Privacy Policy

Impecable (“Impecable”, “we”, “us”) is operated by [[COMPANY]], a company registered in [[JURISDICTION]] under number [[COMPANY_NO]], registered office [[ADDRESS]]. We are the data controller for the personal data described here.

For any privacy question, or to exercise a right below, contact support@impecablemembers.app.

You give us this when you apply and build your profile

• Identity: full name, date of birth, gender, occupation / job title.
• Contact: email address, Instagram handle.
• Location: your current city and any cities you add, and travel dates you choose to share.
• About you: a short bio, reasons for joining, the kinds of trips you’re looking for, “vibe” tags, dislikes, other free-text notes, and a favourite track (a Spotify track identifier only).
• Photos: a profile photo, optional gallery photos, and optional past-trip photos.
• A referral or access code, if you used one.
• Matching preferences (age range, gender, cities) that you set to be shown relevant members. These are never shown on your own profile.

We create or receive this as you use Impecable

• Your account identifier and membership status (including founding or seed status).
• Your computed age, derived from your date of birth. Your date of birth itself is never shown to other members — only your age.
• Plans you host or join, applications you send or receive, and invitations.
• Messages you send in a plan’s group chat or in a one-to-one connection, and your connections with other members.
• Members you save or dismiss while browsing, and which conversations you have read.
• Reports you make about another member, and reports made about you.
• If you suspend, block, or delete: records needed to give effect to that.

We collect this automatically

• Technical data from your device and connection — IP address, browser or app version, and similar — recorded in our hosting and security logs.
• Small items stored on your device (“local storage”): your login session, and a record of what you have already seen so unread badges work. We do not use advertising or analytics cookies. If we add analytics later we will update this policy and, where required, ask for your consent.

Payment data (only once paid membership is live)

• On the web, memberships are sold by Lemon Squeezy acting as Merchant of Record. Lemon Squeezy collects your card details, billing address and tax location directly; we never receive or store your card number. We receive only transaction metadata — which tier, status, and renewal dates.
• In the iOS app, memberships are sold through Apple using in-app purchase. Apple handles the payment and shares limited transaction data with us.

Under UK and EU data protection law we rely on the following bases:

• To provide the service (our contract with you): creating and running your account, showing your profile to other members, letting you host and join plans, powering chat and connections, and processing membership payments.
• Our legitimate interests: keeping members safe and the community in good order (reviewing applications and reports, acting on blocks and suspensions), preventing fraud and abuse, securing and improving the service, and understanding demand (for example the waitlist).
• Your consent: optional profile details you choose to add, sharing travel dates, and any future marketing email. You can withdraw consent at any time.
• Legal obligation: responding to lawful requests from authorities, and keeping transaction records for tax where required.

We do not sell your personal data, and we do not use it for advertising or to track you across other companies’ apps or websites.

Impecable is a social product, so some data is shown to other members by design:

• Your first name, age, city, job title, photo, bio, vibe tags, Instagram handle and favourite track are visible to other approved members while your account is active.
• Your full name becomes visible to a plan’s host and to the other accepted members of a plan you join.
• Messages you send are visible to the other people in that chat. If you delete your account, the text of your group-chat messages remains but is shown as from a “removed member”.
• Suspended and blocked members are hidden from browsing.

Your date of birth, email address, password, matching preferences, reports, and payment details are never shown to other members.

We use a small number of service providers who process data on our instructions under a data-processing agreement:

• Supabase — database, authentication, file storage and realtime messaging. Your data is stored in the United Kingdom (London).
• Vercel — application hosting and delivery.
• Resend — sending transactional email (confirmations, notifications).
• Lemon Squeezy — payment processing and, as Merchant of Record, seller of record for web memberships. Lemon Squeezy is also an independent controller for tax and fraud purposes.
• Apple and Google — app distribution and delivery of push notifications.
• Spotify and OpenStreetMap — track search and map tiles. These receive only what is needed to answer a request (a search term, map coordinates) and not your identity.

We may also share data where we must to comply with the law, to enforce our Terms, or to protect the rights and safety of members or the public — including reporting serious matters to law enforcement. If the business is sold or reorganised, data may transfer to the new owner under this policy.

Your data is primarily stored in the United Kingdom (London). Some providers (for example Vercel, Lemon Squeezy, Apple) may process data outside the UK and EEA, including in the United States. Where they do, the transfer is covered by an adequacy decision or by standard contractual clauses / the UK International Data Transfer Agreement.

• Account and profile data: for as long as your account exists.
• When you delete your account: your profile, photos and account are removed, and associated data is deleted or anonymised, within 30 days. Backups are overwritten on a rolling cycle after that.
• Group-chat message text is kept for the other participants but no longer linked to your name.
• Limited records may be kept longer where the law requires it — for example transaction and tax records (typically six years), and a minimal record of a serious safety action.

You have the right to:

• access the personal data we hold about you, and get a copy;
• have inaccurate data corrected — most of it you can edit yourself in your profile;
• have your data erased — you can delete your account in the app at any time (Profile → Account → Delete account);
• restrict or object to certain processing;
• receive certain data in a portable format;
• withdraw consent where we relied on it.

To exercise any of these, contact support@impecablemembers.app. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk), though we’d appreciate the chance to help first.

Impecable is strictly for adults. You must be 18 or older, and we check date of birth at application. We do not knowingly collect data from anyone under 18; if we learn that we have, we will delete it.

Data is encrypted in transit, access is limited to what each provider needs, and administrative access is restricted. No system is perfectly secure; if a breach occurs that risks your rights, we will notify the ICO within 72 hours and tell you where required.

We may update this policy. If a change is significant we will tell you in the app or by email before it takes effect. The date below shows the current version.