Privacy Policy
Lobby is a neighbourhood friendship app. This policy explains what we collect, why, who we share it with, and the choices you have. We don't sell your personal information, and we don't use it for advertising.
What we collect
| Data | Why | Who can see it |
|---|---|---|
| Email and password (hashed) | Your account and sign-in | Only us |
| Date of birth | Confirming you're 18+; showing your age | Neighbours see your age, never your birthday |
| First name, bio, interests, "always down for" | Your profile | Neighbours in your community |
| Profile photos (at least 5) | Your profile | Neighbours in your community, once checked; our moderators |
| Instagram handle | Shown on your profile so neighbours can find you there | Neighbours in your community (or only connections, depending on settings) |
| Home building | Placing you in the right community | Only you and us — never other members |
| Location readings while the app is open | Confirming you're near home | Nobody. Readings are checked and discarded — we keep only the dates you checked in and when your current access pass expires |
| Verification selfie | Confirming your photos are you (see "Biometric information") | Our review team; optionally an automated face-comparison service |
| Posts, plans, messages, connection requests | The features you use | The people you share them with in your community |
| Reports and blocks | Safety and moderation | Our moderators (blocks are private) |
| Push notification token | Sending notifications (which never contain message text) | Only us and the notification service |
Photos are re-encoded on your phone before upload, which removes embedded location and camera data.
Biometric information
When you verify, we compare a live selfie with your profile photos to confirm they show the same person. A moderator compares them by eye. If automated checking is enabled, the selfie and photos are also sent to Amazon Web Services Rekognition, which calculates a face-similarity score and does not store the images. We ask for your explicit consent before you take the selfie, and record when you gave it.
Retention and destruction: the selfie is deleted as soon as a decision is made, and at the latest 30 days after you submit it. We don't create or store face templates or faceprints. We keep only the outcome (approved or not, when, and the reason shown to you). We never sell, lease or trade biometric information, and we don't disclose it except to the processor named above or where required by law.
Who we share data with
Service providers that process data on our behalf: Supabase (database, storage and authentication; hosted in the United States on Amazon Web Services, US East), Expo (push notification delivery), and — if automated verification is enabled — Amazon Web Services. We may disclose information if required by law or to protect someone's safety. If Lobby is involved in a merger or acquisition, data may transfer under this policy.
How long we keep it
We keep your account data while your account exists. Location readings are never stored. Expired access passes are deleted within an hour; rate-limit records after 2 days. Moving home deletes your previous check-in dates. When you delete your account, we delete your profile, photos, Instagram handle, date of birth, home building, check-ins, plans you host, your messages, requests, blocks, verification records and push tokens. Reports you filed are kept without your name; reports about you are kept for up to 180 days after review so we can act on abuse.
Your choices and rights
You can edit your profile, hide yourself from People, choose notifications, block people, and delete your account at any time in Settings → Delete account. Depending on where you live (for example California, Colorado, Virginia or the EU/UK), you may have rights to access, correct, delete or port your data, and to appeal our decisions. Contact support@meetlobby.app; we'll respond within 30 days (45 for California requests).
Children
Lobby is only for people 18 and older. We delete accounts we learn belong to anyone younger.
Security
Data is encrypted in transit. Access is restricted by row-level security so members can only read what they're allowed to see, and only while near home. No system is perfectly secure; tell us at support@meetlobby.app if you find a problem.
Limits of location checks
Location checks show that a phone was repeatedly near a building. They don't prove where someone lives, and phone location can be faked.
Changes
We'll post updates here and ask you to review important changes in the app.
Contact
Lobby (meetlobby.app) · support@meetlobby.app