Privacy policy

Xenia is an experience exchange. We collect only what we need to run it, and we don’t sell your data. This explains what we collect, why, and your choices. It’s a plain-language summary, not a substitute for the legal terms your use is governed by.

What we collect

• When you apply: your name, email, city, a photo of you, what you’d share, and the references you provide (their name, how you know them, and contact info).
• As a member: your profile (photo, neighborhood, story, and what you do), the plans you open and the ones you take a spot at, your messages with other members, and your spot balance.
• Where you live: the address you give when you join. We read your city and neighborhood from it and place you on the club map by the neighborhood, never the address. Members see only the neighborhood, and we don’t keep the address itself.
• Where you meet: the place a host names for a plan. A guest sees it only once the host has confirmed their spot.
• Your mailing address: only if you add one in Settings, so members can post you a card. It is never shown to another member and is used for nothing else. You can remove it there at any time.
• Technical: basic app and device information needed to keep the service working and secure.

How we use it

• To review applications and run the vetting process.
• To operate the club, showing members to each other, arranging plans and carrying messages, and tracking the spot economy.
• To keep members safe and enforce the house rules.
• To contact you about your application, your account, and the plans you open or take a spot at.

Who can see what

Your profile and photo are visible to other vetted members. Your home address is never visible to anyone. Where to meet is chosen by the host for each plan, and a guest sees it only after the host confirms their spot. Your application, your references, and your email are visible only to our review team, never to other members. We use Supabase to store data, protected by row-level security.

Identity checks

To finish your account, complete an identity check with Didit. You can create your profile and publish plans before doing this. Didit collects your government ID and a selfie, including the facial comparison needed to match them. We send your member identifier to connect the result to your account, without sending your phone number, profile, or messages.

We keep the session reference, its status, and the time of a successful check. We do not copy your ID images, selfie, document details, or facial scores into our database. Other members see only a badge after a completed live check. An identity check is not a background check, reference check, or interview.

Deleting your account also requests deletion of your verification session and retained biometric templates at Didit. If that request cannot complete, we keep your account available so you can retry or contact us for help.

Address search

As you type your address, what you have typed so far goes to Photon, an open-map search service, so it can offer back the matching address. Finding the address is all it is used for, and no name, email, or account of yours goes with it.

Texts

Your mobile number is how you sign in, and it is where the club tells you the things that cannot wait: someone asked you for a spot, a host said yes, a member wrote to you. We send those, and the sign-in codes, and nothing else. There is no marketing list.

We do not sell your mobile number. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories of data exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Your number reaches one other company, our messaging provider, and only so that a message addressed to you can be delivered to you. It is not shared with anyone else, for any purpose.

Reply STOP to any text and the club stops texting you, on that number, at once. Reply START to turn them back on, or HELP for help. Message and data rates may apply. Message frequency varies, and depends entirely on how much is happening in your club. You can also turn off notification texts in Settings and keep the sign-in codes, which are the one kind you cannot switch off while your number is how you get in.

Post

A member you have spent time with can send you a physical card through our print partner. They write the message; they never see your address, and we pass it to the printer only for that piece of mail. Turn this off at any time in Settings, under Postcards, and no card can be addressed to you.

Your choices

• Edit your photo, profile, and what you do anytime in the app.
• Turn off physical mail in Settings, under Postcards.
• Delete your account from Settings, your login is removed and your profile is scrubbed. What you did together stays on record, anonymized, for the members you shared it with.
• Block or report other members from their profile or your conversation, and report a plan from its page.

Contact

Questions about your data? Email scottylefkowitz2@gmail.com.