Privacy Policy

Last updated: May 11, 2026

1% IRL is a pre-event connection app for invite-only social events. This policy explains what we collect, why, and what we don't do with it.

What we collect

• Account info: email address, password (stored hashed), and the display name and photo you choose for your profile.
• Profile content: Instagram handle (optional), bio, city, what you're looking for, vibe tags.
• Event activity: events you register for, who you send Signals to, who you pre-connect with, who you Lock-In with at an event, how many Keys you earn.
• Location at check-in: only when you tap Check in, and only to verify you're physically at the venue. We do not track your background location.
• Technical: standard server logs (IP, app version, device type) for security and debugging. We do not use third-party analytics SDKs in v1.

What we never do

• We do not sell your data.
• We do not train AI models on your messages or profile content.
• We do not share your data with advertisers or data brokers.
• We do not track you across other apps.

How we use what we collect

• Operate the product: show you events you can attend, show you who else is going, route Signals and DMs between cleared attendees, generate the QR codes that gate venue access.
• Verify access at events (check-in location, Lock-In PIN confirmation).
• Send push notifications about events you've opted into.

Who can see what

• Public to cleared attendees of the same event: your display name, photo, role/bio, vibe tags, and availability status.
• Only visible to you: events you have not been cleared for, your Keys ledger, your DM history (which is also visible to the person you DM'd, of course).
• Incognito mode: hides your profile from cleared- attendee lists. Signals still work.

Data retention

We keep your account and content while your account is active. When you delete your account from inside the app (Profile → Delete account), we immediately and permanently remove your profile, photos, Signals, Pre-Connections, Lock-Ins, Keys, and event registrations. There is no soft-delete or 30-day grace period.

Children

1% IRL is for adults. We do not knowingly collect data from users under 18 and we do not market the product to minors.

Where data lives

Account data is stored on Supabase (Postgres) in the US East region. Photos are stored in Supabase Storage. We use Stripe for any future payment processing.

Contact

Questions, deletion requests, or anything else: brendanarmstrong92@gmail.com.