Privacy Policy

Who's About is an app for organising real-world meetups with the friends, clubs and groups already in your life. This policy explains what personal data we collect when you use the app or this website, why we collect it, who we share it with, and the choices and rights you have over it.

1. Who we are

Who's About Ltd (company number SC880893), a company registered in Scotland, is the data controller responsible for your personal data. You can reach us at [email protected] for any question about this policy or how we handle your data.

2. Information we collect

Account & authentication

When you sign up we create an account via our authentication provider, AWS Cognito. Depending on how you choose to sign in, this includes your phone number, email address, or the basic profile information shared by Discord when you log in with a Discord account. We never see or store your Discord password.

Profile information

Your display name, profile photo, and any other details you choose to add to your profile.

Friends, groups & activities

The connections you make on Who's About — friend requests and acceptances, the clubs and groups you join or create (public or private), and the activities you host, join, or express interest in, including titles, descriptions, times and venues you enter.

Chat messages & attachments

Who's About chat exists to organise a specific activity: a chat thread is created automatically around a plan and is archived once it's done. We store message history, read receipts, and any images or files you attach (hosted on AWS S3) for as long as needed to provide this feature, as described in Section 6.

In-chat assistant

Typing a bot command (such as /bot) into a chat sends that message to our AI assistant, built on AWS Bedrock, which replies in the thread with suggestions like a proposed time, venue, or a summary of the conversation. Content-safety guardrails are applied to this processing. We do not use your chat content to train third-party foundation models.

Payment information

Where an activity or club involves cost-sharing or membership fees, any card or bank details you provide are collected and processed directly by our payment processor. Who's About does not store your full card number or bank credentials on our own servers — we retain only transaction records (amount, date, and participants) needed for receipts, disputes, and accounting.

Device, usage & notification data

To deliver push notifications and keep the app working reliably, we collect a device token, basic device/app information (such as OS version and app version), and usage data such as crash logs and which features you use.

3. How we use your information

• To create and secure your account, and verify it's you.
• To operate core features — friends, groups, activities, and chat.
• To power the in-chat assistant's suggestions and summaries.
• To process cost-sharing and membership payments, and keep accurate records.
• To send you notifications about activities, messages, and account activity.
• To keep the service secure, prevent abuse, and enforce our terms.
• To understand how the app is used so we can fix issues and improve it.

4. Who we share it with

We don't sell your personal data. We share it only where necessary to run the service, principally with:

• Amazon Web Services — our infrastructure provider (Cognito for authentication, RDS for our database, S3 for file storage, Bedrock for the in-chat assistant, and ECS for hosting), all within AWS's data-processing safeguards.
• Discord — only if you choose to sign in with Discord, to verify your identity.
• Our payment processor — to process cost-sharing and membership payments once that feature is live.
• Other members you interact with — your profile, and content you post to a group, activity, or chat, is visible to the other members of that group, activity, or chat as part of how the app works.
• Legal or regulatory bodies — where we're required to by law, or to protect the rights, safety, or property of Who's About or our users.

5. International transfers

Our infrastructure runs on AWS, which may process data in regions outside the UK. Where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses, or AWS's own compliance with UK and EU data-transfer requirements.

6. How long we keep it

We keep account and profile data for as long as your account is active. Activity chats are retained for a period after the activity is archived so you can look back on plans you made, and are deleted after that. If you delete your account, we remove or anonymise your personal data within a reasonable period, except where we need to keep records (such as payment records) to meet a legal obligation.

7. Security

We use industry-standard measures to protect your data, including encryption in transit, access controls on our production infrastructure, and secure authentication via AWS Cognito. No system is completely secure, but we work to keep your data safe and to respond quickly if something goes wrong.

8. Children

Who's About is not directed at children under 13, and we don't knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we'll remove it.

9. Your rights

If you're in the UK or EEA, UK GDPR / GDPR gives you the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data, or ask us to restrict how we use it.
• Receive a copy of your data in a portable format.
• Object to certain kinds of processing.

To exercise any of these rights, email [email protected]. If you're not satisfied with our response, you have the right to complain to the UK Information Commissioner's Office (ICO) or your local data protection authority.

10. Cookies

This website doesn't use tracking or advertising cookies. The app uses only the minimum local storage needed to keep you signed in and the app functioning.

11. Changes to this policy

We may update this policy as Who's About evolves — for example, as payments and push notifications move from development into the live app. We'll update the date at the top of this page, and where a change is significant we'll let you know in the app or by email.

12. Contact us

Questions, requests, or concerns about this policy or your data can be sent to [email protected].

← Back to home