Privacy Policy
This Privacy Policy describes how Lineup Labs (OPC) Private Limited ("we", "us", "our") collects, uses, and shares information when you use the Don't Bail mobile app and related services (the "Service"). Contact us at developer@uselineup.app with any questions. Your use of Don't Bail is also governed by our Terms of Service.
1. Information we collect
We collect only what is needed to run the Service:
- Account information — your mobile phone number and display name, provided during sign-up. Your mobile phone number is used for SMS one-time password (OTP) authentication.
- Event and group data — groups you create or join, events you create or respond to, your RSVP status, and related activity (invites sent, auto-promotions, etc.). This is the core data the app needs to function.
- User-entered content — event titles and details, event locations you type or select, availability-poll text, task and note text, scorecard text, group names, chat messages, reports, and other free-text content you submit.
- Contact discovery settings — whether other Don't Bail users can find you by your phone number, and whether you can search for others by phone number. If you open a people picker with contact discovery enabled, Don't Bail requests contacts access, reads contact names and phone numbers to show matches, sends normalized phone numbers to resolve matching Don't Bail users, and does not store or upload your full address book.
- Live location data — if you choose to start Live location for an active event, we collect precise device location while you are in the app or actively sharing for that event. This powers the live map, ETA, and venue-arrival features. Live location and ETA features are convenience features and are not emergency, safety, transportation, or guaranteed monitoring services. On Android, a persistent notification is shown while Live location is active.
- Device information — device push-notification tokens, device model, OS version, app version, and language — used to deliver notifications and diagnose issues.
- Paid-event and transaction data — the event and host identity, checkout and payment identifiers, integer-paise price and fee amounts, payment status and method category, refunds or reversals, admission entitlement, QR credential state, check-in records, payout and ledger records, and related audit history. The payment provider—not Don't Bail—collects and processes your full payment credentials.
- Paid-host information — legal and display name, verified email and Indian mobile status, Host Agreement acceptance and IP address, payout method and destination, destination-change history, provider linked-account/KYC status when applicable, and risk-review records. Payout destination secrets are encrypted and access is restricted.
- Log data — standard server logs including IP address, request timestamps, and error traces, used for security and debugging.
We do not collect health data, browsing history, advertising identifiers, your full device address book, full card numbers, card security codes, UPI PINs, or online-banking passwords. We do collect the limited transaction, payout, and accounting records described above when paid features are used.
Don't Bail includes user-generated content. You control what you type into event titles, event details, group names, messages, notes, tasks, polls, scorecards, reports, and other free-text fields. Do not include another person's personal, private, sensitive, confidential, medical, financial, identity, or safety information unless you have a lawful basis and their permission to share it.
2. How we use information
- To authenticate you via SMS OTP.
- To provide core features: letting you create events and groups, invite people, search for existing Don't Bail users by phone number, track RSVPs, and view history and stats.
- To provide optional Live location, including live map visibility, ETA, arrival detection, and post-event arrival history.
- To send push notifications for invites, spot changes, and reminders you have opted into.
- To detect abuse, debug errors, and keep the Service secure.
- To moderate content, investigate reports, prevent abuse, and enforce our Terms of Service.
- To create and verify payment orders, prevent overselling, issue admission, operate QR check-in, reconcile provider events, process supported reversals, calculate host balances, review risk, and administer payouts.
- To comply with legal obligations.
We do not use your data for advertising, and we do not sell your data.
3. How we share information
Your data is shared only in these cases:
- With other Don't Bail users — your display name, RSVP status, and group membership are visible to other members of groups or events you are part of. Your phone number can be used to find you only if both sides have phone search enabled in Settings.
- With event attendees during Live location — when you start Live location, confirmed attendees for the same eligible event can see your live or last-known location, ETA, and arrival status during that event's Live location window.
- With people involved in user content — event content, group content, chat messages, reports, scorecards, tasks, notes, RSVP status, and related activity may be visible to event attendees, group members, chat participants, moderators where appropriate, and other users you interact with.
- With service providers that help us operate the Service (such as authentication, messaging, and notification delivery). They process data on our behalf under appropriate confidentiality and data-protection terms.
- With payment and payout providers — payment-order, amount, currency, payer, host, refund, transfer, and reconciliation data is shared with providers such as Razorpay as needed to process and account for paid events. A provider may independently collect payment credentials and perform legally required verification under its own privacy terms.
- Between paid-event participants — the host identity is displayed to guests on the event, checkout, admission, and payment-confirmation surfaces. Hosts can see attendee admission and check-in status, but not a guest's full payment credentials.
- When required by law — in response to valid legal process, or to protect the rights, safety, or property of Don't Bail or others.
- In a business transfer — if Don't Bail is acquired, data may transfer to the successor entity, subject to this policy.
4. Data retention
We retain your account data while your account is active. User-entered event, group, chat, task, note, poll, scorecard, and report content is retained while your account is active or until you delete the content where deletion is available. For live location, Don't Bail does not store route history. Don't Bail stores only your latest live-location ping while Live location is active, so Don't Bail can show you on the event map and calculate ETA. Each fresh coordinate replaces and deletes the previous coordinate. The remaining latest coordinate is deleted when you arrive at the event location or when the event ends, whichever happens first. After that, Don't Bail retains no live-location coordinates for that event. We retain event arrival time for event history and punctuality features.
If a paid-event payment occurs, we retain the event snapshot, seller identity, Host Agreement version, payment and provider references, admission, ledger, payout, cancellation, refund/reversal, risk, check-in, and audit records for the period required to reconcile transactions, address disputes and chargebacks, prevent fraud, and comply with tax, accounting, payment, and other legal obligations. These records may be retained after account deletion and access to them will be restricted. Other personal information is deleted within 30 days of a valid deletion request unless another lawful retention ground applies. Anonymised, aggregated analytics may be retained for an extended period.
5. Your rights
Depending on where you live (e.g. EEA, UK, California), you may have rights to:
- Access, correct, or delete your personal information.
- Object to or restrict certain processing.
- Receive your data in a portable format.
- Withdraw consent where processing is based on consent.
You can delete your account from within the app (Me → Privacy & safety → Delete account) or by emailing developer@uselineup.app. We respond to requests within 30 days.
6. Security
We use HTTPS for all client-server traffic, encrypt data at rest, limit employee access to production systems, and follow industry-standard security practices. No system is perfectly secure; you use the Service at your own risk.
6.1 User content and event safety
We do not verify user-entered content for accuracy, legality, safety, or completeness. Other users who can see an event, group, chat, report, scorecard, or profile may read, copy, save, screenshot, or disclose content you share with them. Don't Bail does not organize, supervise, verify, or guarantee events, users, venues, attendance, safety, transport, or in-person conduct. Those responsibility and liability terms are explained in our Terms of Service.
7. Children
Don't Bail is intended only for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, email developer@uselineup.app and we will delete it.
8. International users
Don't Bail is operated by Lineup Labs (OPC) Private Limited from India. By using the Service you consent to your data being transferred to and processed in India and other countries where our service providers operate.
9. Changes to this policy
We may update this policy from time to time. Material changes will be announced in the app or through another appropriate notice. The "Effective date" at the top reflects the most recent update.
10. Contact
Lineup Labs (OPC) Private Limited
Registered office: 1st Floor/102, C-38-39, Parinee Crescenzo, Bandra (East), Mumbai 400051, Maharashtra, India
Corporate Identity Number (CIN): U62011MH2026OPC473599
Questions or requests: developer@uselineup.app.