Privacy Policy
Outting is built and operated by ReactForge INC (“we”, “us”, or “Outting”). This policy explains what information Outting collects, why, who else sees it, and how you can get it deleted. It applies to the Outting mobile app and the small set of backend services it talks to.
1. Information we collect
1.1 Directly from you
| What | Why |
|---|---|
| Phone number | Your only sign-in credential. Outting has no password and no email/social login. Your phone number is never shown to anyone in your circle. |
| Display name | Shown to people who share a circle with you, so they know who is available. |
| Year of birth only | Never a full birthdate. Used solely to confirm you meet the minimum age to use Outting (see §7, Children’s Privacy). |
| Device time zone | Used to schedule signals and standing (recurring) plans at the right local time. |
| Meeting place (as text) | Whatever you type or pick from address search, e.g. “the rink” or a searched address. If you search and select a specific address, we store the coordinates of that place so a map thumbnail can be shown — we never read or store your device’s live location, and no location permission is ever requested from your phone. |
| Activity text | A short free-text label for what you are doing (e.g. “shoot pucks”), or one of a handful of preset options. |
| Status updates | Inside an active meetup, you can send one of exactly four fixed updates — “on my way”, “running late”, “I’m here”, or “can’t make it”. There is no free-text chat anywhere in Outting. |
1.2 Generated by using the app
| What | Why |
|---|---|
| Circle membership | Which circles (private groups) you belong to, and, if you created one, that circle’s name and invite code. |
| Availability signals | When you say you are free, for what, and until when — plus who else joins. |
| Session (meetup) history | Which meetups you took part in, how long the app measured you as present, and who else was there. |
| “Present” time | While a meetup is running, Outting tracks whether the app is in the foreground (and, on Android, whether the screen is off) to measure time spent off your phone. This is based on app and screen state only — it is never GPS or any other location signal. |
| Points and streaks | Earned automatically from present time and attendance, per the rules shown in the app. |
| Push notification token | Only if you grant notification permission. Used to tell you when someone in your circle is free, or when your plan changes. |
1.3 What we do not collect
- No GPS or continuous location. Outting never requests location permission and has no code path that reads your device’s location.
- No photos or media uploads.
- No free-text chat or messaging of any kind.
- No advertising identifiers, no ad SDKs, no third-party analytics or tracking pixels.
- No social graph beyond the private circles you explicitly join.
- No password — there is nothing to collect because none exists.
2. Who can see your information
Outting is built around circle-sealed visibility, enforced at the database level, not just in the app’s screens:
- Your name and availability are visible only to people who share a circle with you. There is no discovery, search, or public profile.
- Your phone number is never shown to anyone else, in or out of your circles.
- The admin of a circle you belong to (the member who created it) can see the circle’s member list and manage it — rename the circle, remove a member, reissue the invite code, or delete the circle entirely. Admin powers stop there; an admin cannot see anything about you outside circles you share with them.
- If an account belongs to someone under 13 and a parent has completed Outting’s consent process for that account, that parent can see the member list of that account’s circles. See §7 for when this applies.
3. Third parties we rely on
Outting does not sell your information, and does not share it for advertising. A small number of infrastructure providers process data on our behalf, strictly to run the service:
| Provider | Role |
|---|---|
| Supabase | Hosts our database, authentication, and realtime updates. Nearly everything described in §1 is stored here, access-controlled by database-level security rules. |
| Twilio | Delivers the one-time SMS code used to sign in. Receives your phone number for that purpose. |
| Google Maps Platform | Powers address search and map thumbnails for meeting places you search for. Requests are proxied through our own server so a Google API key never ships inside the app. |
| Expo / Firebase Cloud Messaging (Android) / Apple Push Notification service (iOS) | Deliver push notifications, if you have enabled them. |
| Resend | Sends the one-time parental consent email, only in the case described in §7. |
These providers may process information on servers outside the country you live in. Where that applies, it is solely to provide the service above, under their own security and privacy commitments.
4. How long we keep information, and deleting your account
You can delete your account at any time from inside the app (Circle → your account → Delete my account), with no need to contact anyone. Doing so:
- Immediately erases your name, phone number, year of birth, push token, time zone, and any parent contact information on file.
- Signs you out of Outting everywhere.
- Removes you from every circle you belong to. If you administered a circle, it passes to another member automatically, or is deleted if you were the only one left.
- Deletes your points balance and any plans you had scheduled that had not happened yet.
What is not deleted, and why: a record that you took part in a specific past meetup is kept, because that meetup is also part of the history of the other real people who were there — deleting it would silently rewrite their history and their earned points. That record is stripped of every personal detail first: no name, phone number, or any other identifying information remains attached to it. Full details are on our https://www.outting.app/account-deletion page.
Deleting your account cannot be undone. Signing in again with the same phone number afterward starts a brand new, empty account.
5. Notifications and quiet hours
Push notifications are opt-in and can be turned off at any time in your phone’s settings. Even when enabled, Outting enforces a quiet-hours window (9pm–7am local time) and a daily cap on availability notifications, so the app cannot page you constantly by design.
6. Security
Data in transit is encrypted (HTTPS/TLS). Access to your data is enforced by database-level security rules scoped to the circles you belong to, rather than relying solely on the app’s own code to keep people out of data that is not theirs. There is no password to be stolen or reused, because Outting has none.
7. Children’s privacy
Outting currently requires every account holder to be at least 13 years old, enforced both when an account is created and whenever a profile is updated. We do not knowingly collect personal information from anyone under 13. If we learn that we have, we will delete it.
Outting’s codebase includes machinery to support verified parental consent for younger members (an emailed approval link, and ongoing visibility for the approving parent into that child’s circle membership), built to satisfy COPPA and Canada’s PIPEDA. That path is not active for new accounts today. If a future version of Outting reopens membership to under-13 users, this policy will be updated first, and that update will describe exactly what changes.
8. Your choices and rights
- You can review and edit your name and other profile details from within the app at any time.
- You can leave any circle, or remove your standing/live availability, at any time.
- You can delete your account entirely, as described in §4.
- Depending on where you live, you may have additional rights to access, correct, or request a copy of your information. Contact us using the details in §10 for anything not covered by the in-app controls above.
9. Changes to this policy
If we make a material change to how Outting collects or uses information, we will update this page and change the effective date above. Continued use of Outting after a change takes effect means you accept the updated policy.
10. Contact us
Questions, requests, or concerns about this policy or your information: support@reactforge.com