Legal & compliance

Privacy Policy

This Policy explains how Bare Getaways LLC, doing business as JoinTheSwing, handles personal information. The public launch list is free and currently does not collect payment-card information or user-generated member content. Additional categories described below apply only when the relevant account, verification, content, or payment feature is enabled and you choose to use it.

Effective: October 1, 2026

1. Information we collect

Launch-list and contact data: email address, city, country, state or province where needed to identify your local launch, member type, optional interests, referral attribution, and messages you send to support. Joining requests local-launch and founding-offer notices. The optional newsletter has a separate choice, recorded with its notice version and time; delivery starts only after email confirmation. A private, expiring email link lets you change your location and email choices. We do not request GPS coordinates or a street address for the launch list. Existing unsubscribe and delivery blocks remain effective.
Account data: name or display name, contact information, login and consent records, profile preferences, settings, and account status.
Identity-verification data: information submitted to our verification provider, Veriff, such as a government ID and selfie/liveness capture. From the current check we keep the verification result, the provider's session reference, and review metadata; we do not receive the ID or selfie images. Members who verified through our earlier, retired process may still have images stored with us (see Section 7). The provider's notice governs its processing and retention.
Content records: submitted profile text, images, video, audio, messages, listings, reports, and the moderation status of each submission. Member media and content records are recorded as pending and staff approve them before they appear on member-facing surfaces; private messages are delivered directly and are not staff-reviewed before delivery, except for the photos attached to a message, which staff approve before the recipient can open them.
Transaction data, when enabled: product, amount, currency, processor reference, billing status, refunds, disputes, and fraud signals. Authorized processors collect card data; JoinTheSwing does not store raw card numbers in its application database.
Device and usage data: IP address, browser and device information, pages and actions, referral URLs, cookie or similar identifiers, security events, and analytics or advertising attribution where permitted.

2. Biometric identity verification (face match and liveness)

To confirm that each member is a real person whose face matches a government-issued photo ID, identity verification is performed by Veriff (Veriff OÜ), a third-party identity provider that acts as our verification processor. The check is automated — it is not reviewed by a JoinTheSwing employee. The check does not currently read or confirm your age for us: your age and your eligibility to join rest on your own declaration that you are 18 or older.

What Veriff collects and processes during the check:

images of your government-issued photo ID; and
a selfie and/or short video, and a biometric identifier — your facial geometry — computed from it to (a) match your face to the photo on your ID and (b) confirm a live person is present (liveness / presence detection).

Under the Illinois Biometric Information Privacy Act (740 ILCS 14), the Texas Capture or Use of Biometric Identifier Act, Washington's biometric-identifier law (RCW 19.375), the EU/UK GDPR (Article 9 special-category data), and similar laws, this facial-geometry data is a biometric identifier / biometric information. Veriff collects and processes it solely to verify your identity for the face-match and liveness check, under Veriff's own privacy notice and the separate consent Veriff requests from you inside its flow. Veriff retains and deletes the biometric data on the schedule disclosed in its notice.

What JoinTheSwing receives and stores: the ID images, selfie, video, and facial-geometry biometric data are sent directly to Veriff. From the current Veriff check, JoinTheSwing never receives or stores those images or your biometric identifiers. From the check we receive and retain only a pass/fail result, Veriff's session reference, and non-biometric review metadata such as the case status, outcome category, and decision date. Where a sign-up flow records your consent to the check, that consent record is kept as described in Section 7. We do not collect, capture, sell, lease, trade, profit from, or otherwise disclose your biometric identifiers, and the current Veriff check leaves us with no biometric images of you to delete.

Your choices. Completing verification is voluntary, but it is required to unlock full membership — you may decline and simply not verify. For this verification, JoinTheSwing is the data controller and Veriff acts as our processor; Veriff also uses limited verification data as an independent controller for fraud prevention and to improve its service, as described in its own notice. Requests to access, correct, or delete your verification data may be sent to privacy@jointheswing.com and we will action them — including instructing Veriff regarding provider-held data where it remains within Veriff's retention schedule. By starting the verification check you acknowledge this notice and consent to Veriff's collection and processing of your biometric identifiers for identity verification.

3. How we use information

Provide the launch list, accounts, verification, community, support, and purchases.
Verify identity, record your declaration that you are 18 or older, and document creator and depicted-person consent.
Review content before publication; investigate reports, fraud, abuse, and safety risks.
Process transactions, refunds, cancellation, reconciliation, and chargeback evidence.
Send requested service, launch, safety, billing, and policy communications.
Measure performance, improve the service, prevent abuse, and maintain security.
Comply with law, card-network rules, processor obligations, and lawful requests.

5. How we disclose information

We may disclose information only as reasonably needed to:

operate through service providers such as hosting, database, email, analytics, verification, moderation, fraud, payment, and customer-support vendors;
complete a transaction with an authorized payment processor and acquiring partners;
investigate a complaint with the affected user, a neutral consent-review body, card networks, processors, legal counsel, or safety specialists;
comply with law or protect safety, including reports to law enforcement or the National Center for Missing & Exploited Children when legally required or appropriate; or
complete a merger, financing, acquisition, or sale with safeguards appropriate to the information.

When part of our service fails, our servers may send a technical error report to Sentry, our error-monitoring provider, so we can find and fix the problem. These reports describe the fault (for example the error message, the page template involved, and the time) and are stripped of your name, email address, account identifiers, cookies, request contents and IP address before they are sent; we do not send reports from your browser or device, and we do not use session replay or advertising or analytics tracking for this purpose.

AI service providers. Some features send text to Anthropic, PBC, an AI provider that processes it for us as a service provider:

a vouch you write is checked by an automated AI model before it is saved; a vouch the model rejects is not saved, and one it flags is saved with a moderation flag;
the words you type into the natural-language member search are converted into search filters;
the short editor's note in the Salon digest is written from that digest's contents, which can include the display names of members featured in it and a featured member's profile blurb; and
an email reply from a venue or business we contacted is summarized for our team.

The AI output is used only for the step described, and the AI makes no decision about your account. When the AI service is unavailable, these features work without it.

Our phone line. Our phone line, 1-727-255-8859, is answered by an automated AI voice agent, not a person. The agent is operated by ElevenLabs, which processes the call audio to run the agent and to produce a written transcript and summary of the call. We receive that transcript and summary by email and handle them as a support message; the handling of call data held by ElevenLabs is governed by its own terms. Text messages to the same number are received through Twilio and forwarded to us by email. Do not share ID numbers, card numbers, passwords, or other sensitive details on the phone line.

We do not sell personal information for money. Analytics and advertising technologies may constitute "sharing" or targeted advertising under some U.S. state laws. Where applicable, you may opt out through the site's privacy controls or by emailing privacy@jointheswing.com.

6. Cookies, analytics, and advertising

Essential cookies support age acknowledgement, security, session state, and preferences. With the permissions required in your jurisdiction, analytics and advertising tools may measure visits, referrals, and campaign effectiveness. Browser settings and our available consent controls can limit non-essential technologies, although essential features may still require necessary storage.

With your separate, optional permission, Microsoft Clarity provides heatmaps and masked session recordings on our public About and Trust pages when no forms or personal-choice controls are shown. It helps us understand scrolling, clicks and page usability. Text is masked; forms and personal-choice controls are excluded. We exclude signed-in visitors, member areas, pages with forms, input controls or personal-choice buttons, authentication, verification and payment pages, and URLs containing query strings or fragments. We do not send account identifiers to Clarity or grant it advertising consent. Microsoft receives browser and device information, public page URLs and anonymous session identifiers. See Microsoft's Privacy Statement. Use Cookie settings and choose Essential only to withdraw analytics and recording consent. This stops future recording in this browser and clears Clarity cookies; it does not delete information already received by Microsoft. You can also keep analytics enabled while leaving the Clarity recording option unchecked.

7. Retention

We keep information only for as long as needed for the purposes described, then delete, de-identify, or securely archive it unless law, fraud prevention, card-network obligations, litigation holds, or safety evidence require longer. Factors include account status, contract and tax periods, chargeback windows, complaint and appeal status, identity and consent evidence obligations, and legal limitation periods. Government-ID and selfie images from the current Veriff check go directly to Veriff and are governed by its disclosed retention schedule; JoinTheSwing never receives them. Members who verified through our earlier, retired verification process may still have ID, selfie, or couple photos in our storage; those photos are deleted when the account is deleted, as described below.

What survives after you delete your account:

Consent and verification: we keep a record that each consent was given — which consent it was (for example the EULA, terms, age confirmation, or consent to sensitive-profile or intimate-media features), its version, whether it was granted or withdrawn, when, and the channel it came through (for example the iOS app, the Android app, or the website) — as a legal record that consent was collected. When your account is deleted we remove everything on that record that links it to you: your account, profile, and person identifiers and the device or browser details captured with it. What remains is not linked to you, carries no name or email, is readable only by our back-end systems, and is kept for 7 years after your account is deleted, then permanently deleted, so that we can show consent was obtained (for example, to answer a legal claim or a regulator). If you separately joined our launch list or newsletter with an email address — before or apart from creating an account — that signup and its consent record are stored against the email address alone, are not linked to your account, and are not deleted by account deletion; unsubscribe using the link in any such message or request removal per Section 9. We keep a minimal audit record of the verification outcome for two years — the provider, an outcome category, the decision date, and the erasure date, with no name, email, document, or image attached, so it cannot be traced back to you. It exists only to show that our verification process ran correctly, and is purged once the two years pass. If your account carried an older, legacy verification submission with stored ID, selfie, or couple photos, we delete those photos and confirm each is gone before removing the submission record. The current Veriff check never gives us those images in the first place, so there is nothing of that kind to delete for it.
Letters: if you were in a conversation, deleting your account does not delete the other participant's side of it. Your own messages are replaced with a fixed placeholder ("This message was removed when the member deleted their account.") that carries no name or account reference.
Safety reports: a report another member filed about you, or one you filed, is kept as a safety record after your account is deleted — its category, when it was filed and handled, what was decided, and the description the reporter wrote. The report's link to your account is removed, except that an age-verification review record keeps the account reference, for legal accountability. If a report about you was still open when you asked to delete, our moderators are sent a notice at that moment (that internal notice names your account) and the report is held so it cannot be deleted while it is still open. A report about you filed while your deletion is pending is held the same way and reaches our moderators through the normal report queue; no separate notice is sent for it. In both cases the hold is lifted when the report is closed or if you cancel your deletion. This does not stop or delay your deletion. We have not yet set a fixed deletion date for these records: they are kept as long as member safety, a legal claim, or a law-enforcement request requires.
Purchase records: if you paid for something through JoinTheSwing — carats, an event ticket, a stay, a salon seat, a marketplace order, or a membership payment — we keep our record of that transaction after your account is deleted, because accounting, tax, and chargeback rules require it. The record keeps the amount, currency, date, what was bought, its status (including any refund), and the payment processor's or app store's own transaction reference. Your account link is removed, and so is anything you wrote or that identifies your device, such as a booking note, the name on a ticket, or the IP address and browser recorded with a bank-debit authorization. The processor or store can still match its own reference to its own records. The record is kept for 7 years after your account is deleted, then permanently deleted. Where the same record also belongs to another member who still has an account, such as the other side of a marketplace order or a membership shared with a partner, it stays in their records, without your link, while it is still theirs. Items that never involved a payment, such as a free RSVP, are deleted.
Payments and email: a paid membership is billed through the Apple App Store or Google Play — whichever store you purchased through holds your purchase, subscription, and receipt records under its own policy; JoinTheSwing does not process membership payments through Stripe and does not store your card number. When a paid product uses Stripe, Stripe retains its own transaction records for that product under its own policy. Our email provider, Resend, retains its own delivery records under its own policy. We also keep our own list of email addresses that bounced or reported a message as spam, so we stop emailing them; that suppression list is separate from member accounts and is not cleared by account deletion.

8. Security and access controls

We use administrative, technical, and organizational safeguards designed for the sensitivity of the information, including restricted service-role access, encrypted transport, audit records, secrets outside source control, quarantine for submitted media, and provider tokenization for card data. No system is perfectly secure. Do not send IDs, card numbers, passwords, or sensitive media by ordinary email.

9. Your choices and privacy rights

Depending on your location, you may request access, correction, deletion, portability, restriction, or objection; withdraw consent; opt out of marketing, sale, sharing, or targeted advertising; or appeal a privacy decision. We may verify your identity before acting and may retain information where legally permitted. Authorized agents must provide proof of authority. We do not discriminate against you for exercising applicable rights.

Submit a request to privacy@jointheswing.com or use our public contact information below. You may unsubscribe from marketing using the message link. Safety, legal, and transactional notices may continue while an account or transaction remains active.

Data export. From the app (Privacy & Security) or the signed-in website (Account settings), you can request a copy of your account data. Today that request is fulfilled by our team by email to your verified address within 30 days; an automated, instant export is not yet available.

10. Adults only and sensitive content

JoinTheSwing is not directed to children and does not knowingly permit minors. If you believe a minor provided information or appears in content, use the Complaints & Content Removal form immediately. Do not upload another person's sensitive information or content without documented authority and consent.

11. International transfers

We are based in the United States. If information is processed in another country, privacy laws may differ. Where required, we use contractual or other recognized safeguards for cross-border transfers. Availability may be limited where age-assurance, privacy, or processor requirements are not yet operational.

13. Changes and questions

We may update this Policy as the service or law changes. The effective date will change, and material account-holder changes will be communicated when appropriate. Questions and rights requests may be sent to privacy@jointheswing.com. Safety or content complaints should use the dedicated Complaints & Content Removal form so they enter the tracked response workflow.