+1 Privacy Policy
Last updated 9 October 2026
This page explains what information the +1 app collects, why, who it is shared with, and what you can do about it. We have tried to keep it short and honest.
Who we are
+1 is a mobile app for planning events with friends, made by Lets-hi Inc., a company
based in the United States. For anything in this policy, write to
ogallemi@lets-hi.com. Lets-hi Inc. is responsible for (the
"controller" of) the information described below.
What we collect, and why
- Account. Your email address and a password (stored only as a hash) to sign you in,
send password-reset codes, and keep your account secure. Your display name is shown to other
users.
- Profile. Optional photo, short bio and interests you choose to add. These are
visible to other people on +1.
- Social graph. Friendships, friend requests, group memberships and private invite
lists you create, so the app can show you your friends' events and let you invite people.
- Events and RSVPs. Events you create (title, time, place, description, cover photo)
and your responses to invitations. Who can see an event depends on its privacy setting: private
events are visible only to invited guests; public events are visible to everyone nearby.
- Messages. Direct messages and group chats you send, stored so the recipients can
read them.
- Photos and reviews. Photos you share after an event and star ratings you leave,
visible to the other people who could see that event.
- Location. With your permission, your approximate device location is used to show
events near you, centre the map, and look up public events happening around you. We do not keep
a history of where you have been. The coordinates you pick for an event you host are stored as
part of that event. You can switch location off in iOS Settings at any time and choose a place
by hand instead.
- Camera and photo library. Used only when you choose a cover photo, share event
photos, or scan a guest's ticket at your own event. Images you pick are uploaded; nothing is
read from your library otherwise.
- Calendar. Only to add an event you are attending to your calendar when you ask.
We never read your existing calendar entries.
- Notifications. A device push token so we can tell you about invitations, friend
requests, changes to events you are going to, and reminders after an event.
- Payments. For paid events, your card details are entered directly with Stripe and
never reach our servers. We store the ticket amount, a Stripe payment reference and a unique
ticket code so hosts can check you in. Hosts who want to be paid out complete identity
verification with Stripe; Stripe tells us only whether payouts are enabled.
- Safety. People you block, and reports you file — including a copy of the reported
text so we can review it after it is deleted. Reports are seen by the +1 team only and are kept
while your account exists; the person you report is never told who reported them.
- Waiting list. If you leave your email address on plus1-app.com before the app
launches, we keep it only to tell you when +1 is available. It is not linked to any account, and
you can ask us to remove it at any time at the address above.
- Technical data. Standard server logs (such as request timestamps and errors) used to
keep the service running and secure. We do not run analytics or advertising trackers in the
app.
Who we share data with
We use a small number of service providers to run +1. They process data only on our
instructions:
- Convex — hosts our database, file storage and server code.
- Stripe — processes payments and host payouts, and handles the identity verification
required for payouts under its own privacy policy.
- Resend — delivers transactional email such as password-reset codes.
- Expo — delivers push notifications to your device.
- Apple — provides the map and app distribution.
- Replicate — generates AI cover images from the short description a host types; only
that text is sent, never your name or account details.
- Google (Gemini) and Meetup — used to find public events around a place. We send the
name of the area only, never your identity or precise position.
We do not sell personal data, and we do not share it with advertisers. We will disclose data
if the law requires it or to protect the safety of our users.
What other users can see
Your name, photo, bio and interests are visible to other people on +1. Your friends
can see events you host or attend, and anyone on +1 can find you by name to send a friend
request. Hosts of events you join can see your name, your RSVP, and whether your ticket was used
at the door. You control who you accept as a friend and which events you join. People you block
cannot see your profile, events or messages, and you cannot see theirs.
How long we keep it
We keep your data for as long as you have an account. When you delete your account
(Settings → Delete account), your profile, friendships, messages, photos, RSVPs and the events
you host are deleted immediately; events you host that have not happened yet are cancelled and
guests are refunded. Payment records are kept for as long as accounting and tax law require,
but they are no longer linked to a profile. Backups are overwritten within a short period.
Your rights
Depending on where you live (for example under the GDPR in Europe or the CCPA in
California) you can ask us to access, correct, export or delete your personal data, to restrict
or object to how we use it, and to withdraw consent (for example by turning off location or
notifications in iOS Settings). We never sell personal data, so there is nothing to opt out of
on that front. You can edit your profile and delete your account from inside the app; for
anything else, email ogallemi@lets-hi.com. We will not treat
you differently for exercising these rights. You also have the right to complain to the data
protection authority where you live.
Legal basis and international transfers
We process your data to provide the service you signed up for (contract), to keep
the service secure and to meet accounting obligations (legal obligation and legitimate
interest), and, for location, camera, calendar and notifications, because you gave permission
(consent), which you can withdraw at any time. Lets-hi Inc. and its providers operate in the
United States, so your data is stored and processed there; where the law requires it, transfers
from other regions rely on standard contractual safeguards.
Children
+1 is not intended for anyone under 13, or under 16 where local law sets that age.
We do not knowingly collect data from children; if you believe a child has created an account,
contact us and we will delete it.
Changes
If we change this policy in a way that matters, we will tell you in the app before it
takes effect. The date at the top shows the current version.