Privacy Policy

GetStepIn ("we," "us," or "our") operates the GetStepIn mobile application and website platform (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your information.

GetStepIn is operated from California, United States. By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

We will incorporate as a California C-corporation. Until incorporation is complete, the Service is operated by its founders.

Information you provide directly

• Account information: Name, email address, and profile photo when you create an account.
• Authentication: If you sign in with Google, we receive your name and email from Google. If you sign in with Apple, we receive your name and either your real email or an Apple-generated private relay address — Apple gives you the choice to hide your real email at sign-in. We store whichever address Apple provides.
• Payment information: Credit or debit card details when purchasing tickets. Payment data is processed and stored by Stripe — we do not store your full card number.
• Organizer information: If you create an organizer account (must be 18 or older), we collect your organization name and banking/payout details through our payment processing provider.
• Communications: Messages or support requests you send us.

Information collected automatically

• Location: Approximate location (when you grant permission) to show nearby activities.
• Device identifiers: Push notification tokens to deliver activity reminders and announcements.
• Usage data: Screens visited, features used, and actions taken within the app, collected via third-party analytics providers. We do not send personally identifiable information (such as your name or email) to these providers — only anonymized usage events and a non-identifying user ID.
• Log data: IP address, device type, operating system, and app version for security and debugging.

Information collected by organizers

When you attend an activity or purchase a ticket, the organizer may collect additional information directly from you — including payments made through external methods such as cash, Venmo, Zelle, or PayPal. Information you provide directly to an organizer through those methods is governed by the organizer's own privacy practices, not this policy. GetStepIn is not responsible for how organizers handle data they collect independently.

• To create and manage your account.
• To process ticket purchases and issue refunds.
• To show you activities near your location.
• To send push notifications you have opted into (activity reminders, announcements from organizations you follow).
• To enable organizers to manage their activities, attendees, and payouts.
• To analyze usage patterns and improve the Service.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal information. We share information only as described below.

Service providers

We share information with third-party service providers who help us operate the Service, including:

• Payment processors: We use Stripe to process all payments and organizer payouts. Stripe may collect and use your payment data pursuant to its own privacy policy.
• Cloud infrastructure providers: Our database and backend infrastructure are hosted by third-party cloud providers. Your data is stored on their servers.
• Analytics providers: We use third-party analytics services to understand how the Service is used. Only anonymized, non-identifying data is shared with these providers.
• Push notification services: We use third-party services to deliver push notifications to your device using your device's push token.

We require all service providers to handle your information in accordance with applicable privacy laws and to use it only for the purposes we specify.

Organizers

When you purchase a ticket to an activity, the organizer of that activity receives your name, email address, and ticket details. This is necessary for them to manage attendance and communicate with you about the activity.

Legal requirements

We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of GetStepIn, our users, or the public.

Business transfers

If GetStepIn is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

We retain your account information for as long as your account is active. If you request account deletion, your account is immediately locked and permanently deleted after a 30-day grace period. During that grace period you cannot access the Service, but you may cancel the deletion and restore full access at any time.

After permanent deletion, we retain certain transaction records (purchase history, refund records) in anonymized form as required for financial and legal compliance. Your name and email are removed from these records; transaction amounts and identifiers are preserved.

Organizers' financial records associated with completed transactions are retained for a minimum of seven years as required by tax and accounting laws.

Depending on where you reside, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate information.
• Deletion: Request deletion of your account and personal data (subject to retention requirements above). You can initiate account deletion from your profile settings.
• Opt-out of analytics: You can disable analytics tracking in your app settings.
• Push notification opt-out: You can disable push notifications at any time through your device settings or in-app notification preferences.

California residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at legal@getstepin.com.

The Service is intended solely for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, please contact us and we will delete it promptly.

We use industry-standard security measures including encrypted connections (TLS), row-level security on our database, and access controls to protect your information. However, no system is completely secure. We encourage you to use a strong password and to notify us immediately if you suspect unauthorized access to your account.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information to them.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending a notification through the app. Your continued use of the Service after changes become effective constitutes your acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or how we handle your information, please contact us at: