← In-Suite

Privacy Policy

Effective: May 17, 2026

In-Suite ("we", "us", or "our") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your choices.

1. Information we collect

From Apple Sign-In

When you sign in, Apple shares your verified email address and (with your consent) your first name. If you choose to hide your real email, Apple gives us a relay address — we never see your real email.

Profile information you provide

• First name
• Optional bio
• Languages you speak
• Hotel facilities you're open to (pool, gym, lounge, breakfast, spa, dinner)
• Optional vibe tags
• Optional profile photo

Activity information

• Hotel you're staying at (chosen from our list)
• Activity details you create (venue, date, time, optional note)
• Join requests you send or receive

Messages

Messages you send through accepted activities are stored on our servers so the conversation persists across sessions. We do not use end-to-end encryption.

Push notification token

A device-specific token from Apple that lets us deliver push notifications. Stored on our servers and refreshed periodically.

Purchase information

When you buy a Pass, we store the Apple transaction ID, product ID, and timestamp. We do not see or store your payment method — Apple handles payment.

Blocks and reports

When you block another user or submit a report, we store who blocked or reported whom, the report reason and any details you added, and the timestamp. Reports also include a reference to the specific user, activity, or message they target. This data is used only for moderation.

Technical data

• Device type and OS version
• App version
• Crash logs (anonymized)

2. How we use your data

• To create your account and provide the service
• To match you with other guests at the same hotel or city
• To deliver messages between matched users
• To send push notifications about your conversations and join requests (we do not send marketing pushes)
• To process your in-app purchase and grant the corresponding pass
• To detect abuse, harassment, or fraud
• To review reports and moderate content. This may include reading a flagged conversation, deleting an inappropriate message or activity, and clearing an inappropriate avatar or bio. Routine messages are not read; access is scoped to the moderation queue.

We do not use your data for advertising. We do not sell your data.

3. Service providers

We rely on these providers to run In-Suite. Each only sees the data they need.

• Apple — Sign In, push notifications, in-app payments
• Supabase — database, file storage, realtime messaging (servers in the United States)
• Expo — over-the-air JS bundle delivery and dev tooling

4. Data retention

• Profile, activities, and messages: retained while your account is active
• Push tokens: deleted when you sign out or delete the account
• Purchase records: retained for tax and accounting purposes (typically 7 years per local law)
• Reports: retained indefinitely as a moderation audit record, even after the underlying content is deleted
• Moderation actions (deleted activities, deleted messages, cleared avatars or bios): the deleted content itself is gone; we keep a record of the action taken and which report it was in response to

5. Your choices

• Edit profile — change your name, bio, languages, or photo any time
• Block someone — open their profile → menu → Block. They disappear from your Discover and Messages, and you disappear from theirs. Unblock from the same menu or Profile → Blocked.
• Report — every profile, activity, and chat message has a Report affordance. We review reports within 24 hours.
• Delete account — Profile → Delete account. Permanently removes all your data within 30 days, including activities, messages, and photos.
• Push opt-out — turn off in iOS Settings → In-Suite → Notifications

6. Children

In-Suite is intended only for adults aged 18 and over. It is not directed to minors. If we learn we have collected data from anyone under 18, we delete it immediately.

7. International transfers

Our servers are operated by Supabase in the United States. By using In-Suite, you consent to your data being transferred to and processed in the U.S.

8. Changes to this policy

We may update this policy. The "Effective date" above will change when we do. Continued use after changes means you accept the new policy.

9. Contact

Questions about your data, or to report safety or moderation concerns: liphamju@gmail.com. We respond to safety reports within 24 hours.