Privacy Policy

Click is operated by Cindy Kim, an individual trading as "Click" (ABN 68 308 567 670), based in Sydney, Australia. This is the person responsible for the personal information we collect through the Platform. For any privacy question or request, contact our Privacy Officer at privacy@letsclick.app.

We collect the following categories of personal information:

• Account & profile: name, email, date of birth (to confirm you are 18+), suburb/postcode, profile photo and gallery photos, profile prompts, social handles, and (via Google/Facebook sign-in) the basic profile details those providers share.
• Preferences & matching: your connection intent, interest tags, quiz responses (life stage, availability, event style, energy, personality), and derived matching features used to suggest people and events.
• Activity & connection signals: the events you view, save, and book; your private "clicks" (interest signals) and mutual clicks; proposals; and notifications.
• Bookings & payments: your bookings, guest seats, waitlist offers, and payment metadata returned by Stripe. Click never receives or stores your full card number - card details are entered directly with Stripe.
• Location & technical data: location and place data used for proximity and discovery (via Mapbox and Google Maps), plus device, browser, IP, and usage information collected automatically as you use the Platform.
• Support & safety: bug reports you file (which may include a screenshot of your screen and recent console/network logs, with secrets redacted before they leave your device), and any safety reports or content you submit.
• Merchant information: if you host events, your business details and identity/bank-verification documents (KYC), some of which are held by Stripe and some in a private, access-controlled store.

We collect information directly from you (when you sign up, complete your profile or quiz, book events, or contact us); automatically as you use the Platform (device and usage data); from sign-in providers (Google, Facebook) when you choose social login; and from merchants and payment partners in connection with bookings. Where it is reasonable and practicable, we collect personal information directly from you.

We use your information to: create and manage your account; match you to relevant events and people; process bookings, payments, refunds, and merchant payouts; surface mutual connections; send transactional messages and (where you consent) marketing; keep the Platform safe and investigate reports; improve our matching and product; and meet our legal obligations. We do not sell your personal information.

When you "click" another attendee, that signal is private. The other person is only notified if they click you back (a mutual click). We never reveal one-way interest to anyone. This is a core privacy and safety commitment of the product, reflected in how we store and surface this data.

We send transactional communications (such as booking confirmations, receipts, safety notices, and account messages) that are necessary to provide the service and which you cannot opt out of while you hold an account. We send marketing only where permitted, and you can opt out at any time using the unsubscribe link in those emails or by contacting us. Email is delivered through our email provider (Resend).

We share limited personal information with service providers who help us run the Platform, only as needed to perform their function:

• Stripe - payment processing, receipts, and merchant payouts (Stripe Connect).
• Supabase - our database and file storage (profile data, photos, documents).
• Vercel - application hosting and delivery.
• Mapbox & Google Maps - location, mapping, and proximity features.
• Google & Facebook - optional social sign-in.
• Resend - transactional and marketing email delivery.
• Google Sheets - internal triage of bug reports you submit.

We also share attendee details that a host needs to run an event you book (such as your name and booking, and a door/guest list). We may disclose information where required by law, to enforce our terms, or to protect the safety of our community. We do not sell your personal information.

Some of our service providers store or process data outside Australia (for example, in the United States or European Union). Where we disclose personal information overseas we take reasonable steps, consistent with APP 8, to ensure it is handled in line with the Australian Privacy Principles, including relying on the provider's contractual data protection commitments.

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Platform, and understand how it is used so we can improve it. You can control cookies through your browser settings, though some features may not work without them.

We take reasonable steps to protect your personal information from misuse, loss, and unauthorised access - including encryption in transit, access controls, a private, signed-URL store for sensitive merchant documents, and delegating card handling to Stripe. For more detail see our Security Policy. No system is perfectly secure, so we cannot guarantee absolute security.

We keep personal information only for as long as needed for the purposes described above, to comply with legal, tax, and accounting obligations (for example, payment and booking records), and to resolve disputes and enforce our agreements. When information is no longer needed, we delete or de-identify it. Some records, such as financial transactions, must be retained for the period required by Australian law.

You may access, correct, or request deletion of your personal information, and opt out of marketing at any time. To make a request, contact privacy@letsclick.app. We will respond within a reasonable period. If you are not satisfied with how we handle your request or a privacy concern, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Click is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. The "last updated" date above shows the current version, and we will notify you of material changes in-app or by email. Continued use after a change takes effect constitutes acceptance.