Privacy Policy
Expr is an app for discovering and hosting events and connecting with the people you meet there. This policy explains what information we collect when you use the Expr app and website, why we collect it, who can see it, and the choices you have.
Questions about this policy or your data can be sent to admin@expr.live.
Information you give us
Account
- Your email address and username.
- Your password, if you sign up with email. It is stored only as a one-way hash; we never store or see the password itself.
- If you sign in with Google or Apple, the email address and name your Google or Apple account shares with us. With Apple you can choose to hide your email, in which case we receive a private relay address instead.
- Your role in the app (attendee or host).
- The invite code you joined with, and the codes you share with others, so we know who invited whom.
Joining the waitlist
- If you ask for access in the app, your name and email address, and when you asked. We send a code to that email to confirm it is yours before adding you.
- If you join the waitlist on our website, your email address, when you joined and the country your request came from. We do not keep your IP address for this.
Profile
- Information you choose to add: full name, bio, profile photo, date of birth, gender, address, city, social media handles, interests, and an "open to" status (work, hire or meet).
Content and activity
- Posts and their photos, comments, likes and shares.
- Stories, which expire after 24 hours.
- Events you create, including the venue, its map location and photos; events you join; reviews you write.
- Direct messages and event group chat messages.
- Follows, connections, connection requests and blocks.
- Tickets you buy for paid events. Payments are processed by Stripe: we receive the amount, the currency and a payment reference, never your full card or bank details.
- Messages you send us through the Contact Us form, including the name and email you enter.
- Reports you file about content or people you find inappropriate, including the reason and any details you add. The person you report is not told who reported them.
Information collected automatically
- Location. If you allow it, the app shares your device's location so we can show events near you. We keep only your most recent position and when it was updated. You can turn location off in your device settings at any time.
- Photo location. The app removes location data (EXIF) from photos before they are uploaded. A post only shows a place if you choose to tag one.
- Device information. A push notification token for your device, and the time zone your device reports.
- Server logs. Like most online services, our servers record technical information about requests, such as IP address and time, to keep the service secure and working.
How we use your information
- To create and secure your account, including sending verification and password-reset codes by email.
- To show you events, posts, stories and people, including events near your location.
- To deliver messages and send notifications you have not turned off (for example new likes, followers, messages, shares and event updates). You can control push notifications in the app's notification settings.
- To let hosts manage their events and attendees.
- To respond to messages you send us.
- To prevent abuse, review reports, enforce blocks, and keep the service safe.
We do not sell your personal information, and we do not use it for advertising.
Who can see your information
- Other users can see your public profile: username, full name, bio, profile photo, social handles, interests and "open to" status, along with your follower and connection counts.
- Your email address, password, date of birth, gender, address and exact location are not shown on your public profile.
- Posts are visible to everyone or only to your followers and connections, depending on the visibility you choose. Stories are visible to the audience you choose, or, for event stories, to that event's host and attendees.
- Public events are visible to everyone; private events only to people with the link. Hosts can see who has joined or requested to join their events.
- Direct messages are visible to you and the other person. Event chat messages are visible to the event's host and attendees.
- If you block someone, they can no longer see your posts, stories or profile, and you can no longer see theirs.
Service providers
We use a small number of companies to run Expr. They process data only on our behalf:
- Amazon Web Services: hosting, database, and photo and video storage.
- Resend: sending emails, such as sign-in, verification and invite codes.
- Stripe: processing payments for paid events.
- Google and Apple: Sign in with Google or Apple, if you choose to use them.
- Expo: delivering push notifications to your device.
- Cloudflare: hosting our website and its waitlist, and domain name services.
We may also disclose information if required by law, or to protect the safety of our users or the public.
Keeping and deleting your information
We keep your information for as long as your account exists. Stories are removed after 24 hours, and verification codes expire after 10 minutes.
You can delete your account at any time in the app. Deletion is permanent and cannot be undone. It removes your account, profile, posts, stories, comments, likes, follows, connections, notifications, uploaded photos, and reports you filed or that were filed about you. It also deletes the events you host that have not ended yet, that were cancelled or never published, or that nobody joined, along with their guest lists. Events you hosted that have already ended and had guests stay for the people who came, shown as hosted by "Deleted user"; their group chat, photos and reviews are removed. Messages you sent in event group chats remain so the conversation still makes sense for other attendees, but they are shown as from "Deleted user" and are no longer linked to you. Direct message conversations are deleted.
Your choices and rights
- View and edit your profile at any time in the app.
- Choose who sees each post, and turn notification types on or off.
- Turn off location access in your device settings.
- Delete your account in the app.
- Contact us at admin@expr.live to request a copy of your data or to ask any question about it. Depending on where you live, you may have additional rights under local law, and we will honour them.
Security
Connections to Expr are encrypted with HTTPS, passwords are stored as one-way hashes, and access to our systems is restricted. No service can guarantee perfect security, so please use a strong, unique password.
Children
You must be at least 18 to use Expr, as our Terms of Service say. We do not knowingly collect information from anyone younger. If you believe someone under 18 has created an account, contact us and we will delete it.
Changes to this policy
We may update this policy as Expr changes. When we do, we will update the effective date above, and for significant changes we will let you know in the app.
Contact
Email: admin@expr.live