Privacy
Policy

Who we are

friyays club ("we", "us", "our") is a social calendar app operated by Jaime Aguilera Garcia. Our app and website are available at friyays.club. You can contact us at hello@friyays.club.

What we collect

• Account data: email address, display name, optional bio, optional Instagram and LinkedIn handles.
• Date of birth: optional — we ask for it at sign-up, but you can skip it. If you provide it, we use it to show your birthday to your connections.
• Favourite places & important dates: a list of favourite places (each may include a place name and location) and important dates (each may include a date and a title) that you, or your circles and communities, choose to save.
• Content you create: events, trips, RSVPs, photos you upload, and connections you form.
• Device data: push notification token (if you grant permission), device OS type.
• Usage data: error logs and crash reports via Sentry (no personally identifiable data is attached to error reports).

How we use it

• To operate the app and send you notifications about events and connections you care about.
• To enable other users you connect with to find and interact with you.
• To diagnose crashes and improve the app.
• We do not sell your data to third parties. We do not use your data for advertising.

Birthdays, favourite places & important dates

Friyays lets you add a few personal details that bring your shared calendar to life: your date of birth, a list of favourite places, and important dates. All of these are optional. We treat your date of birth as sensitive personal information and protect it accordingly.

• What we collect:your date of birth (requested at sign-up, but you can skip it); a “favourite places” list, where each entry may include a place name and location; and important dates, where each entry may include a date and a title. You, or the circles and communities you belong to, can save these.
• Why we use it, and lawful basis:to show your friends' birthdays and your shared important dates on the calendar, and to let you keep your favourite places. We process this to perform the Service you ask for and, for your date of birth, on the basis of your consent — it is optional and you can skip or remove it at any time.
• Your age stays private: we store your full date of birth, but only your birthday (day and month) is shown to your connections by default. Your age and birth year are hidden unless you choose to opt in by turning on “Show my age”.
• Who can see it: birthdays are visible only to your accepted connections. Favourite places and important dates follow the same rule — they are visible to your connections, or to the members of the circle or community they are saved to. None of this is public, sold, or used for advertising.
• Your control: you can edit or remove your date of birth at any time in Settings/Profile, toggle whether your age is shown, and delete any saved favourite place or important date. Deleting your account removes all of it. These are your GDPR rights to access, rectify, erase, and withdraw consent, consistent with the rest of this policy.

Finding friends from your contacts

Friyays helps you find people you may already know, and lets people who already know you find you. Here is exactly how it works and how we protect everyone's data.

• Contact matching happens on your device:when you use the optional “find friends” feature, Friyays converts the email addresses and phone numbers in your device's contacts into one-way cryptographic digests (SHA-256) on your device. Only these irreversible digests are sent to us, checked for matches with people already on Friyays, and then discarded. Nothing from your address book is stored on our servers— we keep no list of these digests and no copy of your contacts' names, email addresses, or phone numbers. We never message your contacts. Phone-number matching is best-effort, since numbers can be stored in different formats.
• Email discoverability is on by default: your email address makes you discoverable to people who already have it. We store a one-way digest of your email — never shown to anyone — so that someone with your email address in their contacts can find your profile on Friyays. This is on by default so friends can find you, and you can turn it off at any time in Settings → Find me, which removes your matchable digest.
• Phone discoverability is opt-in: being findable by your phone number is off until you turn it on in Settings → Find me. If you opt in, your number is stored only as a secure one-way hash — never the raw number. You can opt out at any time, which removes the hash.
• Lawful basis (Article 6 GDPR): for email discoverability, our legitimate interest in helping people who already know each other connect, balanced against your rights and paired with a one-tap opt-out in Settings → Find me. For phone discoverability, your consent, which you can withdraw at any time in the same place.
• Retention:we do not retain your contacts at all — they are hashed on your device, checked, and discarded in the moment. Your own discoverability digests are kept only while the corresponding “Find me” setting is on, and are removed when you turn it off or delete your account.
• Your rights: you can access, object to, erase, and export this data — use the toggles in Settings → Find me to stop being discoverable and remove your matchable digests, and use the in-app data export (or email us) to access a copy.
• No selling or sharing:we never sell or share this data. Your contacts' information is never stored, is never used to build profiles of people who aren't on Friyays, and is never used for advertising or tracking.

Legal basis (GDPR)

We process your personal data on these bases under Article 6 GDPR:

• Performance of a contract — to provide the Service you sign up for (your account, events, RSVPs, connections).
• Legitimate interests — to keep the Service secure, diagnose crashes, and prevent abuse, balanced against your rights.
• Consent — for optional features such as push notifications, which you can withdraw at any time in your device or app settings.

Who we share it with

• Supabase — database and authentication (EU region, Frankfurt).
• Expo / EAS — mobile app delivery and push notification routing.
• Sentry — crash and error monitoring.
• Vercel — web hosting.
• Google — place and location suggestions when you set an event location (we send only your search text, never your device location).

All processors are bound by data processing agreements and operate under GDPR-compliant frameworks.

International transfers

Your data is stored in the EU (Frankfurt). Some processors (such as Expo, Sentry, Vercel, and Google) may process limited data outside the EU. Where they do, transfers are protected by the European Commission's Standard Contractual Clauses or an adequacy decision.

Your rights

Under GDPR you have the right to access, correct, export, or delete your data at any time. You can delete your account directly in the app under Settings → Delete account, which permanently removes all your data. To request a copy of your data, or for any other request, email hello@friyays.club — we respond within one month. You also have the right to lodge a complaint with your local data-protection authority; in Spain this is the Agencia Española de Protección de Datos (aepd.es).

Children

friyays club is not intended for anyone under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

Data retention

We retain your data for as long as your account is active. On account deletion, all personal data is permanently removed within 30 days. Anonymised aggregate analytics may be retained indefinitely.

Cookies

The friyays club website does not use tracking or advertising cookies. We use a single session cookie to authenticate you on the web if you access invite links.

Changes

We may update this policy from time to time. Material changes will be communicated via in-app notification or email. Continued use after the effective date constitutes acceptance.