common

Privacy Policy

Last updated 23 July 2026

common is a place to share what you're up to and find people to join in. This page explains what information we collect when you use common, why we collect it, who we share it with, and the choices you have. If anything here is unclear, email us at hello@common-social.com and we'll explain it in plain English.

Information we collect

Account information. When you sign up, we collect your email address and password to create your account. You can also add a first name, profile photo, and date of birth to your profile.

Content you share.This includes the activities you post (title, location, time, notes, who you'd like to do it with), messages you send in chats, friend connections, and any reports you file.

Location.If you post an activity with a specific place, that location is visible to other users as part of the post. If you use "nearest to me" sorting or distance filtering, we ask your device for your approximate location - this is used locally to sort and filter the feed and is not stored on our servers beyond your current session. If you search for a place by name, that search text is sent to OpenStreetMap's Nominatim service to look up matching locations.

Device and push notification data.If you allow notifications, we store a device token (via Apple/Google's push services) or a browser push subscription so we can send you alerts about new messages and activity. We don't use this token for anything other than sending you notifications.

Usage information. We keep basic records needed to run the service, such as when a thread was last read, when a post was created, and moderation history (reports, blocks) so we can keep the community safe.

How we use your information

  • To create and maintain your account and let you sign in
  • To show your posts to other users and connect you with people doing similar things
  • To deliver messages between you and people you're coordinating with
  • To send you email and push notifications about activity relevant to you (new messages, interest in your posts) - you can turn email notifications off in Settings
  • To sort and filter activities by distance, using your device's location if you choose to share it
  • To review reports, enforce our guidelines, and keep the community safe
  • To respond to your support requests

We do not sell your personal information, and we do not use your data to serve third-party advertising.

Who we share information with

We use a small number of service providers to run common. They only receive the information needed to provide their service to us, and they're not permitted to use it for their own purposes:

  • Supabase - hosts our database, authentication, and backend functions
  • Google Firebase Cloud Messaging - delivers push notifications to Android and iOS devices
  • Resend - sends transactional emails (e.g. new message notifications)
  • OpenStreetMap (Nominatim) - looks up locations when you search for a place by name

Other users of common can see the content of your posts, your first name, your profile photo and age (if provided), and messages you send them directly. Friends-only posts are only visible to people you've connected with as friends. We may also disclose information if required by law, or to protect the safety of our users.

How long we keep your information

We keep your account and content for as long as your account is active. If you delete your account, we remove your profile and posts, though some information may be retained for a limited period where needed for safety, legal, or fraud-prevention purposes (for example, records related to a report you filed or were the subject of).

Your choices and rights

  • You can edit or delete your posts at any time
  • You can turn off email notifications in Settings, and revoke push notification permission in your device settings at any time
  • You can block another user, which removes you from shared conversations with them
  • You can request a copy of your data, or ask us to delete your account and associated data, by emailing us

If you're in the UK or EU, you have rights under data protection law (including the right to access, correct, delete, or port your data, and to object to certain processing). If you're in the US, you may have similar rights under applicable state privacy laws. We'll respond to any request within a reasonable time.

Children

common involves coordinating in-person meetups with other people and isn't intended for children. You must meet the minimum age required to use common in your country to create an account.

Security

We use industry-standard measures (including encryption in transit and access controls) to protect your information. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, let you know in the app.

Contact us

Questions about this policy or your data? Email us at hello@common-social.com.