Privacy Policy

• Account info: your school email and password (stored only in hashed form), or your Google sign-in if you use it.
• Profile: your name, the college we read from your school email (or one you type in yourself), class year, major, and anything you choose to add — photos, interests, prompts, social handles, about me.
• Activity: events you host or join, chat messages, friend connections, groups, the praise tags you give after an event, the invites you send and answer, the clubs you follow or help run, and the hosts you follow.
• After-event and arrival choices: the people you mark “See again” after an event, and whether you said you're coming solo to an event. Both are private; see “Who can see what” below.
• Party marketplace activity: admission requests and their outcome, optional notes to hosts, door check-ins, host and guest praise, blocks, and safety reports.
• Notifications: a short in-app record of things that involve you — invites, friend requests and accepts, posts from clubs and hosts you follow, party request updates, a reminder two hours before an event you joined, and a mutual “See again” match. These are cleared automatically after 90 days (30 days once read), and you can delete them any time.
• Push notifications (only if you allow them): your device's push token, so we can send the two-hour event reminder to your phone (iOS only). Every other notice stays in the app. Turn reminders off under Settings → Notifications, or turn off notifications in your phone's settings.
• Purchases: what you bought (Pulup Plus, a profile style, or an event boost), when, whether it was refunded, and the payment provider's reference for it. Card details go straight to Stripe or Apple; we never see or store them.
• Campus point: a single point for your college — taken from our campus list or the campus you typed in, never from your device's location — rounded to about 100 meters and used to show nearby events and people. It's part of your profile, so other signed-in students can see it. It's a fixed point, not tracking.
• Precise live location (only if you turn it on): your current position, shared only with the friends or groups you choose.
• Consent records: when you accepted these policies, confirmed you're 18 or older (we don't keep your date of birth), turned on location sharing, or agreed to a photo verification check.
• Technical basics: the usual server logs needed to keep the service running and secure. We don't run advertising or third-party analytics trackers.

To run the app you asked for: show events and people near your campus, let attendees talk to each other, help you meet the same people again, keep your friends and groups straight, and share your location with the people you pick. We also use it to keep Pulup safe — through reports, blocks, and limits on accounts that break the rules. Pulup doesn't give people public scores or rankings; the one exception is a party guest's reliability tier, based on verified check-ins, which hosts see when you ask to join their party. To see whether Pulup is helping people meet again, our team looks only at campus-wide totals (for example, how many people went to an event with someone again); any total under 5 is hidden, and no names or ids are shown. We don't use your data for advertising, and we don't build profiles of you for anyone else.

Some of what Pulup handles is sensitive under privacy laws: your precise live location (only if you turn it on), the photo verification check (only if you choose it), and your account login. We use it only to provide what you ask for and to keep Pulup secure — never to infer things about you, for advertising, or for profiling — so there's nothing extra to limit. We ask for your consent before collecting precise location or running a photo check, and you can withdraw it at any time.

• It's off by default. We ask for your explicit opt-in, separately from these terms, before collecting it.
• We only keep your latest position — never a history or trail of where you've been.
• It's only sent while Pulup is open on your device, and only while a share you set up is active.
• Only the people you pick can see it, and only until the time you chose.
• It's deleted when you pause sharing or your last share ends. As a backstop, positions that haven't been updated for 24 hours, or that nobody is allowed to see anymore, are cleared automatically every hour.

• Your profile is visible to other signed-in students once you've finished setting it up, including your college or campus if you add it. Campus names are self-reported, not verified enrollment or your live location. Your email address is never shown to anyone.
• Events that are upcoming or happening now, and how many people are going, are visible to other students signed in with a school email, and stay visible for a week after they end. Friends-only plans are the exception: only the host, people going, people invited, and the host's accepted friends can see them. They never appear on shared links or in notices to the host's followers.
• Who's going (names and photos) is visible to the host and to other people going. Your accepted friends can also see that you're going, until 24 hours after the event ends. After that, an event's attendee list is visible only to the host and the people who were there. If you block someone, neither of you sees the other in attendee lists.
• Familiar faces: on an event you host or joined, you may see a count of people going whom you've been to an event with before. It's a number only — it never names anyone, and it never counts friends or anyone you've blocked.
• Coming solo: if you say you're coming solo, nobody sees that you did. People who can see the event see only a total like “3 others coming solo”, and only when at least two people going chose it and not all of them did. Leaving the event removes it.
• “See again” picks are private. Nobody — including the person you picked — sees your picks unless they picked you too. When two people pick each other, both are told and become friends, just as if one had accepted the other's friend request. Picks can be made for a week after an event, and blocking someone removes any picks between you.
• Event chats are visible only to attendees of that event, and to moderators when a message is reported. Attendees can post until the event is cancelled or a week after it ends.
• Party locations: discovery shows only an approximate area. The exact address and pin are available only to the host, club officers managing the party, and admitted guests. Invite-only parties are not shown in general discovery.
• Party applications and check-ins are visible to the applicant and party managers. Public trust summaries use positive feedback from verified check-ins; private notes and reports are never shown as public scores.
• Blocks hide both people from each other across profiles, parties, invitations, guest lists, and chats. Safety reports are visible only to authorized moderators.
• Your live location is visible only to the friends and groups you share it with.
• Praise: the positive tags people give you after a shared event (like “Welcoming”) appear on your profile as counts, along with how many meetups you've been to. Pulup doesn't rate people: the app no longer asks for or shows thumbs up or down ratings. Ones given before November 2026 are kept until you delete your account and are included in your data download.
• Friends and groups are visible only to the people in them. Other students may see how many friends you have in common with them, and how many past events you've been to together, as numbers only.
• Hosts you follow: the host can see that you follow them; nobody else can.
• Invites are visible only to the person who sent them and the person who received them. Friends, people in a friend group with you, and officers of a club you follow can invite you to events they're part of.
• Clubs: a club's name, handle, logo, description, campus, and its list of officers and followers are visible to other signed-in students. Following a club shows your name on that list; unfollow at any time to remove it.
• Shared event links (pulup.io/e/…) show an event's title, time, the start of its description, how many are going, the host's first name and campus, and the club if there is one, to anyone who has the link — including people without an account. The address is shown only to students signed in with a school email. Links never show the exact map pin, the attendee list, or the chat; they show nothing for a friends-only plan or an invite-only party unless you can already see it; and they stop working once the event is over.

We email your school address for account reasons — confirming your address, resetting your password, and important notices about these policies. If you leave it on, we also send a short email when a friend invites you to an event, at most one every few hours. Turn invite emails off under Settings → Notifications; invites still appear in the app. We don't send newsletters or marketing email.

Two features use an AI service provider acting on our behalf. We don't use either for advertising, and we don't use your selfie or your captions to train AI models.

• Photo verification (optional): compares a selfie with your profile picture. See “Biometric data” below for exactly how.
• Event drafts from a caption: when you paste an event caption to start an event, the text is sent to the AI service to fill in a draft that you check before posting. We don't keep the pasted text or the AI output — only a small usage record (when you used it, for which club, how many fields you changed, and whether you posted the event), used to limit overuse and to improve the drafts.

We use service providers to run Pulup, and they process data only on our behalf and under contract:

• hosting, the database, and account email delivery;
• Google Maps, which receives the map area you're looking at and, when you place a pin, its coordinates so we can show an address (that lookup goes through our hosting provider's connector). When Google's map can't load, the map is drawn from OpenStreetMap data served by OpenFreeMap, which receives the map area you're looking at and your IP address, like any website you visit;
• Apple's push notification service, if you allow notifications on iOS;
• an AI service, for the two features described above;
• Stripe for purchases on the web, and Apple (through RevenueCat) for purchases in the iOS app. They keep their own records of your purchases, including the email used to pay, under their own privacy policies.

We may disclose information if required by law, or when we believe in good faith it's needed to protect someone's safety. We never sell your data.

Pulup keeps a small amount of information in your browser so it works smoothly: your sign-in session, your map theme, and which chats you've already read. There are no advertising cookies.

Wherever you live in the US — including under the California CCPA/CPRA and similar laws in Virginia, Colorado, Connecticut, Texas, Oregon, and other states — you can:

• Know and access your data: download a copy of the data your account can see from Settings → Privacy, instantly. For anything not in that file (for example, the internal records we keep to send reminders or limit requests), email us.
• Correct it: edit your profile at any time.
• Delete it: delete your live location, or your entire account, from Settings. Deletion from the app is immediate; backups are overwritten within 30 days.
• Withdraw consent for location sharing at any time by pausing or stopping it, for push notifications in your phone's settings, and for photo verification by emailing us — we'll delete your verification record and the verified mark.
• Opt out of sale, sharing, or targeted advertising: there's nothing to opt out of — we don't do any of it.

We won't treat you differently for using any of these rights. You can also email us to make a request, or have someone you've authorized do it for you; we'll verify it's you (usually by asking you to write from your account email) and respond within 45 days. If we turn down a request, reply with “Appeal” within 60 days and we'll answer within 60 days; if you still disagree, you can contact your state's attorney general.

We haven't sold or shared personal information for advertising in the past 12 months, and we don't track you across other sites. That means Do Not Track and Global Privacy Control signals have nothing to switch off; if that ever changes, we'll treat a Global Privacy Control signal as a request to opt out.

Pulup is only for people 18 and over, and we don't knowingly collect data from anyone younger. We ask for your date of birth when you sign up (we keep only the yes or no answer). If you believe someone under 18 has an account, contact us and we'll close it and delete its data.

• Account and profile data are kept until you delete your account.
• Live location: latest position only, removed as described above.
• Exact party locations are deleted 24 hours after the party ends. Optional application notes are cleared after the event; the minimal request outcome and verified check-in remain for safety, reliability, and account history.
• When you delete your account, your profile, photos, messages, praise, “See again” picks, coming-solo choices, friends, groups, follows, consents, and location are deleted right away, and Plus stops renewing on the web (on iOS, cancel it in your Apple settings). Events you were hosting that haven't happened yet are cancelled. Past events stay on the record without your name, so the people who were there keep their history.
• Purchase records are kept after you delete your account, for refunds and bookkeeping. They hold the product, time, whether it was refunded, the payment provider's reference, and an internal account id that no longer points to any profile — not your name or email.
• Routine backups are overwritten on a rolling basis within 30 days.

Data is encrypted in transit and at rest, passwords are stored only as salted hashes, and every request from the app is checked against access rules in our database, so people only see what this policy says they can. No system is perfect; if we learn of a breach affecting you, we'll tell you as the law requires.

If we change this policy in a meaningful way, we'll ask you to review it again in the app before you continue.