LOBBI Privacy Policy

Effective date: October 11, 2026

Lobbi Social Inc., a Delaware corporation, owns and operates Lobbi and
is responsible for the personal information described in this policy (the
"controller" where that term applies). "We", "us", and "our" mean Lobbi
Social Inc. This policy covers the Lobbi app, lobbi.social, legal.lobbi.social,
invite pages, and support communications. It applies to visitors as well as
account holders. Contact support@lobbi.social
about privacy.

Our initial launch is intended for the United States and Canada. We are not
yet launching in the European Union. The regional rights below apply whenever
the relevant law applies; location outside a launch market does not itself
remove a person's privacy rights.

Lobbi is a social app for permanent groups ("Lobbis") and
small in-person plans ("Events"). An Event may be standalone or associated
with one Lobbi. Joining a Lobbi is lasting group membership; responding to an
Event is a separate RSVP and does not make you a Lobbi member. This policy
explains what we collect, why, who processes it, and the controls you have.

Sources of information

We receive information you provide, information generated when you use the
Service, and information other members provide about you, such as invitations,
messages, photos, attendance, or reports. Device permissions control optional
access to device features. Service providers return information needed for
features you request, such as place results, AI responses, and delivery or
security diagnostics.

What we collect

Account & profile. Phone number (used to sign in via SMS code),
email address (if you add one), name, date of birth, gender (optional),
home city, bio, interests, and the photos you choose for your profile.

Content you create. Lobbis you create (name, purpose, cover image,
membership, and membership invitations); Events you host (title, description,
date/time, location, cover image, entry details, audience, and optional Lobbi
association); Event invitations, RSVPs, attendance, and Event memory photos;
chat messages and media you send; and reports you file about users, Lobbis,
Events, invitations, or messages.

Location. If you grant permission, your device's location while using the
app, which may be precise unless you choose approximate location — used to show nearby Events and distances and, when you ask your Agent
about a place or the weather, to work out your approximate area. We do not
collect location in the background.

Calendar availability. Calendar features are optional. If you turn on
calendar import and allow calendar access, the app converts the calendars you
choose into busy start and end times on your device and sends only those
times to LOBBI. This calendar-import feature does not upload event titles,
locations, attendees, notes, links, or calendar names. This restriction does
not apply to Event details you separately enter or share in Lobbi. You can also add Busy times by hand, and you
choose whether each Lobbi sees your availability as group totals only or,
if you turn it on, as your named free times.

Your Agent. If you use your LOBBI Agent, we process what you type or say
to it, its replies, the plans and drafts it prepares, and the memories and
preferences you let it keep. Voice conversations are streamed to our AI
provider while you speak; we do not save the raw audio. If you attach a link
for your Agent to read, our servers fetch that one public page without your
cookies or account details, and pass its event details and a short excerpt to
your Agent's AI provider. Background memory is off until you turn it on.

Device, diagnostics & product interactions. Push notification tokens,
device type, and basic logs needed to run and debug the service. If the app
crashes, we may receive a crash report containing the error type, code stack,
app version, and device model and operating system — with identifying information and content filtered out by our crash-reporting
controls. If you turn on personalized matching, we
also collect a random app-install identifier that is not your account ID, a limited set of product
interactions (for example training completion, match views and decisions,
refinements, mutual matches, conversation intent, and outcome categories, and
counts and outcomes from Discover, chat, invitations, and Lobbis), and coarse
app-speed ratings (fast, acceptable, or slow) for startup and screen
loading. We do not send PostHog your account ID, profile, location,
prompts, rationales, messages, notes, or other free text.

Personalized matching and AI data. Personalized matching is off by
default. If you turn it on, we process the matching requests and agent messages
you submit; summaries of Lobbi activity and matching choices; a private derived
matching profile and embeddings; privacy-filtered candidate details; and the
AI-generated matches, rationales, editable Event drafts, proposed Lobbi
targets, agent replies, and introductions produced for you. Agent-created
Event drafts remain unsent until you review and publish them. Matching
activity may be used to personalize later suggestions.

Website visits and links. Our website hosts, Vercel and GitHub Pages,
process requests needed to deliver and protect the sites, including IP
addresses, browser/device information, requested URLs, timestamps, and
request or error information. Invite URLs contain a token that our servers
use to retrieve the permitted preview. Treat an invite link as information
that its recipients can forward. Our website does not add advertising
cookies, tracking pixels, or browser analytics scripts. Server and security
logs are still processed; a site without cookies is not a site without data
processing. External sites you visit have their own practices.

Support and safety. When you contact us, we receive your contact details,
request, and information you choose to provide. A report can include the
reported content and information about other members. We use it to investigate,
respond, enforce our rules, and meet legal obligations. Do not email passwords,
sign-in codes, identity documents, or unnecessary sensitive information.

Sensitive information. Private messages, precise location, and information
you choose to share about gender, dating preferences, health, religion, or
other personal matters may be sensitive under applicable law. Profile text,
photos, conversations, and AI requests can reveal such information even when
we do not ask for it. Do not submit sensitive information you do not want
processed for the feature you are using, or another person's sensitive
information without authority. This policy does not replace any separate
explicit consent required by law.

We do not access your device address book, collect background location,
read health records, collect payment-card or bank-account details through a
payment feature, or track your browsing across other websites. Information
you voluntarily include in messages or other content is still processed as
content. We do not show ads or sell personal information, and we do not share
it for cross-context behavioral advertising or cross-app tracking.

How we use it

• Run the product: maintain Lobbi membership and invitations, show Events to
  the right audience, keep Lobbi and Event chat separate, find times that work
  for a group, and deliver authorized notifications.
• Safety and moderation: screen photos and Lobbi and Event content, act on
  reports, and enforce our rules (some content is screened automatically
  before it is shown to others).
• Service communications: SMS sign-in codes and event notifications you
  can control in settings.
• Keep the app stable: diagnose crashes from redacted crash reports.
• Measure and improve personalized matching and app speed using
  consent-gated product-interaction analytics using a random install identifier.
• Create and personalize matches, matching rationales, editable Event drafts,
  suggested Lobbi targets, agent replies, introductions, and generated Event
  cover images. These outputs may be AI-generated.

If and to the extent the GDPR or UK GDPR applies, we use the following bases
for these purposes: performance of our agreement for account, membership,
chat, and features you request; consent for optional personalized matching,
associated analytics, and other processing presented as a choice; legitimate
interests in protecting people, preventing fraud, securing the Service,
responding to support, and diagnosing faults, balanced against your rights;
and legal obligations for required records and lawful disclosures. You can
withdraw consent or object to processing as described below. A device
permission or agreement to these Terms does not by itself supply every
consent that the law may require.

Canadian consent. For Canadian users, we collect, use, and disclose personal
information with valid consent, except where applicable law permits or requires
otherwise. Consent must reflect the purpose, sensitivity, and reasonable
expectations involved; sensitive or unexpected processing may require express
consent. Optional matching and device choices are described in this policy and
in the app. Contact our Privacy Officer to withdraw other consent or ask about
the consequences. We will explain any lawful restriction and any feature that
cannot work without the information. Accepting Terms or this policy does not
supply every required consent or permit unrelated uses.

Who processes it (our service providers)

We use these providers to deliver the listed functions. Authentication/SMS,
email, hosting, and other infrastructure providers may also use their own
subprocessors. A provider may separately process information for its own
security or legal obligations; a third-party service you choose to visit or
book with operates under its own terms. Exa, Open-Meteo, Google, and Yelp are
not sent your Lobbi account identifier as part of the listed requests.

Our primary database is hosted in the United States. Information may be
processed in the United States or other countries where our providers operate,
whose laws may differ from yours. Contact us for information about the
providers and any transfer safeguards applicable to your information. Use of
Lobbi does not waive protections required by applicable data-transfer law.
For Canadian users, this includes processing outside Canada and Quebec.
Information abroad may be accessible to that country's courts, law enforcement,
or national security authorities under its laws. Lobbi Social Inc. remains
accountable for information under its control, including information transferred
to a service provider for processing. Our Privacy Officer can answer questions
about foreign processing and the providers involved.

Agent and matching AI. Your Agent and personalized matching use the AI
providers above only after you agree to the in-app AI disclosure, which names
them and asks again when the list changes. Other AI providers may be set up
as alternates, but they receive none of your data unless a later version of
that disclosure names them and you accept it. Turning off personalized
matching stops new matching transfers. Separately requested features, such
as photo safety screening or Plan with Agent, have their own disclosures and
controls; the matching toggle does not disable every use of AI in Lobbi.

Plan with Agent. When you plan an Event with your Agent, the AI provider
receives what you type or say, plus the Event type, party size, approximate
area, price and style, date and time window, duration, and time zone of the
Event you are drafting. We do not send AI providers your draft's title or
description, its exact address or coordinates, the people you added to it, or
internal IDs; our servers enforce this before any request leaves LOBBI. To
plan, your Agent can look up nearby places, the weather, and the web. Only if
you have also agreed to the Agent and matching AI disclosure above can it use
your connections, Lobbis, saved Agent preferences, or shared availability for
a plan; what those lookups return is then sent to the AI provider for that
plan. The app shows this planning disclosure and asks again when its version
changes.

Profile photos. Before a new profile photo is uploaded, the app tells you
it will be sent to OpenAI for automated safety screening and asks you to
agree. If you decline, the photo is not uploaded. Every published profile
photo is screened.

Calendar availability and AI. Your Agent may use availability you have
shared, such as group free-time totals, to suggest times. The calendar-import
feature does not collect event details or send them to an AI provider. Details
you separately type or attach to an Agent conversation are part of that request.

Sharing between users

Your profile (name, photo, bio, interests, city) is visible to other
LOBBI users as part of the product — for example in Lobbis you join, on Events
you host or attend, and in chat. A Lobbi's identity, member list, permanent
Lobbi chat, and Lobbi-only Events are limited to people authorized for that
Lobbi. Event guests do not receive Lobbi membership or permanent Lobbi chat
merely by attending. Exact Event addresses are shown only according to the host's
disclosure setting (for private Events, typically only after you are approved
to attend). Calendar availability is shared only with the Lobbis you choose:
as group totals by default, or as your named free times if you turn that on.
When a Lobbi turns on its Lobbi Agent, what it remembers is visible to that
Lobbi's members, it reads limited chat excerpts, and you can keep your own
messages out with Include my messages.

Invite link previews. An invite link you share may show your first name
and approved profile photo to anyone who receives or is forwarded the link,
including people without a LOBBI account. An Event preview may also show its
name, date, approximate area, and approved cover image; a Lobbi preview may
show its name and cover. The preview does not include an exact Event address
or its guest list. Messaging services may fetch and keep a copy of the
preview. Turning off a link stops future access through it, but does not
remove previews those services already saved or copies someone already made.

Other disclosures

We may disclose information when reasonably necessary to comply with applicable
law or valid legal process, protect people, investigate fraud or abuse, enforce
our terms, or establish or defend legal claims. Requests are evaluated under
applicable law; this is not unrestricted permission for anyone to access
private messages. Access is limited to the information needed for the purpose.

Information may be transferred as part of a merger, financing, reorganization,
or sale of all or part of the business, subject to confidentiality and
applicable privacy obligations. A new owner must respect applicable law and
the commitments governing previously collected information. We will give
notice, and obtain consent where required, before materially different uses.
We may otherwise share information at your direction or with your consent.

Retention & deletion

• You can delete your account in the app (Profile → Settings →
  Account information → Delete account). Deletion is permanent: it revokes your account credentials
  and sign-in, and removes your profile and photos; private matching profiles,
  preferences, embeddings, candidate history, and evaluation data; Agent
  conversations, memories, and training sessions; calendar busy times, Busy
  rules, and availability sharing; Lobbi memberships and invitations; Event
  RSVPs; social/contact edges; and push-device registrations. Shared Events
  and Lobbis are not deleted. Messages and attachments you already sent in
  chats may remain visible to other members, attributed to a deleted account.
• Leaving or being removed from a Lobbi revokes its member-only content and
  permanent chat. It does not erase messages already delivered to other
  members. Leaving a Lobbi and changing an Event RSVP are separate actions.
• Imported calendar busy times are kept as one snapshot that is replaced on
  each refresh and deleted within 24 hours. Turning import off, removing
  calendar permission, or deleting your account deletes it.
• Agent conversations are kept for up to 90 days unless you delete them
  sooner. Agent training sessions are kept for up to 90 days and the newest
  500 sessions. Raw voice audio is not saved. Suggested memories you have not
  confirmed expire after 30 days.
• Application usage, cost, and security records for AI and search requests
  exclude message, query, and result text and are kept for between 24 hours
  and 90 days depending on the record.
• Crash reports are kept by Sentry for a limited period and contain no account
  identifier.
• We may retain de-identified shared Event/Lobbi command history, minimal
  consent receipts, moderation reports, reported chat evidence, and records
  needed for safety, security, or legal compliance after deletion. These
  records no longer contain the deleted profile but remain subject to
  purpose-limited access and are kept only for the period needed for those
  purposes and applicable law.
• Turning off personalized matching stops new matching transfers to our AI
  providers and deletes LOBBI's derived matching profile, private profile
  embeddings, and Agent training sessions. Original account records, activity
  history, and matching decision history remain subject to the retention
  rules above.

Except for the shorter periods described above, account and service records
are retained while needed to provide your account and the features you use.
Retention also depends on the type of record, the purpose, deletion requests,
safety needs, limitation periods, and legal obligations. Support correspondence
is held in our mailbox and must be handled separately when fulfilling a
verified deletion request. Restricted backup copies and provider-held records
may remain until their applicable deletion cycles complete; we do not promise
instant erasure from every backup or someone else's saved copy.

We use technical and organizational safeguards, including access controls and
limited data sent to providers. No system is completely secure. Do not treat
Lobbi as confidential storage for credentials or highly sensitive records.
If a breach requires notice under applicable law, we will provide that notice.

Your choices

• iOS permissions (location, photos, microphone, calendar,
  notifications) are optional and can be changed anytime in Settings.
  Calendar access is requested when you choose calendar features. Saving an
  Event to your calendar, importing busy time, and sharing availability with a
  Lobbi are separate choices.
• You can edit or remove profile details in the app.
• You can view and edit the private profile your agent derives on the Me
  screen and export it from that screen.
• You can decline personalized matching and continue using ordinary Event
  discovery, Lobbi membership, and chat. If you later turn it on, you can
  withdraw at any time in
  Settings and delete the derived matching profile and embeddings as described
  above.
• You can withdraw voice permission, turn off background memory, and delete
  Agent conversations in the app.
• Turning off personalized matching immediately stops product analytics and
  clears the anonymous analytics identity/state on the device.
• For access, a copy, correction, or deletion of your account data, follow
  Account data rights or email
  support@lobbi.social. The agent-profile export
  is not a full account-data export. Support correspondence stays in our
  support mailbox; the app does not create a separate request record.

Privacy rights and requests

You may request access, correction, a copy, or deletion of your personal
information using Account data rights.
Depending on where you live and the law's applicability, you may also have
rights to portability, restriction, objection, withdrawal of consent, limits
on sensitive-data use, and an appeal of a denied request. You may complain to
your data-protection authority or attorney general. We do not discriminate
against you for exercising protected privacy rights, although a feature may
need information you choose not to provide. Withdrawal of consent does not
invalidate lawful processing before withdrawal.

California and other U.S. states. The sections above describe the categories
we collect (identifiers, profile/demographic information, location, internet
or app activity, communications and media, sensitive information, and derived
preferences), their sources, purposes, recipients, and retention criteria.
We disclose these categories to the providers and recipients described above
for the corresponding service or legal purpose. We do not sell personal
information or share it for cross-context behavioral advertising, including
information about minors. If a relevant state privacy law applies, its
additional access, deletion, correction, opt-out, sensitive-data, authorized
agent, and appeal rights remain available through the same contact. This
notice does not claim that every state law applies to every person or business.

Canada. You can ask whether we hold information about you, obtain access
and information about its use and disclosure, challenge its accuracy, request
correction, and complain about our handling of it. Access requests under PIPEDA
normally receive a response within 30 calendar days. Applicable provincial
rules and lawful exceptions or extensions may differ; see
Account data rights.
Where Quebec law applies, additional rights can include receiving computerized
information you supplied in a structured, commonly used format and requesting
its transfer to an authorized recipient, subject to statutory limits. You may
also request cessation of dissemination or de-indexing in the circumstances
the law provides. These are not promises to remove another person's lawful
records or copies outside our control.

Browser signals and cookies. We do not conduct the sale or advertising
sharing that Global Privacy Control is intended to opt out of, whether or not
that signal is sent. We do not currently alter website behavior in response
to the older Do Not Track header. Our sites do not invite advertising networks
to track visitors across sites. If our practices change, we will update this
notice and implement legally required choices before starting that processing.
App sign-in/session storage and optional app analytics are distinct from
website cookies; use the in-app controls for those features.

Recommendations. Matching uses information described above to suggest
people or plans. You choose whether to accept a match or act on a suggestion;
AI output is not a verified fact about someone. You can decline matching,
edit your derived profile, and contact support about an incorrect or harmful
result. Any legal right to object to profiling, receive information about a
significant automated decision, or seek human review remains available.
Where Quebec law applies to a decision made exclusively by automated processing,
you can ask about the information and principal factors used, request correction,
and submit observations to a person able to review the decision. Contact our
Privacy Officer; this does not require enabling personalized matching.

Age

LOBBI is for users 17 and older. People matching stays locked until the
profile has an eligible date of birth. Existing accounts with a missing or
ineligible date of birth keep ordinary account, discovery, and chat access.
The Service is not directed to children under 17. We do not knowingly collect
personal information from children under 13. If you believe someone under
17 is using Lobbi, contact support so we can investigate and take appropriate
action, including deletion of unlawfully collected data. We do not verify
every user's identity or age. Legal protections for 17-year-old users still apply.

Changes

We will update this page and its effective date when practices change and
give notice of material changes through the app or another appropriate direct
notice. Where required, we will obtain consent before a new use begins.
Continuing to use Lobbi or reading this policy does not replace that consent.

Contact

Lobbi Social Inc. · Delaware, United States

Privacy Officer (Founder) — responsible for privacy inquiries, requests,
and complaints: support@lobbi.social.
Our Account data rights page explains
the request and complaint process, including Canadian regulator contacts.