Privacy Policy

Last updated: October 8, 2026

Who's In is a tool for organizing recurring pickup games and group activities. It is designed to be private by default: your data stays on your device, and we do not run any servers that receive it, unless you choose to sign in for cross-device backup, described below.

What the app accesses

• Contacts. With your permission, Who's In reads your device contacts so you can choose players for your roster and send them a group text invitation. You can also add a new contact, which (with your confirmation) is saved to your phone's Contacts. Contact data stays on your device unless you sign in (see below).
• Messages. Who's In composes an SMS/iMessage invite and hands it to your Messages app, which handles delivery. Who's In cannot read your messages or replies, iOS does not allow this.

What the app stores

By default, all data is stored only on your device:

• Your roster (player names, phone numbers, and linked contact IDs)
• Your ratings (Reliability, Skill, Vibe) and notes per player
• Session history (who was invited, RSVP status, response times)
• App settings and Pro entitlement status

This data is not uploaded to any server, not shared with any third party, and not accessible to us, unless you turn on account sign-in, or send an invite with an RSVP link (below).

Optional account sign-in and cloud backup

Who's In lets you optionally sign in with Google or Apple to back up your roster and access it on more than one device. Signing in is off by default and only happens if you choose it from Settings.

If you sign in:

• We receive basic account info from Google/Apple (your name, email address, and profile photo, used to identify your account).
• Your roster, including player names, phone numbers, ratings, notes, and session history, is copied to a secure cloud database (Firebase/Firestore) under your account, so it can sync to your other signed-in devices.
• This data is stored under your account only. We don't sell it, share it with third parties, or use it for advertising.
• You can delete your account and all associated cloud data at any time from Settings. This permanently removes your synced roster, sessions, and account info from our servers.

If you never sign in, none of this applies, and your data never leaves your device.

Optional RSVP links

When you send an invite you can choose to include an RSVP link, so the people you invite can answer In, Maybe, or Out in a web browser. This is off until you turn it on. For each invite sent with a link:

• We store the event details you typed (activity, when, where, and your optional sign-off name) and each invitee's first name and last initial in our cloud database (Firebase/Firestore), so the RSVP page can show them. Phone numbers, ratings, and notes are never uploaded.
• When someone answers, we store their answer, the name they chose or typed, and the time.
• The event is only reachable through its unguessable link; anyone you share the link with can see the event, who has answered, and add an answer. Events can't be searched or listed.
• To create the event, the app uses your signed-in account if you have one, otherwise an anonymous Firebase identifier. It is never used for tracking or advertising, and your roster is not uploaded.
• Deleting the session in the app deletes its event details. Otherwise, event data is kept only as long as needed to run the game and is then deleted.

People who answer on the RSVP page don't need an account; the page stores only which name they picked, in their own browser.

In-app purchase

Who's In Pro is a one-time in-app purchase processed entirely by Apple. We do not collect or store any payment information. Restore purchases are handled through your Apple ID via Apple's App Store infrastructure.

Analytics and tracking

Who's In does not include advertising frameworks or third-party tracking. The app may send anonymous usage events to Google Analytics (GA4) to help us understand how the Pro upgrade screen is used, such as when the app is opened, when the upgrade screen is shown, and whether a purchase starts, succeeds, fails, or is restored. These events contain only the event name, a short fixed value (such as which screen it came from or a brief purchase result like canceled, pending, or error), your app language and screen size, and a random identifier generated on your device. They never include your roster, contacts, player names, notes, or anything you type, and they are not linked to your name, email address, or account. As with any internet request, Google's servers receive your IP address, which Google Analytics uses to estimate general location. We do not collect crash reports from third-party services. (If you sign in, we use your account identifier to store your synced data under your account, see "Optional account sign-in and cloud backup" above, but this is never used for tracking or advertising.)

Support contact form

If you submit a message through our support page at sviewstudios.com/whosin/support.html, that message (and any email address you provide) is collected by Netlify Forms and sent to us for the sole purpose of replying to your request. We do not use it for any other purpose.

Children's privacy

Who's In is not directed at children under 13 and does not knowingly collect information from children.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page. Continued use of the app after changes constitutes acceptance.

Contact

Questions about this policy? Contact us via the support page.