common

Privacy Policy

Last updated 11 October 2026

common is a place to share what you're up to and find people to join in. This page explains what information we collect when you use common, why we collect it, who we share it with, and the choices you have. If anything here is unclear, email us at hello@common-social.com and we'll explain it in plain English. This policy sits alongside our Terms of Use.

Information we collect

Account information. When you sign up, we collect your email address and password to create your account. You can also add a first name, profile photo, and date of birth to your profile.

Content you share.This includes the activities you post (title, location, time, notes, who you'd like to do it with), messages you send in chats, friend connections, and any reports you file.

Location.If you post an activity with a specific place, that location is visible to other users as part of the post. If you choose a distance or sort by nearest, we ask your device for your approximate location. That location stays on your phone or browser, where it's used to sort and filter the feed. It is never sent to our servers. If you search for a place by name, the text you type is sent to OpenStreetMap's Nominatim service to find matching places. Separately, our analytics provider estimates a rough location (such as city and country) from your IP address, as described under usage analytics below.

Device and push notification data.If you allow notifications, we store a device token (delivered through Firebase Cloud Messaging and Apple's push service) or a browser push subscription (delivered through your browser's push service) so we can send you alerts about new messages and activity. We don't use this token for anything other than sending you notifications.

Usage information. We keep basic records needed to run the service, such as when a thread was last read, when a post was created, and moderation history (reports, blocks) so we can keep the community safe.

Usage analytics.We use PostHog to understand how common is used, for example when someone signs up, creates a post, or sends a message. These events are linked to your account ID, along with the website or campaign that brought you to common if there was one. PostHog estimates a rough location (such as city and country) from your IP address. It doesn't use cookies, it stores an anonymous ID on your device, and we don't use it to track you across other apps or websites.

How we use your information

  • To create and maintain your account and let you sign in
  • To show your posts to other users and connect you with people doing similar things
  • To deliver messages between you and people you're coordinating with
  • To send you email and push notifications about activity relevant to you (new messages, interest in your posts) - you can turn email notifications off in Settings
  • To sort and filter activities by distance, using your device's location if you choose to share it
  • To understand how common is used and make it better
  • To review reports, enforce our guidelines and terms, and keep the community safe
  • To respond to your support requests

We do not sell your personal information, and we do not use your data to serve third-party advertising.

Who we share information with

We use a small number of service providers to run common. They only receive the information needed to provide their service to us, and they're not permitted to use it for their own purposes:

  • Supabase stores our database, handles sign in, and stores profile photos
  • Vercel hosts the common website and app, so it processes every request you make, including your IP address
  • PostHog provides usage analytics, on servers in the EU. It doesn't use cookies and isn't used to track you across other apps or websites
  • Google Firebase Cloud Messaging delivers push notifications to iPhone and Android devices
  • Resend sends our emails, such as new message notifications
  • OpenStreetMap (Nominatim) finds places when you search for one by name

If you tap a place on a post to open it in a map, the place is sent to Google Maps.

Other users of common can see the content of your posts, your first name, your profile photo and age (if provided), and messages you send them directly. Friends-only posts are only visible to people you've connected with as friends. We may also disclose information if required by law, or to protect the safety of our users.

How long we keep your information

We keep your account and content for as long as your account is active. If you delete your account in Settings, we remove your profile, posts, messages and photo straight away, though some information may be retained for a limited period where needed for safety, legal, or fraud-prevention purposes (for example, records related to a report you filed or were the subject of).

Your choices and rights

  • You can edit or delete your posts at any time
  • You can turn off email notifications in Settings, and revoke push notification permission in your device settings at any time
  • You can block another user, which removes you from shared conversations with them
  • You can delete your account and its data at any time in Settings → Delete account
  • You can ask for a copy of your data by emailing us

If you're in the UK or EU, you have rights under data protection law (including the right to access, correct, delete, or port your data, and to object to certain processing). If you're in the US, you may have similar rights under applicable state privacy laws. We'll respond to any request within a reasonable time.

Deleting your account

You can delete your common account at any time. Sign in, either in the app or at common-social.com, then go to Settings → Delete account and type DELETE to confirm. Your account is deleted straight away and can't be recovered.

This deletes:

  • your profile, including your name, photo and date of birth
  • your posts
  • messages you've sent, and conversations you started along with everything in them
  • your friend connections, blocks and the reports you've filed
  • your push notification tokens and your sign in details

If you can't sign in, email us at hello@common-social.com from the address on your account and we'll delete it for you.

Children

common involves coordinating in-person meetups with other people and isn't intended for children. You must be 18 or older to create an account.

Security

We use industry-standard measures (including encryption in transit and access controls) to protect your information. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, let you know in the app.

Contact us

Questions about this policy or your data? Email us at hello@common-social.com.