Privacy

Last updated 2026-08-03b

Last updated 3 August 2026. This explains what Extrovee holds about you, why, who else can see it, and how to get rid of it. We've tried to describe what the software actually does rather than keep our options open.

The short version. We store what you tell us and what you do in the app so the concierge can pick better for you. We don't sell your data or run ads. Your friends only see what you switch on. Your chats go to AI providers so they can be answered. You can delete everything from Settings.

1. Who we are

Extrovee is an independent product operated from Washington, DC. Reach us at hello@extrovee.com for anything in this policy, including a request to see or delete your data.

2. What we hold

Account. Your email address, your name, and — if you set one — a password, stored only as a bcrypt hash we cannot reverse. Whether your email is confirmed. When you accepted these terms and which version.

Your taste profile. The interests, neighbourhoods, travel limit, energy level and timing preferences you set; anything you write in "in your own words"; and a home location if you provide one, used only to work out how far away an event is.

What you do. Events you save, say you're going to, hide, or add yourself; your swipes on the card deck; and a record of picks we showed you and which you chose, which is how the ranking improves.

Conversations. Your chat history with the concierge, and messages you post in a squad thread.

Friends and squads. Who you're connected to, which directions of sharing you've enabled, and which squads you're in.

Optional "About you". Relationship status, age band, gender, and who you're interested in. Every one of these is optional and can be left blank or cleared at any time. See section 4 — they get special treatment.

Technical. A session cookie so you stay signed in, your IP address transiently for rate limiting and abuse prevention, and a record of what each AI request cost us (token counts, not content).

We do not collect payment details, because we don't take payment. We do not track your location in the background — only the home point you choose to set.

3. Why we hold it, and on what basis

• To run the service — sign you in, remember your taste, answer your questions, show your friends' plans where you've allowed it. This is necessary to provide what you asked for.
• To keep it working and safe — rate limiting, abuse prevention, debugging, and understanding what things cost.
• To improve recommendations — which picks people accept and reject is what tunes the ranking.
• To understand who Extrovee is for — anonymous aggregate counts only (see section 4).

We do not sell your personal data, share it with data brokers, or use it for advertising or profiling by third parties.

4. The optional personal questions

Relationship status, age band, gender and who you're interested in are sensitive, so they're handled differently — and this is enforced in the software, not just promised here:

• They are never shown to your friends.
• They are never used in squad chats — the code strips them before anything reaches a shared thread.
• The AI cannot write them. It can read them to sharpen your own suggestions in your private chat, but it has no ability to infer or save them from what you say.
• They are counted only in aggregate ("how many users are in each age band"), never reported individually.

Leave them blank and nothing changes except the specificity of your picks.

5. Who can see your data

Your friends see your saved and going events only for friends you've switched sharing on for. It's off by default and one-way until both of you enable it. You can hide individual events, and turn a friend off at any time.

Your squads see the events you're going to or have saved, and your messages in that thread. Joining is the consent; leaving stops it.

Nobody else. Your chat history, your taste notes, and the optional questions in section 4 are yours alone.

6. Companies that process data for us

To run Extrovee we use a small number of providers, each handling only what they need:

• Anthropic and Google (Gemini) — AI models. Your chat messages, your taste profile and your taste notes are sent to them so your questions can be answered. They process it to return a response; we don't authorise them to use it to train their models.
• Supabase — the database holding everything above.
• Railway — where the application runs.
• Cloudflare — sits in front of the site, sees requests in transit.
• Resend — sends our emails (sign-in links, invitations, weekly picks), and therefore handles your email address.
• Google Analytics — see section 7.

These providers are mostly in the United States. If you use Extrovee from outside the US, your data is processed there.

7. Analytics and cookies

We set one essential cookie to keep you signed in. It's HTTP-only, sent only over HTTPS, and lasts 30 days.

We use Google Analytics to see which screens people visit and which actions they take — "signed up", "sent a message", "saved an event". We never send your email address, your messages, or the names of events you save; only anonymous counts. Google sets its own cookies. Block it with any tracker-blocking browser or extension and Extrovee works exactly the same.

No advertising cookies, no third-party trackers, no cross-site tracking.

8. How long we keep it, and deleting your account

We keep your data while your account is open.

You can delete your account yourself, from Settings. When you do:

• Your account is deactivated immediately — you're signed out everywhere, you disappear from friends' lists and squad rosters, and nothing of yours is shown to anyone.
• Your data is then permanently erased after 30 days. The gap exists so an accidental or hasty deletion can be undone — email us within it.
• After the 30 days: your profile, taste notes, swipes, chat history, saved and going events, friendships and your own squad messages are deleted.

Two honest exceptions:

• If you own a squad, the squad and its shared conversation are handed to the longest-standing other member rather than destroyed — deleting your account shouldn't wipe other people's group chat. Your own messages in it are still removed.
• We keep a minimal record that a deletion happened, and anonymous operational totals (what AI requests cost). Neither identifies you.

Backups may lag by a short period before they roll over.

9. Your rights

You can, at any time: see and edit your profile in Settings; export or ask for a copy of your data; correct anything wrong; delete your account; or withdraw consent for the optional questions by clearing them.

Depending on where you live you may have further rights — for example under the GDPR or California law — including to object to processing, to request portability, and to complain to your data protection authority. Email hello@extrovee.com and we'll act on any of these.

10. Children

Extrovee is not for under-13s and we don't knowingly collect their data. If you believe a child under 13 has an account, email us and we'll delete it.

11. Security

Traffic is encrypted in transit. Passwords are stored as bcrypt hashes. Sign-in links are short-lived and single-use, and sessions can be revoked. Sensitive profile fields are stripped in shared contexts by the code itself. No service is perfectly secure, but if something goes wrong that affects you, we'll tell you.

12. Changes

If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.

13. Contact

hello@extrovee.com — for questions, a copy of your data, or a deletion request.