Privacy Policy

Last updated: June 20, 2026

This Privacy Policy explains how Droozi ("we", "our", or "us") collects, uses, shares, and protects your personal information when you use the Droozi mobile application and the Droozi website at droozi.com, including features such as guest event RSVPs and our contact form (together, the "Service"). It also describes your privacy rights and how to exercise them.

By using the Service you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Who we are

The data controller responsible for your personal information is Droozi, the operator of the Service. You can reach us about privacy matters at privacy@droozi.com.

2. Information we collect

Information you provide

• Name
• Email address
• Phone number
• Date of birth — used to verify that you meet our minimum age requirement (see "Age requirement" below)
• Profile information and photos you choose to upload
• Account credentials (your password is stored only in hashed form)
• Content you create, such as events, plans, RSVPs, and pins

Sensitive information

We do not collect or process sensitive personal information (such as government IDs, precise geolocation, racial or ethnic origin, health, or biometric data) as defined under applicable law.

Contacts you choose to import

Droozi lets you build your network from contacts you choose to import. You control whether to do this, and you should only import contacts you have permission to share.

• Phone address book: if you grant contacts permission, we process the contacts you select (such as name, email, phone, and address). Where an address is provided, we use Google Maps Platform to convert it into approximate map coordinates. Imported phone contacts are not sent to third-party data-enrichment providers.
• LinkedIn import: if you import LinkedIn connections through Droozi's connected LinkedIn import, we use Unipile as a service provider to provide the hosted authorization flow, receive connection-status webhooks, and retrieve the LinkedIn connection and profile information you authorize us to import. This may include names, LinkedIn profile URLs or public identifiers, headline, company, role, profile image URL, and location text. Droozi does not use Unipile to post to LinkedIn on your behalf or access your LinkedIn messages.
• LinkedIn enrichment: for LinkedIn imports you initiate, we may use a third-party business-data provider (Apollo.io) to enrich LinkedIn information (for example, to add or confirm a name, role, company, or photo). This means some details about an imported contact may come from third-party sources rather than from you.

If you are an imported contact (a non-user) and want your information removed, contact privacy@droozi.com.

Location data

Droozi does not capture, transmit, or store your live device GPS position. Location features are based on locations you manually enter or explicitly approve, such as a city, neighborhood, venue, address, or date range.

We store your manual future pins and manually declared default locations so Droozi can show your planned or declared presence to the audience you choose. A default location may represent a city- or venue-level present-tense presence, but it is not live GPS tracking and does not update from your device position. When you search for a place or enter an address, the relevant query or coordinates may be sent to Google Maps Platform through Droozi's backend to convert it into usable map data.

Usage and device data

• App and site interactions
• Device information and identifiers
• Push notification tokens (to deliver notifications you enable)
• Log data and IP address

Google API Services

Droozi uses certain Google APIs (such as Google Sign-In and Google Calendar). Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and similar technologies (website)

The Droozi website uses cookies and similar technologies. Strictly necessary cookies are always active. Optional analytics tools — including Microsoft Clarity (which records on-page interactions such as clicks and scrolling) and Ahrefs — load only after you consent via our cookie banner. If you reject optional analytics or send a Global Privacy Control signal, we do not load those tools. Vercel Web Analytics remains active for aggregate site metrics because it is cookieless. We do not use third-party advertising cookies or run targeted advertising. For details and how to change your choice, see our Cookie Policy.

3. How we use your data and our legal bases

We use your information for the purposes below. Where the EU/UK GDPR applies, the legal basis for each purpose is noted in brackets.

• Create and manage your account [contract]
• Provide core features — show your approved pins and default location to your chosen audience, and find date and place overlaps with contacts or events [contract]
• Convert addresses and places into map coordinates [contract / legitimate interests]
• Send service communications and notifications you enable [contract / consent]
• Improve and secure the Service and prevent misuse [legitimate interests]
• Optional website analytics [consent]
• Comply with legal obligations [legal obligation]

4. Age requirement

Droozi is intended only for people who are 16 years of age or older. We do not knowingly allow anyone under 16 to create an account or use the Service, and we collect date of birth at sign-up to verify age. If we learn that someone under 16 has provided us personal information, we will delete it. If you believe someone under 16 is using Droozi, contact privacy@droozi.com.

5. How we share your data

We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We share data only as described here:

• Service providers / sub-processors who process data on our behalf, including: Google (Firebase authentication, database, file storage, and push messaging; and Google Maps Platform for geocoding), Amazon Web Services (file storage), and Unipile (connected LinkedIn import, hosted authorization, and connection retrieval), and Apollo.io (LinkedIn import enrichment only). For Unipile's own privacy and security practices, see Unipile's Privacy Policy and Security & Compliance information.
• Website analytics providers for the website: Microsoft Clarity and Ahrefs only after your consent, plus Vercel Web Analytics for cookieless aggregate metrics.
• Other users, as part of the social features you use (see below).
• When required by law, or to protect our rights, users' safety, or prevent fraud.
• In connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not provide service providers with your live GPS location, because Droozi does not collect live GPS location.

6. Information visible to other users

Droozi is a social planning app. Your profile, future pins, default location, events, and RSVPs may be visible to the audience you choose (such as your contacts or event participants). People you share with may be able to see this information and, depending on the feature, save or re-share it. Please consider what you share and with whom, and use the audience controls Droozi provides.

7. How we handle social logins

You can register or sign in using a third-party account (such as Google or Apple). If you do, we receive certain profile information from that provider — typically your name, email address, and profile picture. We use it only as described in this Policy. Social providers do not give us your date of birth, so we ask for it separately to verify your age.

8. International data transfers

Droozi is available worldwide and our service providers (including those above) are located in the United States, the European Union, and other countries. Unipile states that its infrastructure for service data is hosted in France/the EU and that it acts as a data processor for customers. Where we transfer personal data out of the EEA, the UK, or other regions with transfer restrictions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. Contact us for more information about these safeguards.

9. Data retention and deletion

We keep personal data only as long as necessary to provide the Service, meet legal obligations, resolve disputes, and enforce our agreements. Data is kept while your account is active.

Non-default location pins are designed to expire when their date range is over. We keep expired non-default pins for a limited grace period — currently 30 days — before purging them. Default locations remain until you change, delete, or remove them, or delete your account.

You can delete your account in the app, or request deletion by emailing privacy@droozi.com. Your data will be permanently removed within a reasonable timeframe unless we are required to keep it by law.

If you use connected LinkedIn import, Droozi requests deletion or disconnection of the linked Unipile account after the import completes or fails. Droozi keeps the imported LinkedIn contact records needed to provide your network features until you remove those contacts, disconnect the feature, delete your account, or request deletion, subject to legal retention requirements.

10. Your privacy rights

Everyone

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent at any time (where we rely on consent)

You can unsubscribe from marketing emails at any time using the unsubscribe link in those emails, or by contacting us. We may still send you service-related messages necessary to operate your account.

EEA / UK / Switzerland residents (GDPR)

In addition to the above, you have the right to data portability, restriction of processing, to object to processing, and not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects (we do not currently make such decisions about you). You have the right to lodge a complaint with your local data protection supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner.

California and other U.S. state residents

If you reside in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights to know, access, correct, delete, and obtain a copy of your personal information, and to opt out of any "sale" or "sharing." Droozi does not sell or share personal information for cross-context behavioral advertising, and we do not use it for profiling. We honor recognized opt-out preference signals such as Global Privacy Control (GPC). We will not discriminate against you for exercising your rights.

Categories of personal information we collect

We retain the categories we do collect for as long as you maintain an account, and afterward only as needed for the purposes described in "Data retention and deletion."

Exercising your rights, verification, and appeals

You may use an authorized agent to submit a request; we may require proof of authorization. To protect your data, we verify your identity before acting on a request, and may ask for additional information to do so. If we decline your request, you may appeal by emailing privacy@droozi.com; if your appeal is denied, you may contact your state attorney general.

California "Shine the Light." California residents may request, once a year and free of charge, information about personal information (if any) we disclosed to third parties for their direct marketing purposes. Droozi does not share personal information for third-party direct marketing.

How to exercise your rights

Email privacy@droozi.com. We aim to respond within the timeframes required by law (generally one month under the GDPR and 45 days under California law, each extendable where permitted).

11. Do-Not-Track

Some browsers offer a "Do-Not-Track" (DNT) signal. Because there is no finalized industry standard for how to respond to DNT, we do not currently respond to DNT signals. We do, however, honor recognized opt-out preference signals such as Global Privacy Control (GPC) on our website, and our optional analytics load only after consent.

12. Data security

We take reasonable technical and organizational measures to protect your data, including HTTPS/TLS encryption, secure servers and firewalls, access restricted to authorized staff, and regular system monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal data, we will notify you and the relevant authorities as required by law.

13. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date.

14. Contact us

Questions about this Privacy Policy? Email privacy@droozi.com.