood, not a pin. We never ask for Always location and never record a trail — 333 reads your location only while the app is open. No ads in your recommendations. No selling data. Delete everything anytime.

What we collect

• Your phone number — hashed at rest; it's your login.
• Your name and photo, if you add them.
• Your groups, saved spots, and plans.
• Coarse location by default. Precise location only in the moments you enable it: while you're at a spot your crew saved, while you're heading to a plan you joined, or when you've turned on precise sharing for a specific group.
• Analytics — pseudonymous, cookieless, no tracking across apps.

What we don't

• No Always-location. The app can't follow you around; we never ask.
• No address-book upload.
• No cross-app tracking, no ad targeting.
• No selling data. To anyone. Ever.

Presence

By default friends see a blur — "around Fort Greene," never a point on the map. The blur is computed on your phone: in blur mode our servers receive a neighborhood id, not coordinates, so we can't leak what we never got. Presence is ephemeral — it expires within 24 hours and is never stored as a trail. Visits are remembered as places ("Winona's, Thursday"), not paths. Ghost mode freezes your pin for any crew, silently.

Group learning

333 learns what your group likes — wine bars over dive bars, parks over cafés — from what your group picks, skips, and returns to. That learning belongs to the group: it's used only for your group's suggestions, never advertising, and it's deleted with the group.

Guests

Friends without the app can RSVP to a plan from the browser. A guest shares a name and a phone number at RSVP — that's all. Guests can opt in to plan texts (none ship today); replying STOP always works instantly. Guests can ask us to delete their data at hey@friendship.co.

Text messages (SMS)

You get login codes by text — that's how you sign in. Separately, you can opt in to waitlist and plan texts. Message frequency varies, and message and data rates may apply. Reply STOP to any text to opt out, HELP for help. Opting out of texts isn't the same as deleting your account — your data stays until you delete it (Settings → Delete, or email us). We never share your number with advertisers, and texts are never a condition of using 333.

Who we work with

Where your data is processed

333 is operated from the United States on Cloudflare's global network. Your data may be processed in the US and in other countries where the vendors above run. Each of them is bound by contract — data processing agreements — to protect your data to a standard equivalent to ours, and we rely on standard contractual clauses where the law requires them for international transfers.

Security

Your phone number is hashed at rest; everything travels over TLS in transit. Precise coordinates are never written to our database — they live only in ephemeral realtime memory and expire within 24 hours. Access to production data is least-privilege, granted only to the people who need it. If a breach ever affects your data, we'll notify you and the authorities as the law requires. No system is perfectly secure, and we won't pretend otherwise — so we built 333 to hold as little as possible.

Retention and deletion

Deleting your account erases everything that's yours — profile, phone number, anchors, presence, taste events — from our database, our realtime servers, our storage, and by deletion requests to the vendors above. Your ID is scrubbed from group visit history, where you become "someone." The group keeps its aggregate memory — visit counts, streaks, crowns — so your friends don't lose their history because you left. Leaving a group is not deletion. You can export everything first: Settings → Export, or email us. Exports arrive within 30 days; deletion completes within 30 days.

Your rights

You can see your data, correct it, take it with you, and delete it — anytime. Settings → Export gives you a copy; Settings → Delete erases your account. Or email hey@friendship.co.

This satisfies your rights under California's CCPA/CPRA and the UK and EU GDPR — access, portability, rectification (correction), erasure (deletion), objection, and restriction — and similar laws elsewhere. We don't sell your data, and we don't "share" it for cross-context behavioral advertising, so there's nothing to opt out of. We won't discriminate against you for exercising any of these rights. You can complain to your local data protection authority — but email us first; we'd rather just fix it.

Age

333 is for ages 13 and up; we ask your birth year at signup. 13–17 get teen mode: presence is off by default and precise location is never available — the finder and drops work from coarse anchors. We don't knowingly collect data from anyone under 13; if we discover it, we delete it.

When this policy changes, we'll post the change here with a new effective date, and tell you in the app if it's material. Questions: hey@friendship.co.