Your data
What we collect, why, who sees it — and how to take it with you or erase it.
Last updated: 8 November 2026
Your controls
Download it
A copy of your data, as a file. In the app: Profile → Settings and safety → Your data → Download my data.
Delete it
Erase your profile, messages and location immediately. In the app: Profile → Settings and safety → Your data → Delete account.
Control it
Location, notifications and cookies are all opt-in and can be switched off any time.
Everything we collect, in one table
We’ve set out to list everything we collect here, for members and for anyone else who gets in touch. If you think something is missing, tell us at privacy@goodcompanyapp.uk and we’ll put it right.
| What | Why | Who can see it | If you delete your account |
|---|---|---|---|
| Email, first name, password (hashed); emailed confirmation and reset codes (hashed, short-lived) | Your account | Only us. First name is shown to members of your plans. | Erased / overwritten |
| Account records: when you joined, accepted the terms and were last active; whether your email is confirmed; how many ID checks you’ve started | Running and securing your account; limiting paid ID checks | Only us | Kept only on the anonymised record, no longer linked to your name or email |
| Date of birth (from your ID once you’re verified) | Check you’re 18+; show an age range; decide whether you can see 50+ plans | Only us. Others see a range like 25–29. | Overwritten |
| ID-verified yes/no, verification reference | Show the verified badge | The badge is shown to members; the reference only us | Reference erased, and we ask Stripe to delete the ID-check data it holds for us |
| The sex shown on your ID (female, male, or not stated), and whether it matches your gender answer; if a person reviewed a difference, when, who and their note | Make sure women-only and men-only plans are used by the people they’re for (how this works) | Only the few people on our team who review differences. Not shown to members. | Erased |
| One-person-one-account code: a one-way code made from the name and date of birth on your ID | Stop one ID being used for several accounts, or by someone whose account we closed | Only our systems. It’s a scrambled code, not your name or date of birth. | Erased. If we close an account for breaking our rules, we keep this one-way code (not the ID details themselves) for up to 3 years to stop the same person returning, then delete it. The rest of a closed account’s record is kept as set out in the retention table. |
| University email, course, year (optional, students only); the code we email to that address (hashed, short-lived) | Prove you’re a student; student plans; course matching | Only us. Course and a “verified student” label are shown only to members of students-only plans you’re in. | Erased (or any time via Profile → Communities → Students → Turn off) |
| Good Company X (optional): your sports, the level you declared in each, an optional note, and when you accepted the X terms | Show you X plans you could join; let hosts decide | Us; for one sport, the people in an X plan for that sport and hosts you ask to join. | Erased (or any time via Profile → Communities → Good Company X → Turn off) |
| Same time next week: weekly slot, distance, rough location, your three matching answers, plus-one, the groups you were in, conversation cards | Matching you into a nearby group and running it | Answers and location: only us. Cards: only your group. | Erased |
| Plan alerts: the words, distance and rough place you set | Telling you about matching plans nearby | Only us | Erased |
| “I’d go” requests: what you’d go to, when suits you, a position rounded to about 1 km, and the requests you tapped “Me too” on | Show members nearby what people would join, and tell everyone who wanted it when three people do and when someone posts it | Members nearby see what, when and how many people want it, never who. Our moderators can see who asked. | Erased. Requests also end after two weeks and are deleted 30 days later |
| Clubs you start or join: the club’s details, your membership and role, muted or not, club chat messages | Running clubs, their plans and chat | A club’s details: signed-in members nearby. Members and chat: the club’s members. | You leave every club; clubs you run pass to another member or close; your messages read “[deleted]” |
| Bio, interests, city | Your profile; matching | Members of your plans (bio, interests) | Erased |
| Your passport: the colour you pick (from our set), your three fun answers from sign-up, and whether your personality type shows on it | Your profile card, and showing a host a feel for you when you ask to join | You; the host of a plan when you ask to join it; people in a plan with you while you’re both in it; and your friends. Each sees it with your photo, first name, city, interests, bio, rating, attendance record and the month you joined. | Erased |
| Personality quiz (optional): the six “this or that” answers you gave and the type worked out from them (for example “The Explorer”) | Plans whose host switched on a personality check: you take it to ask to join. You can also take it from your passport. | The host of a plan with the check, while they decide on your request (your answers and type). Your type is shown on other requests only if you put it on your passport. Answers sent with a request are cleared from it once the host decides. | Erased |
| Location (coordinates) | Find plans near you; notify people near a plan | Only us. Your own position isn’t shown to other members (live location, below, goes only to the trusted contacts you chose). | Erased |
| Meeting spot and general area of plans you host | Let people find the plan and turn up | The exact spot: you and the members you accept. Everyone else sees only the general area and a position rounded to about 1 km. | Removed from your plans; the position is rounded to about 1 km |
| Plans you post, requests you make, and when you last read each plan’s chat | Run plans | Members of that plan | Upcoming plans cancelled; past records unlinked from you |
| Plan extras: whether you said you’re still coming the day before; a “first plan” note if you chose to add one when joining; the +1 link you made for a plan and which friend joined with it | Let the host know who’s coming and who’s new; let you bring one friend where the host allows it | The host and the members of that plan (the link itself only you and whoever you send it to) | Removed with your place in upcoming plans; past records unlinked from you |
| Chat messages | Group chat | Members of that plan. Our team looks at a conversation only when it’s reported, for a safety concern, or when the law requires, and each look is logged with the reason. Messages are screened automatically for slurs, strong profanity and clear threats. | Text replaced with “[deleted]” |
| Gender (your answer: woman or man) | Run women-only and men-only plans | Nobody else. It decides which plans you can see and join, and it isn’t shown on your profile. | Deleted |
| Profile photo (required before you join or host a plan) | Show members who they’re meeting; keep the service safe | Other signed-in members, once it has passed our automatic check (we use Google Cloud Vision for that). Borderline photos are visible only to you and our moderators until a moderator decides. | Deleted |
| Photo check records: a note of any photo refused automatically or held for review, why, and what a moderator decided (a refused picture isn’t kept) | Spot repeated abuse; handle appeals | Only our moderators | Deleted |
| Your trusted contacts (up to three: the name you gave each, and whether they’ve accepted); your emergency backup number (optional); check-ins | Safety check-in and live location | Only us. Your contacts are alerted in their app if you miss a check-in; the backup number is texted only if none of them opens it in 10 minutes | Erased (links both ways) |
| Live location (optional, during a check-in) | Let your trusted contacts see where you are | Your trusted contacts, in their app, only while you share (with an update every hour). Only the latest position is kept, and it’s deleted once you tap “I’m home safe”, stop, or it expires a few hours after the plan. | Erased |
| Reliability: no-show marks from hosts (and whether you said “I was there”), host no-show reports you made, late cancels | Show hosts “Turned up to 9 of 10 plans” (last 12 months), and, after three or more no-shows, ask hosts to confirm your place on instant-join plans | Hosts deciding on your request, and members of plans you’re in, see the summary only. The details: only us | Erased |
| Friends: people you’ve added and who’ve added you after a plan, the plan where you met, requests you hid | Your friends list; telling friends about your plans | Your friends see you in their list. A one-way request is seen only by the person you sent it to; nobody is told if you ignore theirs | Erased (both ways) |
| Your notifications list (the bell on Home): what we told you, such as someone joining your plan or a plan changing, and whether you’ve seen it | So you can look back at what you missed | Only you | Erased. Each item is deleted after 60 days anyway |
| Notification settings | Send only the notifications you want | Only us | Erased |
| Ratings you give (a score, optional tags, an optional short comment) and receive | Rating averages | Others see only your average. Tags and comments aren’t shown to other members. | Comments removed; scores you gave stay, unattributed, in averages |
| Reports you make or that are made about you (the reason, details, and the plan or message concerned), and blocks | Safety and appeals | Only our safety team. The person reported isn’t told who reported them. | Kept for a limited period, then removed (see retention) |
| Account status (for example paused or closed) with the reason we gave, and the moderation log (actions our team took, and why) | Accountability and appeals | Only our team. You’re told by email if your account is paused, closed or un-verified. | Kept for a limited period, then removed (see retention) |
| Push token | Notifications you allow | Only us and our push provider | Erased |
| IP address, logs | Security | Only us | Rotated out on a short schedule |
| Crash reports (not linked to you) | Fix faults in the app | Only us | Deleted 90 days after last seen |
| Waitlist: email, city (optional), the page you signed up on | One email when we launch near you; cities are counted to help decide where to launch | Only us and our email provider | Removed if it uses the same email. Otherwise, unsubscribe or use the form below. Signing up again doesn’t change the saved city. |
| Partner enquiries: organisation, contact name, work email, city, website, message, and our notes on the badge checks | Reply, and check and onboard partners | Only our team | Not part of a member account (see retention) |
| Data-rights requests: your email, what you asked for, any details | Deal with the request and keep a record | Only us | Kept as a record of the request (see retention) |
| If a member chose you as a trusted contact with the app: the link between your account and theirs, and whether you opened an alert | Show you their live location while they share, and alert you if they miss a check-in | Only you and that member | Erased when you or the member removes the link, or either account is deleted. More for trusted contacts |
| If a member gave your number as their emergency backup: your name and UK mobile number | A text with a code so you can agree to it; then, only if you agreed, one safety text if they miss a check-in and nobody opens the alert in the app | Only us, and our text provider | Erased when the member removes you or deletes their account |
| This website: your cookie choice and light/dark setting | Remember your choices | Stays on your device | Clear it in your browser (see cookies) |
What we don’t collect or do
- We don’t receive or keep copies of your ID document or the selfie taken during the ID check. Our verification partner, Stripe, handles them. (Your profile photo is separate: you choose it, we store it, and it’s shown to other members.)
- We don’t read your contacts or use your microphone, and the app doesn’t browse your camera roll. The app only sees the one picture you choose as your profile photo, and the camera is used only when you tap to take that photo (or in the partner’s verification screen).
- We only use your location in the background while you’re sharing live location with your trusted contacts during a safety check-in, and only if you allow “Always” for Good Company.
- We don’t sell personal data, show targeted advertising, or use advertising identifiers or cookies. Anything sponsored is clearly labelled and never uses your data.
- We don’t show other members your exact location or date of birth.
Your rights, and where to use them
| You want to… | In the app | Or |
|---|---|---|
| See what we hold | Profile → Settings and safety → Your data → Download my data | Request form below |
| Fix something | Profile → Edit (on your passport) → Name, bio and interests | Request form |
| Delete your account | Profile → Settings and safety → Your data → Delete account | Request form (if you can’t get into the app). Some records are kept for a limited time; see retention |
| Stop location or notifications | Your phone’s Settings → Good Company | — |
| Stop launch emails (waitlist) | — | Request form, or reply “stop” |
| Object or restrict a use | — | Request form |
| Complain about how we handled your data | — | Request form, or privacy@goodcompanyapp.uk. We acknowledge within 30 days. |
| Change cookie choices | · | |
We reply within one month (we can extend by up to two more for complex requests, and will say so). It’s free. We’ll check it’s you before we release or erase anything — usually by replying to the email address on the account.
Make a request
We don’t hold anyone’s personal data yet: the app isn’t open. For any privacy question, email privacy@goodcompanyapp.uk.
Prefer email? privacy@goodcompanyapp.uk. Not happy with how we handled your data? Tell us first (choose “Complain about how we handled your data” above); you can also complain to the ICO.
More
- Full privacy policy — lawful bases, partners, transfers, retention.
- Cookie policy — every item stored on your device by this site.
- Safety — how safety data is used.