Privacy Policy
1. Introduction
In or Out ("we," "us," or "our") operates the In or Out platform, a recreational team organizing service available via web application and SMS. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
Account Information
When you create an account, we collect your email address, display name, and optionally your phone number. If you join a team, your team manager may add your name, email, and phone number on your behalf.
Usage Data
We collect information about how you interact with the platform, including RSVP responses and event participation history. This data helps us improve the service.
Device and Log Data
We automatically collect standard log information such as browser type, the site that referred you, pages visited, and timestamps.
Product Analytics and Session Replay
We use Mixpanel to understand how people use In or Out, so we can fix problems and improve the product. What we send to Mixpanel is pseudonymous: it never includes your name, email address, phone number, or anything you type, and Mixpanel cannot tell who you are.
- Instead of your account ID, Mixpanel receives a scrambled identifier that only our servers can link back to your account.
- We send the actions you take (for example, answering IN or OUT or creating a game), the type of page you're on (never its full address), and general traits such as your role and plan.
- Analytics requests go through our own servers, so Mixpanel does not receive your IP address or location.
- For a small sample of signed-in sessions we record a session replay: a visual playback of page layout, scrolling and taps. All text on screen and everything you type is masked, and images are hidden. Pages with personal links, such as guest RSVP and invite pages, are never recorded.
3. How We Use Your Information
- To provide and maintain the In or Out service
- To send event notifications, RSVP reminders, and status confirmations via email or SMS
- To facilitate team communication and event coordination
- To improve the service
- To provide AI-powered features via web and SMS channels
- To detect and prevent fraud or abuse
- To comply with legal obligations
4. SMS and Text Messaging
If you provide your phone number and opt in to SMS notifications, we may send you text messages related to:
- Event notifications and RSVP reminders
- Status update confirmations
- AI assistant responses when you interact with us via SMS
Message frequency varies based on your team activity and settings. Message and data rates may apply. You can opt out of SMS at any time by replying STOP to any message or by disabling SMS notifications in your account settings. For support, contact us at support@inorout.co.
We do not sell, rent, or share your phone number with third parties for their marketing purposes. Phone numbers are used solely for delivering the In or Out service.
SMS services are provided through Twilio. Your phone number is shared with Twilio solely for message delivery. See Twilio's Privacy Policy for details.
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your data in limited circumstances:
- With your team: Your name, RSVP status, and optionally your contact information are visible to team managers and other team members as part of normal event coordination.
- Service providers: We use third-party services that process data on
our behalf, and each receives only what it needs:
- Supabase and Vercel host the app and its database.
- Resend (email) and Twilio (SMS) receive your email address or phone number and the message meant for you, only to deliver it.
- Mixpanel receives pseudonymous usage data as described in "Product Analytics and Session Replay" above.
- OpenAI powers our AI assistant. Before anything is sent, we replace people's names and email addresses with placeholders and remove phone numbers; the real details are restored on our servers.
- Legal requirements: We may disclose information if required by law or to protect the rights and safety of our users.
6. Data Security
We implement industry-standard security measures to protect your data, including encrypted connections and secure authentication.
7. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we retain your data for 30 days in case you change your mind, after which it is permanently deleted. You may delete your account at any time from your account settings.
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Delete your account and data at any time
- Opt out of SMS notifications at any time
- Opt out of email notifications at any time
- Ask us to delete the pseudonymous analytics data linked to your account, by contacting support@inorout.co
You can manage all of these from your account settings.
9. Children's Privacy
In or Out is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a new effective date. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy, contact us at:
support@inorout.co