Participant Privacy Standards

These standards apply whenever an Organizer or Participant receives personal data about another person through Up4it. They supplement the Terms of Service and Privacy Policy.

1. Use Data Only for the Shared Purpose

Use another person’s information only to coordinate, safely conduct, or follow up on the relevant Mood or Moment. Do not use it for unrelated advertising, profiling, recruitment, surveillance, or contact after the purpose has ended unless the person separately agrees or law permits.

2. Collect as Little as Possible

Do not ask Participants for information that is not reasonably necessary. Avoid collecting identity documents, health details, precise home addresses, emergency contacts, or other sensitive information through a public or broadly shared field.

If an activity genuinely requires sensitive information, explain why, who will receive it, how long it will be kept, and whether providing it is optional. Use a more secure method where appropriate.

3. Respect Audience and Confidentiality

• Do not add a person to a different Circle, mailing list, group, or service without permission.
• Do not publish attendance, contact details, conversations, or a precise private location outside the intended audience.
• Do not photograph, film, livestream, or identify another person without an appropriate legal basis and any consent required by law.
• Take particular care with minors, safety reports, accessibility needs, and health information.

An audience setting is not permission to copy or republish information elsewhere.

4. Keep Information Secure

Use reasonable access controls and protect exported or copied information against loss, unauthorized access, and accidental disclosure. Do not share login credentials. Notify Up4it and affected people promptly if information obtained through Up4it is exposed and notification is reasonably necessary or legally required.

5. Delete When No Longer Needed

Delete copies when the coordination purpose ends, unless continued retention is required by law, necessary for an unresolved safety matter or legal claim, or the person validly asks you to keep the information for another purpose.

6. Your Independent Legal Responsibilities

If you export, combine, or independently use another person’s information, you may become separately responsible as a data controller. Businesses, clubs, employers, and professional Organizers must provide any privacy information and fulfil any data-protection duties that apply to their own processing.

Up4it does not become your data processor merely because you use a Moment, Circle, or Community. See the Data Processing Addendum for Organizations.

7. Rights and Reports

Cooperate reasonably when a person asks what you hold about them or requests correction or deletion. Do not retaliate against a privacy request or report.

Report suspected misuse to support@the-corner.io under the Reporting and Appeals Policy. Up4it may restrict or terminate accounts for violations and may preserve relevant evidence where lawful.