CiStoPrivacy Policy
CiSto ("we", "us") is a mobile app for organizing games with friends. This policy explains what information we collect, why, and what you can do about it. The short version: we collect only what the app needs to work, we don't sell it, and you can ask us to delete it at any time.
Information we collect
Account. Your email address, used to sign you in with a one-time link, and the display name you choose.
Events and invitations. The events you create (activity, title, place, time, player count, notes), the email addresses you invite, and each person's reply (in, out, waitlisted). Invitees who don't have an account yet receive an email from us on your behalf with the event details and your name.
Groups. The groups you save: a name and the email addresses (and optional labels) in each.
Contacts. If you choose "Pick from contacts", the app reads names and email addresses from your device's address book to show you a list to pick from. Your contacts stay on your device. Only the addresses you select are sent to us, as invitations or group members.
Push notifications. If you allow notifications, we store a push token for your device so we can tell you about invitations, replies, and waitlist changes.
Diagnostics. To find and fix problems, the app sends us technical logs: device model, operating system version, app version, a random install identifier, and error messages when something goes wrong. These logs don't include your contacts or message content.
We don't collect precise location, payment information, or advertising identifiers, and we don't use third-party analytics or advertising SDKs.
How we use it
- To run the service: sign you in, show your events, deliver invitations and replies, send notifications.
- To show invitees who invited them and what they're being invited to.
- To find and fix bugs and keep the service secure.
- To respond when you contact us.
We don't sell personal information and we don't use it for advertising.
Who else sees it
People you invite see your name and the event details. People on the same event see the names (or email addresses, when no name is set) of the other players. Event hosts see everyone they invited and each reply.
We use service providers to run the app, and they process data only on our instructions:
- Vercel (hosting and logs) and Neon (database), in the United States.
- Expo (push notification delivery to Apple and Google).
- An email delivery provider for sign-in links and invitations.
We may disclose information if required by law or to protect the rights and safety of users.
Retention and deletion
We keep your account data while your account exists. Sign-in links expire in 15 minutes and sessions expire automatically. Diagnostic logs are kept for a short period by our hosting provider and then discarded.
You can delete your account and its data from the app, or by emailing support@whosin.app from the address on the account. Deleting your account cancels events you host (players are notified), removes you from events you were invited to, and deletes your groups, sessions, and push tokens.
Your choices
- Contacts and notifications are optional. You can change either at any time in your device settings.
- You can edit your display name in the app.
- If you were invited by someone and don't want further invitations from them, tell us and we'll block invitations to your address.
Children
CiSto is not directed at children under 13, and we don't knowingly collect information from them. If you believe a child has created an account, contact us and we'll delete it.
Security
Data is encrypted in transit. Sign-in and session tokens are stored only as one-way hashes. No system is perfectly secure, so please contact us if you believe your account has been accessed without permission.
Changes
If we make material changes to this policy we'll update the date above and, where appropriate, let you know in the app.
Contact
Questions or requests: support@whosin.app.