← Back to Commons
This Privacy Policy explains how Commons ("we," "us," or "our") collects, uses, and protects your personal information when you use the Commons mobile app and website at joincommons.app (together, the "Service"). Commons is operated by Holt Holdings Equity Management LLC, a Georgia limited liability company.
We've tried to write this in plain English. If anything is unclear, email us at [email protected].
1. Information We Collect
Information you provide directly
- Phone number — required to sign in. We use it only for one-time SMS verification codes and to identify your account. We don't text you marketing messages.
- Name (first, optionally last) — shown to other users on RSVPs and friends lists.
- ZIP code — used to show events near you. Optional.
- Profile photo (optional) — if you upload one.
- Events you RSVP to, save, or host — stored so we can show them in your "My events" list and let your friends see what you're up to.
Information collected automatically
- Device type and OS version — for crash diagnostics and to render the app correctly.
- Approximate location (only if you grant permission) — used to show events near you. We don't track your precise location continuously.
- Basic usage data — which screens you view, taps and swipes, to improve the product. We do not sell this data.
Information we do NOT collect
- We do not collect your email address (unless you choose to email us).
- We do not access your contacts, photos, microphone, camera, or calendar without explicit permission.
- We do not track you across other apps or websites.
- We do not collect payment information. Commons is currently free.
2. How We Use Your Information
We use the information described above to:
- Provide the core features of Commons (showing events, letting you RSVP, etc.)
- Authenticate you when you sign in
- Show your name and avatar to friends and people you share an event with
- Send you SMS verification codes (only on sign-in attempts)
- Improve the product based on aggregate usage patterns
- Investigate and prevent abuse, spam, or violations of our Terms of Service
3. Information Sharing
We do not sell, rent, or trade your personal information. We share information only in these limited cases:
- With other users: your name, profile photo, and RSVPs are visible to other users on events you've publicly RSVP'd to or hosted.
- With service providers: we use Supabase (database hosting), Twilio (SMS verification), Cloudflare (web hosting), and Google Maps (mapping). These providers process data on our behalf and are bound to confidentiality.
- If legally required: we may disclose information in response to a valid court order, subpoena, or other legal process. We will resist overly broad requests where we can.
- In a business transfer: if Holt Holdings Equity Management LLC is acquired or merges with another entity, your information may transfer as part of that deal. You'd be notified.
4. Data Retention and Deletion
We keep your account and personal data for as long as you have an active account. You can delete your account at any time:
- In the app: tap your avatar → "Delete account" at the bottom of the profile screen.
- By email: send a deletion request to [email protected] from the phone number on file.
When you delete your account, we permanently remove your profile, RSVPs, saves, friends list, and any events you've hosted. Aggregated, anonymized usage data may be retained for analytics, but it cannot be linked back to you.
5. Security
We protect your data with industry-standard security measures: encryption in transit (HTTPS), authentication tokens that expire, row-level security at the database layer, and limited internal access. No method of transmission over the internet is 100% secure, but we work hard to protect your information.
6. Children's Privacy
Commons is intended for users 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, please email [email protected] and we will remove the account.
7. Your Rights
Depending on where you live, you may have rights to:
- Access the personal information we have about you
- Correct inaccurate information
- Delete your information (see Section 4)
- Object to certain processing
- Receive a copy of your data in a portable format
To exercise any of these rights, email [email protected]. We'll respond within 30 days.
8. California Privacy Rights (CCPA)
California residents have the right to know what personal information we collect, to request its deletion, and to opt out of any "sale" of personal information. We do not sell personal information. To exercise CCPA rights, email [email protected].
9. International Users
Commons is operated from the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US. By using Commons, you consent to this transfer.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you through the app or by SMS. The "Last updated" date at the top will always reflect the latest version.
11. Contact Us
Questions, concerns, or requests? Email [email protected].