afterstamp.Privacy Policy
Draft for legal review. Items in [brackets] need to be filled in before launch.
Afterstamp is an app for going out: seeing where your friends are going, getting in at the door, and keeping a record of the nights you were there. That record is personal, so this policy explains plainly what we collect, who can see it, and how you stay in control. It applies to the Afterstamp apps and afterstamp.app, run by Zulapp LLC, a Colorado limited liability company, [mailing address] (“Afterstamp”, “we”).
What we collect
- Your account: email, password (stored hashed by our authentication provider) or, if you sign in with Google or Apple, the name, email and photo they share with us (Apple may give us a private relay email instead of your real one), name, @handle, photo, bio and home city. Your birthday, which we use only to confirm you’re 18 or older and to keep 21+ nights away from people under 21. It is never shown on your profile.
- What you do in the app: friends, close friends and blocks; RSVPs and plans (votes, stops, messages, home-safe check-ins); follows; likes, comments, saves and reports.
- What you post: photos and short videos (“moments”), captions, and the venue or night they’re attached to.
- Nights out: tickets, when you tapped “I’m in line” and when you were scanned at the door, bookings with hosts, and the stamps in your passport. Together these show which venues you went to and when, so we treat them as sensitive.
- Location: only while you use the app and only if you allow it, to show nights near you and measure distance. We don’t store your location history and never track you in the background.
- Device: a push notification token if you allow notifications, and basic technical logs (app version, errors) kept for a short time to run the service.
- Payments (when available): handled by Stripe. We receive a confirmation and the last four digits of the card, never the full card number.
- From the website: your email, city and role if you join the waitlist.
Who can see what
- Your plans and RSVPs: the audience you choose in Settings (friends, close friends or only you). “Go out privately” hides them from everyone until 10am.
- Your passport and stamps: the audience you choose. Only friends who can see your passport appear in “who you were with”.
- Your moments: your friends and people who were stamped in at that night, or everyone if you choose Public. Comments are visible to whoever can see the moment.
- Venues and hosts: the door list for their own nights (your name, @handle, photo, party size and check-in time), and counts. They don’t see your passport, friends or other nights.
- Blocked people can’t see your profile, plans, passport or moments.
How we use it
To run the app (showing nights, plans, tickets, recaps and your passport), to keep people safe (age checks, home-safe check-ins, reports and moderation; reported moments are first checked by an automated system, and a person reviews anything it hides or isn’t sure about), to send the notifications you’ve turned on, to measure line times and headcounts that we show only in aggregate, and to fix problems. We don’t sell your personal information, and we don’t share it for cross-context behavioral advertising. Sponsored nights are shown based on your city and the nights you browse, not on data bought from anyone else, and they’re always labelled.
Who we share with
- Service providers that run parts of Afterstamp for us under contract: Supabase (database, storage and sign-in), Expo, Apple and Google (push notifications), Stripe (payments, when available), OpenAI (automated review of reported content), Sentry (crash and error reports, tagged with your account id but not your name or email) and Google Workspace (our email).
- SoundCloud, Mixcloud and YouTube when you play a mix: their player runs inside the app and they receive what a normal visit to their site would show them.
- Venues and hosts as described above, for nights you RSVP to, book or are scanned into.
- The law: when we’re legally required to, or to protect someone’s safety.
- A buyer if Afterstamp is sold or merged, under this policy.
Your choices and rights
- Change who sees your plans and passport, and your notifications, in Settings.
- Delete any stamp, moment or comment.
- Download your data: Settings → Download my data gives you a copy of everything we hold about you.
- Delete your account: Settings → Delete account removes your profile, content, stamps, tickets and files. It can’t be undone. Group plans you started stay for your friends, without you.
- Depending on where you live (for example Colorado, California or Florida) you may have further rights, such as correcting data or appealing a decision. Email privacy@afterstamp.app and we’ll respond within the time the law requires.
How long we keep it
As long as your account exists. When you delete your account, we delete your data within 30 days, except where we must keep something by law (for example payment records) or to deal with a safety report. Backups roll over within [35] days.
Age
Afterstamp is for people 18 and older. We don’t knowingly collect data from anyone younger, and we delete accounts we find that belong to minors.
Security
Data is encrypted in transit and at rest, and access is limited by rules enforced in the database itself. No system is perfect; if something goes wrong, we’ll tell you as the law requires.
Changes
If we change this policy in a way that matters, we’ll tell you in the app before it takes effect.
Contact
privacy@afterstamp.app · Zulapp LLC, [mailing address], Colorado