A little help for your next discovery.

Privacy policy

Jon Moubayed operates the Out There friends beta. This policy describes the iPhone app and this website.

Your Passport and photos

In cloud-enabled builds, visits, captions, photos, saved postcards, XP, outfit, saved places and event plans are stored privately in Supabase under your account. The phone keeps temporary working data and cached photos for display. Cached account media is cleared on sign-out. Browsing does not require an account; saving and editing require sign-in and a network connection. There is no offline save queue.

Earlier builds, including 1.0 (4), store this data only on the phone. The cloud version offers an explicit import linked to the account you choose. The original is removed only after confirmed import. A random consumed-import identifier is retained without Passport content to prevent the same import being claimed again.

Accounts and friends

If you choose Sign in with Apple, Supabase processes the Apple-provided account identifier and email, your profile name and your chosen username. Apple may provide a private relay email. Other signed-in users can find your chosen name and username through people search and profile links, but cannot see your account email. Blocking prevents the blocked pair from finding each other through these features. Sessions are stored using the iPhone’s secure Keychain. Friend requests, accepted connections and blocks are stored online.

Postcards you submit

A social post is created only when you deliberately submit it for sharing. It includes its image, caption, place, visit date and any people you tag. You can compose a separate post or share a Passport memory. Tagging does not expand the audience beyond your accepted friends, and a tagged person can remove their own tag. When you agree to share, Out There sends the postcard image and its title, place, city and caption to OpenAI for automatic safety checks. The image may include your visit date. Passing postcards are shared automatically with accepted friends; flagged postcards stay private for a moderator to review. Edits are checked again. Delayed checks retry automatically. Earlier submissions without this consent remain in manual review. Private Passport photos are not sent for social moderation unless you choose to share a postcard.

Removing a post, removing a friendship or blocking someone prevents fresh authorized downloads. Previously downloaded copies, including copies cached by the hosting service, may remain available. A person may also keep a copy they saved or shared; Out There cannot recall those copies.

Reports and moderation

A report contains its reason, your optional details and a snapshot of the reported postcard’s text. The beta operator uses reports and moderation actions to investigate abuse, remove content and restrict sharing. Reports are not shown to other users; you can see your own status and the moderator’s public response. Unpublishing a postcard does not itself erase its report. Deleting either associated account removes the related reports. Reports and limited moderation audit records are deleted by the operator’s 90-day cleanup routine.

Services the app contacts

Supabase hosts account, private Passport, photo, sharing and reviewed event data in cloud-enabled builds. OpenAI processes postcards submitted with your consent for automated moderation; account identifiers and email addresses are not sent as separate fields. Its moderation endpoint documentation lists no training use and no content retention for abuse monitoring or application state. Out There records limited consent and decision audit information, without retaining raw provider responses or extra screening image copies. OpenFreeMap serves map tiles and labels. These services receive network information such as your IP address; map requests reveal the map areas you view. Apple handles Apple sign-in, TestFlight and system features. Opening an official event page or sharing a postcard through another app sends you to that service, under its own privacy practices.

Out There does not include advertising or third-party analytics SDKs, sell your information, or use your activity for cross-app advertising. This website has no analytics, forms, cookies or embedded third-party content added by Out There. Its optional outing preview page requests only the shared preview from Supabase using the token in your link. Its hosting service may process ordinary network access information to deliver it.

Pending memories

New visit drafts can be saved on your phone for the signed-in account, including up to four photos and a caption. They upload when the app reconnects in the foreground. Stamps and XP stay pending until the server confirms the visit. Sign-out hides these drafts until the same account returns. You can review or discard them in Passport; drafts are not a cloud backup and are removed if you delete the app.

Outings, lists and calendar copies

Named lists and saved outings are private in your account. You can explicitly send a separate copy to selected accepted friends. Organizers can see their invited friends’ replies; other guests see their own reply. Blocking or removing a friendship removes access. You can optionally create a seven-day web preview link showing the shared title, date and places to anyone with the link. Guest names, Passport photos and private notes are excluded; you can revoke the link. Editing the shared copy revokes its previous preview link. Calendar exports and image recaps are separate copies under your control; changes in Out There do not update them automatically.

Deletion and your choices

In Passport → Your account, Delete account removes the online profile, friend connections, blocks, related reports and shared postcard files after Apple verification. In cloud-enabled builds, deletion also removes the private Passport, private photo files, shared outings and lists, and pending memory drafts on this phone. An older local Passport that has not been imported remains on the phone. Deletion requires a network connection; if cleanup fails, sharing is hidden while you retry. To remove a visit from your Passport, use Remove visit. In cloud-enabled builds this requires a network connection. To remove all app-local data, delete the app from the iPhone.

For privacy requests or problems completing deletion, contact support@gooutthere.app. We may need enough information to confirm that the request concerns your account. Do not send your password or Apple authorization code.

Changes

Material changes to these practices will be reflected here and in the app’s beta information. The date above identifies this version.