Privacy Policy

By accessing or using IRL ("the Platform"), you agree to be bound by these Terms of Service. If you do not agree with any part of these terms, you may not use our services.

You must be at least 18 years old to create an account. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

We reserve the right to suspend or terminate accounts that violate these terms, including accounts involved in harassment, spam, impersonation, or any illegal activity.

IRL is a social platform designed to help people discover real-world events and build genuine connections. Users are expected to:

• Treat all community members with respect and dignity
• Not post content that is hateful, discriminatory, or threatening
• Not share misleading or false information about events or businesses
• Not engage in spam, unsolicited promotions, or bot-like behavior
• Report any content that violates these guidelines
• Respect intellectual property rights of others

Content that violates these guidelines may be removed, and repeat offenders may be permanently banned from the platform.

We collect the following types of data to provide and improve our services:

• Account Information: Name, email address, phone number (optional), profile picture, and user preferences
• Location Data: With your permission, we collect location data to show nearby events and enable the map feature
• Usage Data: Information about how you interact with the platform, including pages visited, features used, and content engagement
• Content Data: Posts, comments, event RSVPs, group memberships, and messages you create on the platform
• Device Information: Browser type, operating system, and device identifiers for security and optimization

We do not sell your personal data to third parties. Data is used solely to operate, maintain, and improve the IRL platform.

ireal.club uses Google Sign-In (OAuth 2.0) as an optional login method. The following section describes exactly what Google user data we access, how we use it, store it, share it, and how you can remove it, in compliance with Google API Services User Data Policy and Google APIs Terms of Service.

Google OAuth scopes we request (the minimum required for account creation):

• openid — to identify a unique Google account
• email — your primary email address linked to your Google account
• profile — your full name and public profile picture

We do not request access to your Gmail, Google Drive, Google Calendar, Contacts, YouTube, Photos, or any other Google service. We do not use any restricted or sensitive scopes.

Data accessed from your Google account:

• Your Google account email address
• Your full name (as displayed on your Google profile)
• Your Google profile picture URL
• Your unique Google account ID (used internally to link your IRL account to your Google identity)

How we use Google user data:

• To create your ireal.club account at first sign-in, or to log you into an existing account on subsequent sign-ins
• To pre-fill your display name, email and profile picture so you don't have to re-enter them
• To authenticate you securely without storing any Google password

We do not use Google user data for advertising, profiling, automated decision-making, training AI or machine learning models, or any purpose unrelated to authenticating you and providing the core ireal.club service.

How we store Google user data:

• Stored in our private, access-controlled MongoDB database hosted on secure cloud infrastructure
• Encrypted in transit (TLS 1.2+) and at rest (AES-256 disk encryption)
• Access restricted to authorized engineering staff only, audited regularly

How we share Google user data:

• We do not sell, rent, or trade Google user data to any third party
• We do not share Google user data with advertisers or data brokers
• We do not share with any third party except as legally compelled by court order or law enforcement request
• Sub-processors used: MongoDB Atlas (database hosting) and Resend (email delivery). These vendors are bound by their own privacy and security commitments and only process data on our behalf to operate the service.

Retention & deletion:

• Google profile data is retained as long as your ireal.club account is active
• You can revoke ireal.club's access at any time via Google Account → Security → Third-party apps
• You can permanently delete your ireal.club account and all associated Google profile data by emailing team@ireal.club — we will delete all data within 30 days and confirm via email

If you have any questions about how we handle Google user data, contact us at team@ireal.club.

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit and at rest
• Secure password hashing using bcrypt
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms

You have the right to request access to, correction of, or deletion of your personal data at any time by contacting us at team@ireal.club.

You retain ownership of all content you create and share on IRL. By posting content, you grant IRL a non-exclusive, worldwide, royalty-free license to use, display, and distribute your content within the platform.

We reserve the right to remove content that violates our guidelines or applicable laws. Super administrators may moderate content at their discretion to maintain community standards.

If you have any questions about these Terms & Conditions, our data practices, or your rights, please contact us:

Email: team@ireal.club

We aim to respond to all inquiries within 48 hours.