Privacy policy
Eighthold is a mobile app for small invite-only circles. There is no public feed, no stranger discovery, and no advertising.
What we collect
| Data | Why | Where it lives |
|---|---|---|
| Email address | Sign-in via one-time codes (no password) | Supabase Auth |
| Display name | How you appear to people in your circles | Supabase (profiles) |
| Circle data | Circle name, job type, house rules, memberships | Supabase |
| Gathering data | Dates, places, what to bring, happened / cancelled / no-show | Supabase |
| RSVPs | Your in/out answer for a scheduled night | Supabase |
| Invite tokens | Single-use links to join a circle (metadata only) | Supabase |
| Precise location (while in use) | Field only — map and on-device vitals during a gathering for Crew, Training, or Help circles | Processed on your device; map tiles may use network |
We do not collect: contacts, photos for a feed, browsing history, advertising IDs for tracking, or location when you are not using Field.
How we use data
- Run the app: auth, circles, RSVPs, host tools, invites.
- Send local notifications on your device (soon gathering / no next date) — scheduled on-device; we do not operate a marketing push service.
- Keep the record honest (e.g. distinguish “nobody came” from “host cancelled”).
We do not sell your data, show ads, or build a public profile graph.
Who processes data
Supabase hosts the database and authentication for the app
(dswnvbquztasruntjafg.supabase.co). Project data is stored in the
EU (Ireland, eu-west-1) region. They process data on our behalf as infrastructure provider. See
Supabase privacy documentation.
No other third parties receive your circle content for analytics or advertising.
Retention and deletion
- While you use Eighthold, data needed for your circles is kept in Supabase.
- Leave a circle: your membership and related rows for that circle are removed via the app’s leave flow.
- Last person leaves: the circle and its gatherings, invites, and RSVPs are deleted (database rules).
- Delete your account: Email support@corespaces.ae. We will delete your auth account and profile; circle data you alone hold may be removed when you leave or when the last member leaves.
Field GNSS data used for vitals is computed on device and is not uploaded as a location history to our backend.
Security
- Clients talk to Supabase over HTTPS.
- Database access uses row-level security: non-members cannot read a circle’s data.
- App mutations go through server functions, not direct table writes from clients.
Children
Eighthold is for adults meeting in the real world. It is not directed at children under 13 (or the applicable age in your country).
Changes
We will update this policy when practices change. The effective date at the top will change when we do.
Your rights
Depending on where you live, you may have rights to access, correct, or delete personal data. Contact the address above. App data for Eighthold is hosted in the EU (Ireland); if you are in the UAE, EU/UK, or elsewhere, local laws may give you additional rights.
Published by CoreSpaces L.L.C-FZ, UAE · Effective November 1, 2026