Privacy policy

Last updated 14 October 2026 · Contact: hello@grupt.app

This website

grupt.app is a static page. It has no analytics, no cookies, no tracking pixels, and no forms. We do not collect, store, or share any personal data when you visit it. Fonts load from Google Fonts, which means Google receives the standard technical request data (such as your IP address) needed to serve the font files, governed by Google's privacy policy. Our hosting provider (Vercel) keeps standard server logs to operate the service.

The Grupt app

This section covers the Grupt web app. It describes what the app actually does today, not plans. Starting a meetup needs an account, so your plans follow you between devices; joining one never does.

What we collect

• Your name. The name you type when you create or join a meetup, shown to the others in that meetup.
• Meetup details. What the organiser enters: the plan, the place (its name, a short description such as "Pub · Stoney Street", and any meeting-point note), the pin on the map, the time, the time zone and the Tab's currency.
• Roughly where you are, to open the map nearby. When you create a meetup, the app uses the approximate location of your internet connection (city level, provided by Cloudflare) to open the map near you and to suggest a currency. It is used once and never stored. Your exact position is only used here if you have already allowed location access for the app in your browser.
• Your location, only if you choose to share it. Nothing is shared until you tap Share my ETA for a specific meetup. Then your position and estimated arrival time go to the people in that meetup, and nobody else.
• The Tab. Expenses you or others add (amount, what for, who paid, who it's split between) and payments marked as paid.
• On your device. Your browser keeps an access key for each meetup you join, plus your name so you don't have to retype it. These stay in your browser's storage; clearing site data removes them.
• An account, if you start meetups. Joining a meetup never needs one; starting one does. We store your name, your email address and, with Google sign-in, your Google account id. Google tells us only your name, email address and profile photo link; we never see your Google password or anything that could act on your Google account. We also record which meetups are yours (the meetup, your place in it, and whether you organised it) so they appear on your other devices.
• Staying signed in. A cookie keeps you signed in for up to 30 days (grupt.session_token, plus a short-lived grupt.session_data copy that saves a database lookup). These cookies are strictly necessary for signing in, so there is no consent banner. For each signed-in device we keep its browser type, not its IP address.

How location is handled

• Never stored. Your position is held only in memory, attached to your live connection. It is never written to a database, a file or our logs, and we keep no location history.
• Gone when you stop. It disappears when you tap Stop, close the page, or arrive. On arrival (within about 75 metres of the meeting point) we keep only the fact that you arrived, so the group can see you're there.
• Switches off with the meetup. One hour after the meetup's scheduled end, sharing is switched off for everyone automatically.
• Your choice, any time. We use your location only because you tapped Share for that meetup. You can withdraw that at any time by tapping Stop.

How long we keep things

A meetup's names, arrival status and Tab are kept so the group can settle up afterwards, then deleted automatically 30 days after the meetup ends. To have your data removed sooner, email us with the meetup's invite link.

An account is kept until you delete it (see account deletion). Deleting it removes the account, its signed-in sessions and the record of which meetups were yours; the meetups themselves and their Tabs stay for the rest of the group, with your name on them as a guest's would be, until they are deleted in the usual way. A sign-in code sent by email is kept for 5 minutes.

Who can see what

Anyone with a meetup's invite link can see its plan, time, place and the first names of people going, so share links only with people you'd invite. Invite pages are marked so search engines don't index them. Only people who have joined see live ETAs and the Tab. The organiser can remove someone from a meetup or stop new people joining, and anyone can leave; a removed person's name stays on the Tab so the sums still make sense, until the meetup is deleted.

Services involved

• Cloudflare runs the app, stores meetup and account data in its Western Europe region, and provides the approximate location described above. Your IP address is used by Cloudflare and by the app to limit abuse (for example, how many meetups one connection can create); we don't store it.
• Google sign-in, if you choose it, is handled by Google under Google's privacy policy. Google tells us your name, email address and profile photo link, and nothing else.
• Resend, a US email provider, sends sign-in codes if you choose to sign in by email, so it sees your email address and the code, under Resend's privacy policy.
• OpenFreeMap supplies the map. Your browser fetches map data directly, so OpenFreeMap sees your IP address and which map area is being viewed, but not your shared location. The places listed under the map come from that same map data, on your device.
• Stadia Maps supplies place search when you type a place name. Searches go through our server, so Stadia doesn't see your IP address. What you type and the results may be cached by us for up to 24 hours to keep search fast.
• Google Maps and Apple Maps links. If you paste a Maps link, our server follows it to find the place, so Google or Apple sees that request from our server, not from your browser.
• Cloudflare Turnstile checks that a meetup is being created by a person, not a script. It runs in your browser when you create a meetup and usually needs nothing from you; occasionally it asks for a tap. It is covered by Cloudflare's privacy policy.
• Google Fonts supplies the typeface, as on this website.

What we never do

• No ads, no data brokers, no selling or sharing of personal data.
• No analytics or tracking cookies.
• We never hold or move money. The Tab only keeps score; you pay each other in the apps you already use.

Age

Grupt is for adults. Please don't use it if you're under 18.

Your rights

You can ask what we hold about you, ask us to correct or delete it, or object to how we use it, by emailing hello@grupt.app. Grupt is a personal project run by its founder; that address reaches them directly. If you're unhappy with our answer you can complain to your data protection authority (in the UK, the ICO).

Questions

Email hello@grupt.app and a human replies.