Privacy Policy

Effective date: September 27, 2026

September 27 update: We explain app analytics and the optional Meta ad measurement introduced in app version 1.0.2. This helps us measure whether our ads bring people who use Soirr. Your iPhone tracking choice controls individual advertising measurement. See sections 3, 6 and 7.

1. Who we are

Soirr is an iOS app that helps you find nights out. Its concierge, Maestro, is an AI. It recommends venues, events, and experiences based on what you tell it and where you are.

The app is operated by Soirr AI LLC, 111 NE 1st St, 8th Floor, Miami, FL 33132, United States. For anything in this policy, write to feedback@soirr.com. We answer.

2. What this policy covers

This policy covers the Soirr app and the soirr.com website. The two work differently, so we describe them separately where it matters.

The app does not display ads, and we do not sell your personal information. Starting with version 1.0.2, the app includes Meta's software to measure ads for Soirr, subject to your tracking choice. The website uses the Meta Pixel and Meta's server Conversions API. Section 7 explains each form of ad measurement and how to control it.

3. What we collect

In the app, we collect the information below. Website forms and measurement are described after this list.

• Email address. You sign in with a code sent to your email. We use the address to create and secure your account. Kept while your account exists.
• Location (foreground only). While the app is open, we use your device location to recommend venues near you and show you on the map. We treat precise location as sensitive information. More in section 12.
• Voice input. Only if you tap the mic. We send your recording for transcription, then let you review the text before sending it as a message to Maestro. More in section 4.
• Chat messages. What you and Maestro say to each other. This is how the app works: your messages are processed by our AI providers to generate recommendations. Kept while your account exists so Maestro can remember your taste.
• Push notification token. Only if you turn notifications on. Used to deliver notifications, nothing else.
• App analytics. PostHog processes app opens, screens viewed, onboarding progress, feature use and return visits on servers in the EU. We record whether requests succeed, whether Maestro returns recommendations, and whether you save a place or tap a booking or calendar link. Events can include our account identifier, app version, content identifiers, input type and counts. PostHog also receives device information and can infer approximate location, such as your country or city, from your IP address. We do not put your chat text, voice recordings, optional profile notes or precise location in these analytics events. Tapping a booking link does not tell us whether you bought anything on the other website.
• App ad measurement, from version 1.0.2. When you allow it, Meta receives selected app activity, advertising identifiers and device information to connect use of Soirr with our ads. Details and your controls are in section 7.
• Crash reports. When the app crashes, a technical report goes to Sentry, also on EU servers, so we can fix the bug.
• Invite and account metadata. During beta, invite codes and basic account records.

Website forms. We collect the details you submit to our waitlist, founding survey and curator survey. These can include your name, email, city, experience preferences and survey answers. The curator survey also asks about your work, fees, income and commission preferences, availability, WhatsApp contact, and whether you want a follow-up call. If you add comments or refer someone by name or social handle, we receive that information too.

The founding survey also saves a partial response if you select a problem and then leave before submitting. That record contains the answers selected so far, without your name or email. This helps us understand where people stop.

Netlify stores form submissions. We send submission details to our team by email through Resend so we can review responses and follow up. Resend processes message content, email addresses and delivery information. Those email copies are separate from the records in Netlify.

Website analytics. PostHog records pages opened, fixed survey choices tapped, survey completions, saved contact opt-ins and clicks through to the survey. These events use fixed labels, not the name, email or free-text answers you type. We use campaign tags and referral information to understand how visitors found the site.

On the homepage, PostHog also records which buttons and example recommendations you select, which sections you view, and attempts to open the waitlist form or submit it with invalid details. It records a fixed error label if saving fails. It does not receive the text entered in the form.

Website analytics starts automatically after our own region check allows it, unless you have already opted out. In the EU, EEA, UK, Switzerland, UAE, or when we cannot determine your region, it waits for consent and does not load if you reject. PostHog processes this analytics data in the EU. Its website identifier is kept in session storage for the length of your visit; it sets no analytics cookie and clears that identifier when you close the tab. The footer control described in section 7 lets you stop future tracking.

Prolific research. If you arrive through a Prolific study link, we receive the link's participant, study and submission identifiers. We keep them with your submitted answers to connect the response to the study and send them with our team's form notification. These identifiers can link a response to your Prolific participation. They are not anonymous. Prolific manages your participant account under its own privacy policy.

We keep recognized Prolific visits out of Meta ad measurement. When website analytics is allowed, PostHog receives the study identifier so we can compare study groups. Our website code removes Prolific participant and submission identifiers from those analytics events and their page URLs.

4. Voice input

Voice deserves its own section because it is the most personal thing you can hand an app. Here is exactly what happens when you use it:

1. Audio is recorded only when you tap the mic. Never in the background.
2. The recording is sent to speech-to-text and AI providers solely to turn it into text.
3. You see the text and review it before it is sent to Maestro. If you cancel, nothing goes to the chat.
4. We do not create voiceprints. We do not use your voice to identify you or anyone else. No speaker identification of any kind, by us or by any vendor in our chain. Transcription only.
5. Audio is deleted after transcription, and never kept longer than 30 days.

5. AI processing

Maestro is an AI, not a person. We say this in the app too, but it belongs here as well.

Your chat messages and voice audio are processed by Anthropic and OpenAI. They act as our service providers: they process your content to run the app, and under our agreements with them they do not use it to train their models. We do not train models on your content either.

Recommendations are machine-generated. They can be wrong, incomplete, or out of date. Venues close, lineups change, hours shift. Check before you go.

6. Who processes your data

Legal minimum practice is to name categories of vendors. We would rather name the vendors, because "who reads my chats?" is a fair question and it deserves a straight answer.

We review this table when a vendor changes and at least once a year.

7. Selling, sharing, and ads

In the app: we do not sell your personal information or display ads. Starting with version 1.0.2, we use Meta App Events to measure and improve ads for Soirr on Meta's services. When you allow tracking, selected events tell Meta about app activation, sign-in, onboarding progress, browsing, Maestro use and taps on booking links. Meta may use those events with information from its own services to attribute activity to our ads and improve ad delivery. Under California law, this use can count as sharing personal information for cross-context behavioral advertising.

Your app choices, from version 1.0.2. Your app Profile has separate controls for "App usage analytics" and "Share limited activity for ad measurement". Our own region check allows product analytics to start by default where permitted, unless you have opted out. In the EU, EEA, UK, Switzerland, UAE, or when we cannot determine your region, we ask before optional measurement starts. Declining does not limit the app's features. You can change your choices in Profile.

On iPhone, individual advertising measurement also requires permission through Apple's tracking prompt. If you decline, have not decided, or tracking is restricted, we do not use app events or alternate identifiers to match you across companies for advertising. You can change Apple's permission in iOS Settings under Privacy & Security, then Tracking. A refusal in iOS keeps individual advertising tracking off even if you previously accepted website measurement. Product analytics is separate from advertising tracking.

We do not include your email, phone number, chat text, voice recordings, optional profile notes or precise location in Meta app-event properties. Where supported, Apple's privacy-preserving attribution can report aggregate campaign results without an individual user match or permission to track across companies. Reports may be delayed and limited. Turning off "Share limited activity for ad measurement" in Profile stops new advertising measurements, including registration for Apple's aggregate reporting. It does not erase information already sent or cancel Apple reports already scheduled.

On soirr.com: the website uses the Meta Pixel and Meta's server Conversions API to measure our own ads. After our own region check, they start automatically where consent is not required, unless you have opted out or your browser sends Global Privacy Control. In the EU, EEA, UK, Switzerland, UAE, or when we cannot determine your region, we ask first. Accept and Reject sit side by side, nothing is pre-ticked, and rejecting means neither Meta tool loads or sends events.

The server sends form conversions only for saved submissions made while Meta measurement is allowed. To match these conversions to ads, Meta can receive a hashed email address, Meta browser and click identifiers, and available IP address and browser information. A hashed email can still be matched to an account; it is not anonymous. Meta also receives named events when survey choices are tapped, even if the survey is never submitted. At the last question, the event name says whether you tapped Yes or Not right now about joining the founding list. Other question events identify the question without its answer text. We do not send the text of your survey answers, curator earnings answers or WhatsApp contact to Meta.

Your website choice. Reopen the choice using the "Do Not Sell or Share My Personal Information" link in a website page's footer. Choosing Reject stops future Meta and PostHog tracking when the page reloads. It does not erase events already sent. Under California law, sending browsing data to Meta can count as "sharing" personal information. The Meta Pixel and website Conversions API described here operate on the website. The app's separate measurement and iPhone controls are described above.

Global Privacy Control (GPC). If your browser sends GPC, we keep Meta ad measurement off even if you previously accepted website measurement. Where browser storage is available, we remember this ad opt-out for later visits, including visits without the signal. To reverse that saved ad opt-out, turn GPC off and choose "Allow analytics and ads" in the footer privacy control. The prompt explains that this turns Meta measurement back on, which takes effect on the next page load if measurement is already running. Accept cannot override an active GPC signal. A status beside the footer privacy control shows when GPC or a saved GPC opt-out keeps ad sharing off. PostHog analytics still follows the regional rules above and your site choice.

8. Your rights

We offer these rights to every user, wherever you live, whether or not local law requires it for you:

• Access. Ask what personal information we have about you.
• Delete. Delete your account and the data that goes with it (section 9).
• Correct. Ask us to fix information that is wrong.
• Limit sensitive information. Ask us to limit the use of sensitive information, like precise location, to what the app needs to function.

To delete your account, use Delete account in the app's Profile tab. For other requests, email feedback@soirr.com. We respond within 45 days, or sooner if the law where you live requires it. We will never treat you worse for exercising a right: no reduced service, no different pricing, no penalties.

9. Retention and deletion

We keep your app account data while your account exists. When you delete your account, we delete your email, your chat history, your taste profile, and your push token.

You can delete your account two ways:

1. In the app: Profile tab, then Delete account.
2. By email: write to feedback@soirr.com from the address on the account.

Two honest caveats. Copies can persist in encrypted backups for a short period before those backups cycle out. And some records we have to keep longer where the law requires it (for example, records of a deletion request itself).

Voice audio follows the shorter window in section 4. Crash reports and analytics are kept only as long as they are useful for fixing and improving the service.

Website form records and team notification emails are separate from your app account and are not automatically removed when you delete that account. We use them for research, managing founding-member and curator interest, and follow-up. To request their deletion, email feedback@soirr.com and identify the form or study you took part in. We handle that request under section 8, including the form records and email copies we hold.

10. Security

Data moves between your phone and our servers over encrypted connections. Access to production systems is limited to the people who need it to run the service. No system is unbreakable, and we will not pretend ours is, but we take the standard precautions seriously and our analytics and crash tooling sit on EU infrastructure with strong defaults.

11. Age

Soirr is for adults. You must be 18 or older to use it. The app is not directed at anyone under 18, and we do not knowingly collect personal information from anyone under 13. If we learn an account belongs to someone under 18, we close it and delete the data.

12. Location

Location runs in the foreground only. The app uses it while open to find venues near you and place you on the map. It does not track you in the background.

You control it at the OS level: iOS Settings lets you grant location once, only while using the app, or never. The app works without location; recommendations are just less local. We treat precise location as sensitive personal information, and we do not sell it. Ever.

13. Push notifications

If you enable notifications, your device gives us a push token, which we use through Expo to deliver them. Turn them off any time in iOS Settings and the token stops being used. That is the whole story.

14. Changes to this policy

The September 27, 2026 update describes app activity measurements and optional Meta app measurement from version 1.0.2. The September 26 update covered website forms, Prolific research, Resend notifications, homepage analytics and GPC handling. The September 23 update explained regional website measurement and extended section 8 rights to users wherever they live. When this policy changes, we will update the effective date at the top. If we plan to use or share personal information in a materially different way, we will give any notice or choice required by law before the new practice begins.

15. State-specific notices

California. California residents have rights to know, delete, correct, and limit the use of sensitive personal information, described in section 8, along with the right not to be discriminated against for using them. Categories we collect include identifiers (name, email, WhatsApp contact, online and research identifiers), precise geolocation (sensitive), audio information (voice input), electronic activity (chat messages, app and website usage), professional and commercial information supplied in curator responses, and inferences (your taste profile). Sources include you, your device, study links and referrals people submit. Purposes and recipients: sections 3 and 6. We do not sell personal information; app and website ad sharing and the controls for each are described in section 7.

Other states. If your state gives you privacy rights (Virginia, Colorado, Connecticut, Texas, and others), we honor requests under those laws through the same channels in section 8. If we deny a request you may appeal by replying to our response, and we will answer the appeal within the time your state's law sets.

Questions about any of this: feedback@soirr.com.