Privacy Policy

Updated September 24, 2026.

Here4it (here4it.app) is operated by Eastframe Technology LLC, Boston, Massachusetts. This policy explains what Here4it collects and how it is used.

What is stored

Here4It stores your first name (what others see), selected neighborhood, account username (only for signing in; nobody else sees it) and a salted password hash, your gatherings and commitments, invitation access, messages in a gathering’s group thread, reports, blocks and, if you add them, a profile photo and a photo for a gathering you host (shown to anyone who can see the gathering, including in shared link previews, and deleted when the gathering is cancelled). A session cookie keeps you signed in. Private-link guests provide a first name and an email address or mobile number so Here4It can identify them and notify them about the gathering. Accounts keep an email address or mobile number too, for plan updates and for the one-time code that resets a forgotten password; the code itself is kept only as a salted hash and expires after fifteen minutes.

If you sign in with Apple or Google, Here4it receives from them an identifier for your account with them, your first name and your email address (Apple may give a private relay address instead of your own), and never your Apple or Google password. We keep the identifier, to recognise you next time, and the email address, where plan updates go unless you choose another contact. For Apple we also keep a token that lets us withdraw Here4it’s access to your Apple ID when you delete your account. You can disconnect Apple or Google from your account screen once you have another way to sign in.

Who can see it

People with an invitation link can see its gathering, participants’ names and shared updates. Nearby gatherings can be discovered by other people using Here4It, who see the gathering and who is in but not the group’s messages until they join. Links can be forwarded. Account credentials, session secrets, email addresses and mobile numbers are not shown to participants. If you add your plans to your calendar, your calendar app reads them from a private link: anyone who has that link can see your plans (their titles, times, places and your own link to each), so keep it to yourself; you can reset it from any plan page. Do not post a home address or sensitive information in a gathering.

Storage and measurement

Data is stored in a database on a cloud server in the United States, with daily backups kept for seven days. We record basic usage analytics, such as which events were viewed, to understand whether invitations become commitments and plans. We do not use advertising trackers and we do not sell your data. When you submit a search, the words you typed and the titles and descriptions of the public catalogue are sent to OpenAI to rank results, and the words you typed may be sent to Google Places to find venues; nothing about you is sent with them. Titles, descriptions, names and group messages that others will read are checked by OpenAI’s moderation service before they are posted. Public event facts are fetched from attributed sources; following an external link is subject to that provider’s policies.

If you tap “Use my location”, your device’s location is sent once to find the nearest Here4it city; only that city is kept, never the location itself. Venues that subscribe to Here4it Partner pay through Stripe on Stripe’s own pages: Stripe receives their payment details, and Here4it never sees or stores a card.

Your choices

You can change your first name, username and neighborhood, leave a gathering, block a person, or delete your account and participation from your account screen. Deletion cancels your hosted gatherings and removes your first name, contact details, login credentials (including any Apple or Google sign-in, whose access we withdraw), photos, messages and analytics; the account row is anonymised and minimal moderation records can remain. Deleted data ages out of daily backups within seven days. Restoring a backup requires reapplying subsequent deletion requests. How to delete your account.

Notifications and contact

We send email and text messages only for the notifications you asked for: joining confirmations, plan notices, cancellations and password recovery codes. They go out through third-party delivery providers (an email provider and an SMS provider), which receive the address or number and the message in order to deliver it. Text messages are opt-in: they need your explicit consent, recorded with the moment you gave it, and stop when you turn them off or reply STOP. Message frequency varies with your plans, and message and data rates may apply. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Plan changes also appear on the shared page. If you turn on app notifications in the Here4It app, we keep your phone’s notification token to send the same plan notices through Apple (iPhone) or Google (Android); turning them off stops them, and signing out in the app or deleting your account removes the token. Contact us for access, deletion or moderation help.

Contact: [email protected]

Here4It is served over HTTPS. Use a password unique to Here4It.