This Privacy Policy explains which personal data (“personal information”) is processed when you use the All Here mobile application for iOS and Android (in all its versions, including earlier versions of the iOS app), its web version, its servers and this website (together, the “Service”), for what purposes, with whom it is shared, and which rights you have. It applies to users in the United States and in the European Union. The Service is currently not offered in the United Kingdom.
Section 21 contains additional information for residents of the European Union and the European Economic Area (“EEA”); section 22 contains additional information for residents of US states with consumer privacy laws, including California.
The Service is operated by Blume Labs LLC, a limited liability company organized under the laws of the State of Wyoming, USA (“we”, “us”). We are the controller of the personal data described in this policy and the “business” within the meaning of US state privacy laws:
Blume Labs LLCBecause we have no establishment in the EU, we have appointed a representative in the European Union. You and the EU supervisory authorities may contact our representative, in addition to or instead of us, on all issues related to the processing of personal data:
Marmeliko EOOD (UIC 206914887)External contractors who develop and maintain the software on our behalf act only on our instructions and are not controllers of your data.
Where guest mode is offered, you can use parts of the app without registering. Guest mode is not available in every version of the app. In guest mode the following data is processed:
Retention: The record of acceptance is kept for two years and then deleted. Guest access does not create a server-side session.
Full use of the app requires an account. The following data is processed:
Email confirmation: To confirm your address we send you an email with a confirmation code or link. Only a hash of the code, the recipient address, the time and the number of attempts are stored.
Instead of a password you can sign in with your Apple ID or your Google account. The sign-in itself takes place between your device and Apple or Google. The app then sends us the identity token issued by the provider, whose signature our server verifies with the provider’s public keys. From the provider we receive and store:
Apple only: At sign-in the app additionally sends us a one-time authorization code. Our server exchanges it with Apple for a refresh token and stores it with your account. We use this token exclusively to revoke the sign-in with Apple when you delete your account, as Apple requires. Apple also informs our server when you stop using Sign in with Apple for All Here or delete your Apple ID; we then end the link to your account.
Apart from this, we transmit no data about you to Apple or Google for the sign-in. Apple and Google process data about your sign-in under their own responsibility and privacy policies.
Required for a profile are a display name, your first name, your date of birth and whether you use the app privately or commercially. We use your date of birth to check that you meet the minimum age of 16 (section 23); without it, a profile cannot be created. Optional are your last name, phone number, short description, profile picture and interests. We also store your app settings, such as language and appearance.
Visible to other signed-in users are your display name, first and last name (if provided), profile picture, short description, your interests (unless you hide them) and the contact intentions described below. Other signed-in users can find your profile by searching for your display name, first name or last name. Your date of birth and phone number are not shown to other users. Guests without an account are not shown this profile data.
Contact intentions: The switches “open to new contacts” and “open to dating” are off by default. If you turn them on, this is shown to other signed-in users. You can turn them off at any time.
Commercial use: If you state that you use the app commercially, you must provide provider details (name, address, contact email, optionally phone, VAT ID and register entry), as the law of your country may require. These details are shown in your profile to all signed-in users.
If you send, accept or decline a friend request, or invite someone to an event, we store who is involved, the status and the time. Your friends and the people you invite see your display name and profile picture in this context.
If you create an event, we process the data you enter: title, description, date and time, venue including address and coordinates, images, tags, participant limit and approval settings. Events marked public are visible to all users; where guest mode is offered, guests see them without any information about the organizer and without the participant list.
If you join an event or ask to join it, your participation, its status and the time are stored. You may join incognito; your participation is then not shown by name to other participants but still counts towards the limit.
Sharing links: If you share an event, we create a link that is valid for 90 days. Anyone who has the link can see the title, description, image, date and venue of the event on a web page, without signing in. We count how often the link is opened, without storing anything about the person opening it.
Automatic deletion: Events are marked as finished ten days after their date and are deleted automatically, including their images and participations, 60 days after their date.
The content of messages, including link previews, is end-to-end encrypted. Encryption and decryption take place only on the participating devices, and link previews are created on the sender’s device. Our server holds this content only in encrypted form; we cannot read it and therefore cannot disclose it to anyone, including authorities.
Not end-to-end encrypted, because it is technically necessary, and therefore visible to us: who takes part in which conversation and in which role (for example as group admin), group names and pictures, the times of sending and delivery, delivery and read status, the identifiers of the devices involved, and notices in group chats that our server creates, such as “X was added by Y”, which contain the names of the people involved. Older messages that were sent with earlier versions of our apps before end-to-end encryption was introduced may still be stored on our server without end-to-end encryption.
Devices: For encryption we store a public key per device, together with the device name, platform, operating system and app version, and the time of last use. You can remove devices at any time in the settings.
Retention and deletion: Messages are not deleted automatically after a fixed period. They remain on our server until the chat is deleted. A direct chat can be deleted by either participant, a group chat by an admin; its messages are then deleted for all participants and removed from our server within 31 days. If you leave a group chat, its messages remain for the other participants. With “Delete All Messages” in the messaging settings you remove from our server the encrypted content of all messages you sent, for all participants, and you leave all your chats; the entries without content (sender and time) remain until the chat is deleted. We keep a record of this deletion (section 19). What happens to your messages when you delete your account is described in section 20.
Blocking: If you block another user, we store that you did so and when.
Consent: Before you first use messaging we ask for your consent and record whether you gave or withdrew it, the time, the version of the consent text, your IP address and an identifier of your app version and operating system (user agent).
Your data: In the messaging settings you can export your messaging data and delete it.
Reporting: If you report a message, you can choose to send us its text so that we can review it (section 14).
To show you events, places and concerts nearby we need a location. You have two options:
You can withdraw the location permission at any time in the settings of your device; the app remains usable via manual city selection.
Venue of your event: The venue you enter for an event is stored with the event: name, address, postal code, city, country and coordinates. If you choose your current location as the venue, these are the coordinates of your device at that moment. The venue is visible to others according to the visibility of the event (section 7) and is deleted together with the event.
Addresses and coordinates: To convert coordinates into a city name or an address you enter into coordinates (for example for the venue of your event), the app uses the geocoding service of your operating system. The address or coordinates are then sent by your device to Apple (iOS) or Google (Android). Location services of the operating system are provided by Apple or Google under their own terms and privacy policies.
To add missing coordinates to event venues or to correct implausible ones, our server may occasionally send the venue address (street, postal code, city and country) to the geocoding service Nominatim of the OpenStreetMap Foundation (United Kingdom). No name, account identifier or other information about the organizer or other users is sent. We store the result with the event for review; it is deleted together with the event.
To display maps, your device loads map images directly from a map provider: depending on the platform and app version, from Apple Maps (Apple Inc.) or from the tile servers of the OpenStreetMap Foundation (United Kingdom). The provider receives your IP address, information about your app and device, and the map area requested. We do not transmit any other data about you to the map provider.
Push notifications are not offered in every version of the app; our current apps for iOS and Android do not use them. Where they are offered and you allow them, we store the device token issued for your device, the platform, the environment, a device identifier, your language setting and the time of last use. To deliver a notification we transmit the token and the notification to the Apple Push Notification service (Apple Inc., USA). Notifications contain the display name of the sender and a general text (for example “New message”), or the name of the event or group concerned; they never contain the content of a message. To check delivery we keep a log of sent notifications (hashed token, conversation, time, status) for three days.
Where the web version offers browser notifications and you allow them, we store the subscription your browser provides (an address of your browser’s push service and keys), a device identifier and your language setting, and send the notifications, encrypted, through the push service of your browser’s provider (for example Google, Mozilla or Apple). If we introduce push notifications on Android, they will be delivered via Firebase Cloud Messaging (Google LLC, USA) in the same way; we will update this policy beforehand.
You can turn notifications off at any time in the settings of your device or of the app.
If the app crashes or encounters a serious error, a crash report is sent to Firebase Crashlytics, a service of Google LLC (USA). Crash reports are sent from release versions of the app only. A report contains the error and its stack trace, the device model, the operating system and its version, the app version, technical information about the state of the device at the time of the crash (such as free memory and orientation), the time, and a random installation identifier generated by Firebase. To transmit the report, Google processes your IP address. The report does not contain your name, your email address, your account identifier or the content of messages.
We use crash reports only to find and fix errors. Google processes them as our service provider. According to Google, crash reports are deleted after 90 days.
Places: The places shown come from the open data sets of Overture Maps and OpenStreetMap. They describe venues, not users. Short descriptions, tags and regular activities for these places are partly generated with the help of an AI service of Anthropic PBC (USA). Only place data is used for this; no data about our users is ever sent to that service.
Concerts: For this section our server queries the Ticketmaster service (Live Nation Entertainment, Inc., USA). Only search criteria are transmitted, that is, a city or the coordinates of your device with a radius, and search terms, which can be the interests from your profile. No account identifier, name, email address or IP address is transmitted, because the request comes from our server, not from your device. This section is not available in guest mode.
Reservations and tickets: Where this function is available, we show a button for making a table reservation or buying a ticket for some places in the food, drink and culture categories. We determine the booking addresses from publicly available sources, in particular from the information published on the establishment’s own website; no personal data is processed in doing so.
What happens when you tap: Only when you tap the button do you leave our Service. Your device then connects directly to the respective third party, such as OpenTable, TheFork, Quandoo, Ticketmaster or the establishment’s own website. Your device transmits the data customary for this, in particular your IP address, information about your device and operating system, and the address called up; the third party may use cookies or similar technologies. This processing is the sole responsibility of that third party and governed by its privacy policy. We do not transmit any data about you to that third party.
Commission links: For some providers the address called up contains an identifier by which a booking is attributed to us for a commission. This identifier designates us as the referrer, not you; it is identical for every user and contains nothing that identifies you. For attribution the provider or its affiliate network may set an identifier in your browser or its app, under its own responsibility. Such buttons are labeled in the app.
Click counting: When you tap such a button we store a counter entry with the place, the provider, the type of booking (reservation or ticket) and the country code of the place. This entry contains no account identifier, no device identifier and no IP address and cannot be attributed to you, not even by us. We evaluate the figures only in aggregate, to see in which regions and categories the function is useful and to check commission statements.
Reporting users, events, messages and chats: If you report a user, an event, a message or a group chat, we store your account identifier, the email address of your account at the time of the report (so that we can inform you of our decision), what you reported (type and identifier), the reason, your optional comment and, if you report something as illegal, the legal provision you name and your confirmation that you report in good faith. We also store the status of the review, our decision, a note on it and its time. For each new report our moderation team receives a notification email through Brevo (section 15) with the report identifier, the type and identifier of what was reported, the reason, your account identifier, your comment and the legal details, but without the message text and without your email address.
Message text as evidence: Because messages are end-to-end encrypted, we can review a reported message only if you show it to us. When you report a message, the app offers to include the text of that one message, decrypted on your device; this option is switched on by default and you can switch it off. If you include the text, we receive it in readable form and store it with the report. No other message is sent.
Reporting a place: If you report an incorrect place entry, we store the reason, your optional comment and, if you provide it, a contact email address, together with a reference to your account so that we can handle the report.
Use and retention: Reports are reviewed by people. We use them only to review the reported content or behavior, to take measures under our Terms of Service, to inform you of our decision, to handle complaints about it and to recognize repeated misuse. Reports of users, events, messages and chats are kept for 3 years after our decision and then deleted. If you delete your account, your reports remain without your account identifier and email address (section 20).
We send emails that are necessary for your account, such as confirmation codes, password resets and security notices, through the email service Brevo (Sendinblue SAS, France). Brevo processes your email address and the content of these emails on our behalf. We do not send newsletters or advertising emails.
If you write to us, we process your email address, your message and any data you include, in order to answer you.
Each access to our servers is logged with technically necessary data: IP address, date and time, requested resource, status code, amount of data transferred, app or browser identifier and, for requests from a signed-in account, the account identifier. For searches, the requested resource can include the coordinates, radius and search terms sent with the request (section 9). This data serves operation, troubleshooting and defense against attacks. We keep it for seven days at most and then delete or shorten it. To prevent overload and abuse we limit the number of requests per IP address. Connections to our servers pass through the network of Cloudflare, Inc., which protects them against attacks and delivers them to our servers.
App lock: If you turn on the app lock, the app uses the biometric check (such as Face ID or fingerprint) or the passcode of your device. This check takes place entirely on your device; we receive no biometric data.
This website is hosted by Hetzner Online GmbH. When you visit it, the server processes the data your browser transmits (IP address, date and time, page requested, referrer, browser and operating system) in order to deliver the pages and protect the server; these logs are kept only briefly. The website sets one cookie, NEXT_LOCALE, which stores the language you chose for one year. It is necessary to show you the website in your language. The website uses no analytics, advertising or tracking cookies and loads no content from third parties.
We disclose personal data only where necessary to provide the Service, where you have consented, or where we are legally required to do so. Our service providers process data only on our instructions and under contracts that oblige them to protect it.
| Recipient | Purpose | Data | Location |
|---|---|---|---|
| Hetzner Online GmbH | Hosting, database, file storage | all data described in this policy | USA |
| Cloudflare, Inc. | Protecting and delivering connections | IP address, connection data | USA / worldwide |
| Brevo (Sendinblue SAS) | Sending account emails; notifying our moderation team of new reports | email address, email content; report details without message text (section 14) | EU |
| Apple Inc. | Push notifications (where offered), Sign in with Apple | device token, notification, sign-in identifier, refresh token | USA |
| Google LLC | Crash reports (Firebase Crashlytics), Sign in with Google, push notifications on Android (once available) | crash reports with installation identifier, sign-in identifier, device token | USA |
| Live Nation Entertainment, Inc. (Ticketmaster) | Concert search | search criteria only: city or coordinates with radius, search terms or interests; no account identifier, no IP address | USA |
| OpenStreetMap Foundation (Nominatim) | Occasional geocoding of event venues | venue address only, no user data | United Kingdom |
| Anthropic PBC | Descriptions of places | place data only, no user data | USA |
| Contracted software developers | Development, maintenance and troubleshooting | access to the data described in this policy only where necessary for these tasks | EU |
Apple and Google also receive data directly from your device when you use their sign-in, their location and geocoding services or Apple Maps (sections 4, 9 and 10), and the OpenStreetMap Foundation receives your IP address when your device loads map images from it (section 10). Where browser notifications are used, they pass through the push service of your browser’s provider (section 11). The reservation and ticket providers are not listed: we transmit no data to them (section 13).
Legal requests: We disclose data to authorities or courts only where we are legally required to do so, or where necessary to protect the rights, property or safety of users, the public or us. We cannot disclose the content of end-to-end encrypted messages, because we cannot decrypt it.
Business transfers: If our business or the Service is sold, merged or transferred, the data may be transferred to the acquirer, which will be bound by this policy. We will inform you beforehand.
| Data | Period |
|---|---|
| Account and profile data, friendships, links to Apple and Google | until you delete your account |
| Messages | until the chat is deleted (a direct chat by either participant, a group chat by an admin), then removed from our server within 31 days; no automatic deletion after a fixed period. “Delete All Messages” removes the content of the messages you sent immediately. For account deletion see section 20 |
| Events, including images and participations | until deleted by the organizer, at the latest 60 days after the event date |
| Event sharing links | 90 days |
| Sign-in sessions | 7 days |
| Confirmation codes and password reset tokens | 30 minutes to 24 hours at most |
| Push device tokens and browser push subscriptions (where push notifications are offered) | until you turn off notifications, remove the device or delete your account |
| Log of sent push notifications | 3 days |
| Server logs | 7 days at most |
| Crash reports (Google) | 90 days |
| Record of acceptance in guest mode (where guest mode is offered) | 2 years |
| Record of consent to messaging | until you delete your account |
| Reports of users, events, messages and chats, including message text you chose to include | 3 years after our decision; your account identifier and email address are removed from them when you delete your account |
| Reports of places | as long as the place entry exists; the reference to your account is removed when you delete your account |
| Record of an account deletion or of a deletion of messaging data (account identifier, type, time, IP address, number of deleted items; no email address, no content) | 3 years |
| Anonymous click counts for booking buttons | indefinitely (no personal reference) |
| Emails you send us | until your request has been dealt with, then as long as legally required |
Beyond this we keep data only for as long as a legal retention obligation exists or the data is needed to establish, exercise or defend legal claims.
In the app: Open your profile by tapping your profile picture, then choose Edit Profile → Delete Profile. For confirmation you must enter your password or sign in again with Apple or Google, so that a briefly unattended device cannot delete an account. In the web version, where available, accounts with a password can also be deleted in the account settings.
Without the app: Write to [email protected] from the email address of your account and ask us to delete it. If you signed in with Apple or Google, tell us which one. We may ask you to confirm the request through the email address of your account, which for “Hide My Email” is the Apple relay address that forwards emails to you. We confirm your request and delete your account within 30 days at the latest. Both ways are also described on our account deletion page.
What is deleted: Deletion in the app takes effect immediately. It removes:
What is kept:
If you want the encrypted content of the messages you sent removed from our server before you delete your account, use “Delete All Messages” in the messaging settings first (section 8). We have no access to copies of messages stored on the devices of other participants.
Where the General Data Protection Regulation (“GDPR”) applies to our processing, the following also applies.
| Purpose | Legal basis |
|---|---|
| Providing the Service: account, sign-in, profile, friends, events, chats, location-based search, maps, account emails (sections 3 to 9, 13, 15) | Art. 6(1)(b) GDPR (contract) |
| Showing your contact intentions; use of device location; push notifications; messaging | Art. 6(1)(a) GDPR (consent), for messaging also Art. 6(1)(b) GDPR |
| Commercial provider details in your profile | Art. 6(1)(b) and (f) GDPR (legitimate interest in enabling commercial users to meet their legal information obligations) |
| Crash reports | Art. 6(1)(f) GDPR (legitimate interest in a stable, error-free app) |
| Server logs, rate limits, abuse prevention, record of acceptance in guest mode | Art. 6(1)(f) GDPR (legitimate interest in secure operation and in a legally sound service) |
| Places, reservation buttons and click counting | Art. 6(1)(f) GDPR (legitimate interest in a useful presentation of places and in the economic viability of the Service), insofar as personal data is processed at all |
| Reports of places, users, events, messages and chats, including message text a reporter chooses to include; handling of notices and complaints (section 14) | Art. 6(1)(f) GDPR (legitimate interest in correct content and in a safe Service that protects its users), and Art. 6(1)(c) GDPR where the Digital Services Act requires it |
| Record of an account deletion or of a deletion of messaging data; record of consent to messaging | Art. 6(1)(f) GDPR (legitimate interest in being able to demonstrate compliance, Art. 5(2) and 7(1) GDPR) |
| Answering your messages | Art. 6(1)(b) or (f) GDPR |
| Language cookie on this website | Art. 6(1)(f) GDPR; the cookie is strictly necessary for the service you requested |
You can withdraw any consent at any time with effect for the future, for example by turning off the relevant switch or permission. The lawfulness of processing before the withdrawal remains unaffected.
We are located in the United States. If you use the Service from the EU, your personal data is therefore processed by us in the United States. Your data is stored on servers of Hetzner Online GmbH in USA. Where we disclose personal data to service providers in countries outside the EU and the EEA, we do so only if the European Commission has decided that the country ensures an adequate level of protection (Art. 45 GDPR; for the United States, for recipients certified under the EU-U.S. Data Privacy Framework; an adequacy decision also exists for the United Kingdom), or on the basis of the Standard Contractual Clauses adopted by the European Commission (Art. 46(2)(c) GDPR). You can request a copy of these safeguards at [email protected].
You have the right to
Right to object (Art. 21 GDPR): Where we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
To exercise your rights, an informal message to [email protected] or to our EU representative (section 1) is sufficient. We answer within one month. You can also export and delete parts of your data directly in the app.
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).
Residents of California and of other US states with consumer privacy laws (such as Colorado, Connecticut, Virginia, Oregon and Texas) have the following rights and information, to the extent these laws apply to us.
In the past 12 months we have collected the following categories of personal information, from you, from your device, and from Apple or Google if you use their sign-in. We use them for the purposes described in sections 3 to 17, that is, to provide, secure, maintain and improve the Service, and disclose them for these business purposes only to the service providers listed in section 18. We keep them for the periods in section 19.
| Category | Examples |
|---|---|
| Identifiers | email address, display name, account and device identifiers, push token (where push notifications are used), crash-report installation identifier, IP address |
| Personal information under Cal. Civ. Code § 1798.80(e) | first and last name, phone number (optional) |
| Characteristics of protected classifications | date of birth (required) |
| Internet or other electronic network activity | server logs, participations, friend requests, crash reports |
| Geolocation data | device location for a search (not stored with your account; can appear in server logs for up to 7 days), event venues |
| Audio, electronic, visual or similar information | profile pictures and event images |
| Professional or employment-related information | provider details for commercial profiles (optional) |
| Other information you provide | short description, interests, event descriptions, reports (including message text you chose to include) |
Sensitive personal information: Some of this information is sensitive personal information under California law: your account login (email address and password), your precise device location, and the content of your messages, which we cannot read because it is end-to-end encrypted (apart from message text you choose to include in a report and older messages sent before end-to-end encryption was introduced, section 8). We use sensitive personal information only to provide the Service you request and for the other purposes permitted by law, and not to infer characteristics about you.
No sale, no sharing, no targeted advertising: We do not sell personal information, do not share it for cross-context behavioral advertising, do not use it for targeted advertising and do not use it for profiling with legal or similarly significant effects, and have not done so in the past 12 months. We have no actual knowledge of selling or sharing personal information of consumers under 16. We do not disclose personal information to third parties for their direct marketing purposes.
Depending on your state of residence, you have the right to:
How to make a request: Email us at [email protected], or delete your account and export your messaging data directly in the app. To protect your data we verify your request, as a rule by asking you to send it from the email address of your account or to confirm it in the app. You may use an authorized agent; we may ask the agent for proof of authorization and ask you to confirm your identity directly with us. We respond within 45 days; if we need more time, we will tell you why, and may extend this period by another 45 days.
Appeals: If we decline your request, you can appeal by replying to our decision or by writing to [email protected] with the subject “Privacy appeal”. We will respond to your appeal within the period required by the law of your state. If you are not satisfied with the result, you may contact the attorney general of your state.
We do not track you across third-party websites or apps over time, so there is no tracking to stop. Our website and app therefore do not respond differently to “Do Not Track” signals. We treat a Global Privacy Control signal as a valid request to opt out of sale and sharing; as we do neither, nothing further changes.
The Service is not directed to children. You must be at least 16 years old to use All Here. We do not knowingly collect personal data of children under 13 within the meaning of the US Children’s Online Privacy Protection Act (COPPA), nor of anyone under 16. If you become aware that a person under 16 has created an account, please tell us at [email protected]; we will delete the account and the associated data without undue delay.
The order in which events and places are shown is determined automatically. The only factors are the interests you provided yourself, the distance, the date of the event and the number of participants. Neither your behavior in the app nor data from third parties is used for this ranking, and the existence or amount of a commission has no influence on it.
Data between the app and our servers is transmitted only over encrypted connections (TLS). Passwords are hashed with Argon2id, and session tokens are stored only as hashes. Messages are end-to-end encrypted. Uploaded images are accessible only through signed, time-limited addresses. Key material on your device is stored in the secure storage of the operating system (on iOS in the keychain, restricted to this device; on Android in storage encrypted with a key held by the Android Keystore). No method of transmission or storage is completely secure, but we take appropriate technical and organizational measures to protect your data.
We update this policy when our processing changes or the law requires it. The current version is always available on this page, with its version number and the date of the last update at the top. We will inform you of material changes in the app, and by email if you have a confirmed email address, before they take effect.
For questions about this policy or your data, write to [email protected] or to the postal address in section 1. Users in the EU can also contact our EU representative named in section 1.
All Here