AfterHours privacy policy

AfterHours keeps the information needed to run a night and never sells or shares your data for advertising. There is no analytics, no advertising, no behavioural tracking and no third-party software development kit in the app.

Your account

You sign in with Apple. Apple gives AfterHours an identifier that is unique to this app and, the first time, the first name you choose to share. We never ask for your email address. Your first name and how your past nights went are shown to hosts when you ask to join, and to guests when you host.

What the AfterHours server keeps

The server keeps your account, a hashed copy of each sign-in session, the afters you host, your requests to join afters, the people you have blocked, the ratings you give and any reports you send or that are made about you. For an after you host, that means its name, area, address, door notes and exact location, and for a request, how many people are coming, the host's answer and when you checked in.

Address access ends at midday or when the host ends the after. The next scheduled server cleanup removes addresses, door notes and exact locations. Cleanup runs every 15 minutes. Afters and requests are removed once they are three days old. Ratings stay with the host's record until either account is deleted. Reports stay so they can be dealt with, and a report you sent loses your name if you delete your account.

Your location

When you look for afters, the app sends a position rounded to about a kilometre so the server knows which city you're in. Distances are worked out on your phone. When you host, the app sends your after's exact location, which is given only to guests you say yes to while the after is open. Everyone else sees an area of a few streets.

What stays on your phone

Your trusted friend's name and number never leave your phone. Neither do your safety texts, which go from your own Messages app only when you tap send. The phone keeps your profile, settings and approved address passes in a protected file excluded from iCloud and computer backups. The app clears expired address passes when it next runs after midday. When you choose a trusted friend from Contacts, the app receives only the one number you tap.

Your plans and shared copies

Itineraries, crew names, checklists, budgets, expenses, saved afters, host playbooks and aggregate host receipts stay on this phone. Plans and playbooks stay until you delete them. Saved afters expire at midday. Host receipts contain totals, never guest names or addresses.

Sharing a plan or expense split opens the system share sheet. AfterHours sends nothing until you choose a destination. A shared copy can contain crew names and expense amounts. A Studio door list export contains approved guest names, crew sizes and arrival status. Copies you share are outside the app's deletion controls. Plans do not sync between devices and cannot be recovered from the app after deletion.

Studio purchases

Apple processes the optional, one-time Studio purchase. AfterHours uses verified StoreKit transactions to check access. Payment card details never reach the AfterHours server. Apple keeps purchase records under its own privacy policy.

Who processes it

AfterHours runs on Cloudflare, Inc., which hosts the service and stores the database in its Eastern Europe region. Cloudflare keeps request logs for a few days so problems can be fixed. They record the web address of each request, which includes the rounded position above, and not what you post. Apple handles Sign in with Apple under its own privacy policy.

Adults only

AfterHours is for people aged 18 and over. Setup asks you to confirm your age, and an account reported as belonging to someone under 18 is suspended.

Deleting everything

Settings in AfterHours has a "Delete account and data" control. It deletes your account and everything the server holds for it, including the afters you host and your requests, then removes your profile, trusted friend, plans, playbooks, saved addresses and settings from this phone. Reports you sent can remain without your name for moderation. Deleting data does not refund or cancel a non-consumable purchase. You can restore Studio with the Apple Account that bought it. Deleting the app removes what is on the phone but not your account, so use the control first.

Who is responsible

The controller of the personal data described here is Joao Vitor Humenhuk Achutti, a sole trader, 38 Allenby Street, Tel Aviv-Jaffa 6332512, Israel. You can ask what is held, ask for it to be corrected or deleted, or complain, by writing to afterhours@humenhuk.com. You can also complain to the Israeli Privacy Protection Authority or to the data protection authority where you live.