Legal & compliance

Privacy Policy

This Policy explains how Bare Getaways LLC, doing business as JoinTheSwing, handles personal information. The public launch list is free and currently does not collect payment-card information or user-generated member content. Additional categories described below apply only when the relevant account, verification, content, or payment feature is enabled and you choose to use it.

Effective: July 17, 2026

1. Information we collect

Launch-list and contact data: email address, city, country, state or province where needed to identify your local launch, member type, optional interests, referral attribution, and messages you send to support. Joining requests local-launch and founding-offer notices. The optional newsletter has a separate choice, recorded with its notice version and time; delivery starts only after email confirmation. A private, expiring email link lets you change your location and email choices. We do not request GPS coordinates or a street address for the launch list. Existing unsubscribe and delivery blocks remain effective.
Account data: name or display name, contact information, login and consent records, profile preferences, settings, and account status.
Identity and age-verification data: information submitted to our specialist verification provider, such as a government ID and selfie/liveness capture. JoinTheSwing is designed to retain the verification result, provider reference, consent receipt, and review metadata rather than the source ID or selfie images in its application storage. The provider's notice governs its processing and retention.
Content records: submitted profile text, images, video, audio, messages, listings, reports, and the moderation status of each submission. Member media and content records are recorded as pending and staff approve them before they appear on member-facing surfaces; private messages are delivered directly and are not staff-reviewed before delivery, except for the photos attached to a message, which staff approve before the recipient can open them.
Transaction data, when enabled: product, amount, currency, processor reference, billing status, refunds, disputes, and fraud signals. Authorized processors collect card data; JoinTheSwing does not store raw card numbers in its application database.
Device and usage data: IP address, browser and device information, pages and actions, referral URLs, cookie or similar identifiers, security events, and analytics or advertising attribution where permitted.

2. Biometric identity verification (face match and liveness)

To confirm every member is a real, of-age adult, identity and age verification is performed by Veriff (Veriff OÜ), a third-party identity provider that acts as our verification processor. The check is automated — it is not reviewed by a JoinTheSwing employee.

What Veriff collects and processes during the check:

images of your government-issued photo ID; and
a selfie and/or short video, and a biometric identifier — your facial geometry — computed from it to (a) match your face to the photo on your ID and (b) confirm a live person is present (liveness / presence detection).

Under the Illinois Biometric Information Privacy Act (740 ILCS 14), the Texas Capture or Use of Biometric Identifier Act, Washington's biometric-identifier law (RCW 19.375), the EU/UK GDPR (Article 9 special-category data), and similar laws, this facial-geometry data is a biometric identifier / biometric information. Veriff collects and processes it solely to verify your identity and age for the face-match and liveness check, under Veriff's own privacy notice and the separate consent Veriff requests from you inside its flow. Veriff retains and deletes the biometric data on the schedule disclosed in its notice.

What JoinTheSwing receives and stores: the ID images, selfie, video, and facial-geometry biometric data are sent directly to Veriff. JoinTheSwing never receives or stores those images or your biometric identifiers. From the check we receive and retain only a pass/fail result, Veriff's session reference, a consent receipt, and non-biometric review metadata such as the case status, outcome category, and decision date. We do not collect, capture, sell, lease, trade, profit from, or otherwise disclose your biometric identifiers, and we have no biometric images to delete because we never hold them.

Your choices. Completing verification is voluntary, but it is required to unlock full membership — you may decline and simply not verify. For this verification, JoinTheSwing is the data controller and Veriff acts as our processor; Veriff also uses limited verification data as an independent controller for fraud prevention and to improve its service, as described in its own notice. Requests to access, correct, or delete your verification data may be sent to [email protected] and we will action them — including instructing Veriff regarding provider-held data where it remains within Veriff's retention schedule. By starting the verification check you acknowledge this notice and consent to Veriff's collection and processing of your biometric identifiers for identity and age verification.

3. How we use information

Provide the launch list, accounts, verification, community, support, and purchases.
Verify age and identity and document creator and depicted-person consent.
Review content before publication; investigate reports, fraud, abuse, and safety risks.
Process transactions, refunds, cancellation, reconciliation, and chargeback evidence.
Send requested service, launch, safety, billing, and policy communications.
Measure performance, improve the service, prevent abuse, and maintain security.
Comply with law, card-network rules, processor obligations, and lawful requests.

5. How we disclose information

We may disclose information only as reasonably needed to:

operate through service providers such as hosting, database, email, analytics, verification, moderation, fraud, payment, and customer-support vendors;
complete a transaction with an authorized payment processor and acquiring partners;
investigate a complaint with the affected user, a neutral consent-review body, card networks, processors, legal counsel, or safety specialists;
comply with law or protect safety, including reports to law enforcement or the National Center for Missing & Exploited Children when legally required or appropriate; or
complete a merger, financing, acquisition, or sale with safeguards appropriate to the information.

We do not sell personal information for money. Analytics and advertising technologies may constitute "sharing" or targeted advertising under some U.S. state laws. Where applicable, you may opt out through the site's privacy controls or by emailing [email protected].

6. Cookies, analytics, and advertising

Essential cookies support age acknowledgement, security, session state, and preferences. With the permissions required in your jurisdiction, analytics and advertising tools may measure visits, referrals, and campaign effectiveness. Browser settings and our available consent controls can limit non-essential technologies, although essential features may still require necessary storage.

7. Retention

We keep information only for as long as needed for the purposes described, then delete, de-identify, or securely archive it unless law, fraud prevention, card-network obligations, litigation holds, or safety evidence require longer. Factors include account status, contract and tax periods, chargeback windows, complaint and appeal status, identity and consent evidence obligations, and legal limitation periods. Government-ID source images are governed by the verification provider's disclosed retention schedule; JoinTheSwing does not intentionally copy them into its application storage.

What survives after you delete your account:

Consent and verification: we keep a record that each consent was given — which consent it was (for example the EULA, terms, age confirmation, or consent to sensitive-profile or intimate-media features), its version, whether it was granted or withdrawn, when, and the channel it came through (for example the iOS app, the Android app, or the website) — as a legal record that consent was collected. When your account is deleted we remove everything on that record that links it to you: your account, profile, and person identifiers and the device or browser details captured with it. What remains is not linked to you, carries no name or email, is readable only by our back-end systems, and is kept only for as long as we may need to show that consent was obtained (for example, to answer a legal claim or a regulator). If you separately joined our launch list or newsletter with an email address — before or apart from creating an account — that signup and its consent record are stored against the email address alone, are not linked to your account, and are not deleted by account deletion; unsubscribe using the link in any such message or request removal per Section 9. We keep a minimal audit record of the verification outcome for two years — the provider, an outcome category, the decision date, and the erasure date, with no name, email, document, or image attached, so it cannot be traced back to you. It exists only to show that our verification process ran correctly, and is purged once the two years pass. If your account carried an older, legacy verification submission with stored ID, selfie, or couple photos, we delete those photos and confirm each is gone before removing the submission record. The current Veriff check never gives us those images in the first place, so there is nothing of that kind to delete for it.
Letters: if you were in a conversation, deleting your account does not delete the other participant's side of it. Your own messages are replaced with a fixed placeholder ("This message was removed when the member deleted their account.") that carries no name or account reference.
Purchase records: if you paid for something through JoinTheSwing — carats, an event ticket, a stay, a salon seat, a marketplace order, or a membership payment — we keep our record of that transaction after your account is deleted, because accounting, tax, and chargeback rules require it. The record keeps the amount, currency, date, what was bought, its status (including any refund), and the payment processor's or app store's own transaction reference. Your account link is removed, and so is anything you wrote or that identifies your device, such as a booking note, the name on a ticket, or the IP address and browser recorded with a bank-debit authorization. The processor or store can still match its own reference to its own records. Items that never involved a payment, such as a free RSVP, are deleted.
Payments and email: a paid membership is billed through the Apple App Store or Google Play — whichever store you purchased through holds your purchase, subscription, and receipt records under its own policy; JoinTheSwing does not process membership payments through Stripe and does not store your card number. When a paid product uses Stripe, Stripe retains its own transaction records for that product under its own policy. Our email provider, Resend, retains its own delivery records under its own policy. We also keep our own list of email addresses that bounced or reported a message as spam, so we stop emailing them; that suppression list is separate from member accounts and is not cleared by account deletion.

8. Security and access controls

We use administrative, technical, and organizational safeguards designed for the sensitivity of the information, including restricted service-role access, encrypted transport, audit records, secrets outside source control, quarantine for submitted media, and provider tokenization for card data. No system is perfectly secure. Do not send IDs, card numbers, passwords, or sensitive media by ordinary email.

9. Your choices and privacy rights

Depending on your location, you may request access, correction, deletion, portability, restriction, or objection; withdraw consent; opt out of marketing, sale, sharing, or targeted advertising; or appeal a privacy decision. We may verify your identity before acting and may retain information where legally permitted. Authorized agents must provide proof of authority. We do not discriminate against you for exercising applicable rights.

Submit a request to [email protected] or use our public contact information below. You may unsubscribe from marketing using the message link. Safety, legal, and transactional notices may continue while an account or transaction remains active.

Data export. From the app (Privacy & Security) or the signed-in website (Account settings), you can request a copy of your account data. Today that request is fulfilled by our team by email to your verified address within 30 days; an automated, instant export is not yet available.

10. Adults only and sensitive content

JoinTheSwing is not directed to children and does not knowingly permit minors. If you believe a minor provided information or appears in content, use the Complaints & Content Removal form immediately. Do not upload another person's sensitive information or content without documented authority and consent.

11. International transfers

We are based in the United States. If information is processed in another country, privacy laws may differ. Where required, we use contractual or other recognized safeguards for cross-border transfers. Availability may be limited where age-assurance, privacy, or processor requirements are not yet operational.

13. Changes and questions

We may update this Policy as the service or law changes. The effective date will change, and material account-holder changes will be communicated when appropriate. Questions and rights requests may be sent to [email protected]. Safety or content complaints should use the dedicated Complaints & Content Removal form so they enter the tracked response workflow.