Privacy policy

US Afterhour · last updated October 22, 2026

The short version. We collect what's needed to run events: your name, what you sign up to, and what you choose to post. We don't sell anything about you, we don't show ads, and we don't track you across other apps or sites. You can see, fix or delete your information at any time, in the app.

Who we are

US Afterhour is a social network you join by showing up at events, run by four Rotman MBA students in Toronto, Canada. Questions about your information go through Report a problem in the app.

What we collect, and why

What	Why
Your name, username and password (stored scrambled; nobody can read it)	Your account, and guest lists
Your date of birth, at sign-up	To check you're 18 or older. We keep only that the check passed and when, never the date
Profile details you choose to add (email, phone, program, class year, gender)	So hosts can reach you, and for your own profile. If you forget your password or username, we can email a code to this email, only when you ask. All optional
The events you sign up to, how many you bring, notes to the host, and answers to a host's questions	So hosts know who's coming and can plan
Check-ins at the door	So hosts know who came; for your own recap
What you don't eat, at food events that seat people by diet	To seat you at a table you can eat at. Only the host sees it, and it's deleted 2 days after the event. We never ask why
Events, photos and comments you post	To show them to the people they're for
New events and new profile photos, read by our automatic safety check	To keep scams, explicit content and harassment off US Afterhour. The check uses Claude, an AI made by Anthropic. If it isn't sure, a moderator decides. We ask you before your first photo is checked
Messages a host sends everyone going, and notes you send a host	So hosts and guests can reach each other about the event
Messages between you and someone you both said hi to, or between a host and their guests	To deliver them. A message that mentions money shows a warning. If a message is reported, a moderator sees it and the few messages before it
What an event costs guests, if the host says (how much, what for, how to pay)	So guests know before they sign up. Money is between guests and the host: we never take, hold or refund it
How you rank the nights you went to	For your own list of nights, your recaps and your profile. Only you see your ranking
Familiar faces, only if you turn it on: who you said hi to or put off for later, who you hid or blocked, and that you confirmed you're 18 or older	To connect people who keep meeting at the same events, and to keep it safe
Your profile: a drawn picture (we pick one; you can change it), and only what you add: a photo (it's checked before it shows, and only people you both said hi to see it), a line about you, what you're open to, and links (LinkedIn, Instagram, WhatsApp, email)	So the people you keep meeting know who you are. Each link stays private ("Only me") until you choose who sees it
In the app: your phone's notification address, and your notification settings (what you want, quiet hours, what shows on the lock screen)	To send the notifications you asked for
Your school email, if you check it	To give you your school's tick and its circles (your school, university, city and country), and to let you join events that are only for your school. We send a 6-digit code to it once (and again only if you ask for a code to set a new password); each code is deleted after 15 minutes. Nobody else ever sees the email. The tick lasts 400 days, then you check it again
Your email for notifications, if you add one	Only to send the emails you tick: changes to events you are going to, reminders, new messages, your events as a host, recaps, hosts you follow, news from us. Everything is off until you tick it. At most one email an hour, and every email has a one-click stop. We check the address with a 6-digit code first, and never use it for anything else
The city you pick, the kinds of events you like, the clubs and hosts you follow, and your phone or computer's time zone	For "Events for you", your circles on Explore, and events open to a city; the time zone makes "today" (birthdays, "on this day") your today. All optional except the time zone, which your device tells us
Your birthday, if you add it (day and month only, never the year)	Only if you choose to show it: your connections see it on the day
Your connections: who you said hi to (from Familiar faces, search, suggestions, or in person with your QR code)	So you can message each other and see each other's nights
Your feed: the events you're going to, what you share (with your words), your reactions and comments	To show them to your connections. "Going to" disappears when you cancel; you can turn it off in the privacy centre
Groups you're in, their messages and polls	To run the group. Nobody is added to a group without saying yes
Clubs you start or run, and tags on event photos	Club pages; a tag shows your name on a photo only once you say yes
Which parts of the app you use (a small log of taps on our own servers, kept 90 days)	To see what works and fix what doesn't. No outside trackers, never for ads
Reports and blocks	To keep people safe
Basic technical information (your browser, and your IP address in our hosting providers' logs)	Security and fixing problems

We remove the location data from photos before they're uploaded.

Who sees what

Everyone: an event's title, time, area and description, and the initials of who's going.
Members: the full names on guest lists of events they can see.
The host: their guest list, your notes and answers, and (at food events) what you don't eat.
People going: the exact address of the event. Nobody else sees it.
Familiar faces: only people who were checked in at 2 or more of the same events as you, and only if you both turned it on, see your first name and last initial, your program and year, the events you shared, your drawn picture, and what you add to your profile (your line, what you're open to). Your photo only shows once you have both said hi, and only after a moderator approves it. Hosts only ever see counts, never who.
Your links: each one goes only where you choose: only you (the start), your matches (you both said hi), or, for LinkedIn and Instagram, anyone who sees your profile. A phone number or an email only ever goes to your matches.
Messages: only the two people in the chat. A moderator sees a message only if it's reported.
Your connections: the events you're going to (unless you turn it off), what you share to your feed, your comments, your photo and the links you allow them, and your birthday if you show it.
Who can find you: your choice in the privacy centre: anyone on US Afterhour, friends of your connections (the start), or nobody.
Groups: only the people in the group, and every one of them said yes to be in it.
Ratings: how you rank your nights stays yours. Others only ever see an average, from at least 3 people.
Schools that run their page on US Afterhour: their admins approve their school's and clubs' official events, see counts (never names), and handle reports about official events. Anything about safety, someone under 18, scams or money goes to our team.
Moderators: reported content, and what's needed to deal with a report.

Who we share it with

Only companies that run parts of the app for us, and only for that:

Supabase: our database and photo storage, kept in Canada (Supabase's Canada (Central) region, in Montreal).
Netlify: hosts the website.
Resend: sends our emails: the codes that check an email address or let you set a new password, and the notification emails you ask for. It receives the email address and what that email says, nothing else.
Anthropic: runs our automatic safety check (Claude, an AI). It receives a new event's title, place and description, new profile photos, words shared to the feed, comments and club pages, and a chat message only if someone reports it, only to tell us whether they are safe to show. It doesn't receive your name, email or messages.
Google Fonts: the app's fonts (Google receives your IP address when the fonts load).
Apple and Google: deliver notifications to your phone, if you turn them on. They receive the notification and your phone's notification address, nothing else.

We don't sell or rent your information, and we don't share it with advertisers. If the law requires it, or someone is in danger, we may share what's necessary with the authorities.

How long we keep it

Your account: until you delete it.
What you don't eat: 2 days after the event.
An event's details, guest list and photos: as long as the host chooses (one year unless they pick otherwise).
Reports: as long as needed to keep people safe, then deleted.
A phone's notification address: until you sign out on that phone, delete your account, or Apple or Google tell us it no longer works. A notification that couldn't be sent is dropped after 2 days.
Familiar faces: until you turn it off, hide someone, or delete your account.
Your profile photo, line and links: until you change or remove them, or delete your account.
Messages: until you delete your account (that deletes your messages and chats).
Your school email: until you remove it or delete your account. The code we send: 15 minutes.
Your email for notifications: until you remove it or delete your account. One click in any email stops them all.
Feed posts, comments and group messages: until you delete them or your account. "Going to" ends when you cancel.
The log of taps: 90 days.

Your choices

See or fix your information in your profile.
Notifications: choose what comes to your phone, quiet hours and what the lock screen shows, in Profile, Notifications. Or turn them off in your phone's settings.
Familiar faces: turn it off at any time. Hide, block or report anyone; they aren't told.
Your profile: change your drawn picture, change or remove your photo, line and links, and who sees each link, in Profile, Your profile.
Messages: mute a chat, report a message, or block the person.
Delete your account in your profile, or follow these steps. Your name, details, comments and answers are deleted for good.
The privacy centre (Profile): who sees what you're going to, who can find you, your birthday, your city, blocked people.
Download your data yourself, at any time, in the privacy centre: everything we keep about your account, in one file.
Ask us for a copy of what we hold about you, or to correct it, through Report a problem. We answer within 30 days.
Complain to the Office of the Privacy Commissioner of Canada if you're not happy with how we've handled your information.

Age

US Afterhour is for people 18 and older. If we learn that someone under 18 has an account, we delete it.

Keeping it safe

Passwords are stored scrambled, every piece of the database is locked to the people allowed to see it, and sign-ins lock after too many wrong tries. No system is perfect: if something goes wrong that could hurt you, we'll tell you and the Privacy Commissioner as the law requires.

Credits

City names come from GeoNames (geonames.org), used under the Creative Commons Attribution 4.0 licence (CC BY 4.0).

Changes

If we change this policy in a way that matters, we'll tell you in the app before it applies.