Your nights out are not our product.

The short version

• We never store a full ID number. When an ID is scanned at a door, Cohost keeps only the document type, the issuing state or country, the date of birth, and the last four characters of the ID number.
• The camera scan happens on the phone. Cohost’s servers never receive an image of your ID — only the fields above.
• No ads, no selling data, no tracking across other apps or sites, no third-party analytics or advertising SDKs.
• You can delete your account in the app: Settings → Delete Account. It works and it’s permanent.

What Cohost collects

Your account. Email address, display name, an optional username, and the password you sign in with. Your login email is stored to authenticate you; contact identifiers used for matching are stored as hashes.

Guest lists hosts create. Cohost is a tool hosts use to run their events. A host may enter guests’ names, contact details, notes, roles, and attendance — the same things a paper list or spreadsheet would hold. Those records belong to the host who made them.

ID check-in fields. Where a host checks IDs at the door, Cohost records: document type, issuing state or country, date of birth, and the last four characters of the ID number. Never the full number, and never an image of the document.

Photos. Profile and event photos that you or your hosts add.

Location, only if you opt in. Some events offer live-map sharing (a run club, a bar crawl). Sharing your precise location is opt-in and scoped to that event’s map. Nothing tracks you in the background.

Things you submit. RSVP answers, join requests, messages, expense entries, poll votes, waitlist signups (name, email, phone, interests) — the content you type into the product.

Operational records. First-party usage events and device records that keep sync, security, and the audit trail working. We use no third-party analytics.

How it’s used

To run the product: check-in at doors, RSVPs, guest lists, sync between a host’s devices and their dashboard, messages, and safety features. That’s the whole list. We don’t sell personal data, rent it, or use it for advertising.

Who can see what

Cohost is built on a strict visibility floor:

• Public event pages and big-screen displays show audience-safe information only — never real names beyond a first name, never dates of birth, ID fields, contact details, or attendee lists.
• A host sees the guest records they created. Door staff see what the host’s permission settings allow.
• Photos a host attaches to their guest records are visible to that host — and to other hosts who have independently verified the same person at their own events. If that verified person is you, you can also see your own attended-event history and photos.
• Hosts see aggregate follower counts, never a list of who follows them.
• Attendance forecasts shown to hosts are aggregates. Individual reliability is never shown to hosts.

Where your data lives

The app is offline-first: a host’s working data lives on their device and syncs to Cohost’s database over HTTPS. Every database table is protected by row-level security — access rules enforced by the database itself, not just the app. Public pages read through narrow, purpose-built projections.

Retention

Cohost prefers archiving to deleting for shared history: events, results, and audit trails stay reachable to the people they already belonged to. The audit trail of door decisions is append-only — that’s a safety feature. Records a host keeps about their guests are the host’s records, on the same basis as their guest book.

Deleting your account

In the app: Settings → Delete Account. It runs immediately and cannot be undone. What it does:

• Permanently deletes your profile, intent cards, settings, personal media, location shares, and the personal data you own.
• Anonymizes your name on shared records — messages, expenses, check-ins render as “Deleted account.”
• Archives events you hosted, with your identity removed, so your guests keep their own history.
• Releases your username and frees your email address; your sign-in stops working everywhere.

Records other hosts made about you as their guest (a name on their list, an attendance record) belong to those hosts and remain with them. If you want a specific host’s record about you corrected or removed, ask that host — or contact us and we’ll help.

Your choices

• See and edit your profile and settings in the app.
• Location sharing is off unless you turn it on, and scoped to a single event when you do.
• Delete your account in the app, any time.
• Questions, access requests, or anything this page doesn’t answer: email us.

Children

Cohost is not directed at children under 13, and we don’t knowingly collect their data. Age fields exist so hosts can enforce minimum ages at their own doors.

Changes

If this policy changes in a way that matters, we’ll say so here with a new effective date — plainly, not buried.

Contact

[email protected]