Privacy

1The short version

Your friends see a neighborhood, not a pin. We never ask for Always location and never record a trail — the only background event is arriving at a place your crew saved (a place name, not coordinates). No ads in your recommendations. No selling data. Delete everything anytime.

2What we collect

• Your phone number — hashed at rest; it's your login.
• Your name and photo, if you add them.
• Your groups, saved spots, and plans.
• Coarse location by default. Precise location only in the moments you enable it: while you're at a spot your crew saved, while you're heading to a plan you joined, or when you've turned on precise sharing for a specific group.
• The contacts you pick — the limited picker only. We never upload your address book.
• Analytics — pseudonymous, cookieless, no tracking across apps.

3What we don't

• No Always-location. The app can't follow you around; we never ask.
• No address-book upload.
• No cross-app tracking, no ad targeting.
• No selling data. To anyone. Ever.

4Presence

By default friends see a blur — "around Fort Greene," never a point on the map. The blur is computed on your phone: in blur mode our servers receive a neighborhood id, not coordinates, so we can't leak what we never got. Presence is ephemeral — it expires within 24 hours and is never stored as a trail. Visits are remembered as places ("Winona's, Thursday"), not paths. Ghost mode freezes your pin for any crew, silently.

5Group learning

333 learns what your group likes — wine bars over dive bars, parks over cafés — from what your group picks, skips, and returns to. That learning belongs to the group: it's used only for your group's suggestions, never advertising, and it's deleted with the group.

6Guests

Friends without the app can RSVP to a plan from the browser. A guest shares a name and a phone number at RSVP — that's all. Guests can opt in to plan texts (none ship today); replying STOP always works instantly. Guests can ask us to delete their data at hello@333.place.

7Who we work with

8Retention and deletion

Deleting your account erases everything that's yours — profile, phone number, anchors, presence, taste events — from our database, our realtime servers, our storage, and by deletion requests to the vendors above. Your ID is scrubbed from group visit history, where you become "someone." The group keeps its aggregate memory — visit counts, streaks, crowns — so your friends don't lose their history because you left. Leaving a group is not deletion. You can export everything first: Settings → Export, or email us. Exports arrive within 30 days; deletion completes within 30 days.

9Age

333 is for ages 13 and up; we ask your birth year at signup. 13–17 get teen mode: presence is off by default and precise location is never available — the finder and drops work from coarse anchors. We don't knowingly collect data from anyone under 13; if we discover it, we delete it.

When this policy changes, we'll post the change here with a new effective date, and tell you in the app if it's material. Questions: hello@333.place.