Privacy policy
Last updated 10 November 2026
Overhere is a beta app for doing things in your city with other people: you post a plan you're already making, and choose who joins. This page explains what we collect, who can see it, who helps us run the app, and how to have your data deleted.
The short version
- We collect what the app needs: your account, your profile, the plans you post or join, and your group chats.
- Other people see your name, age and profile. They never see your email, phone number, date of birth or trusted contact.
- Photos are optional. If you add them (up to two), they're stored with your profile and shown where your profile is. Your live location is read only when you tap Use my current location or use SOS, and for your home area we keep only the area (to about 1 km), never your exact spot.
- The face check is optional. If you take it, the video goes to Amazon to confirm you're a real person and that you match your two photos. We keep the result and scores, never the video. If a scan fails, we keep one still frame from it privately, only until our team has reviewed it or you pass.
- We don't sell your data, show ads, or use advertising trackers.
- Delete your account and data at any time: Profile → Delete my account in the app, or email admin@overhere.social.
1. Who we are
Overhere is a beta run by a small independent team. It is not yet a registered company. We decide what data the app collects and why. For questions about your data, to correct or delete it, or to make a complaint, email our Grievance Officer, Kajal Aswani, at admin@overhere.social.
2. What we collect, and why
| What | Details | Why |
|---|---|---|
| Your account | Your email address and password, or your phone number and an email address (which you confirm with a code we email you). Passwords are stored scrambled (hashed), so nobody can read them, including us. | To sign you in and keep your account yours. Every account has a confirmed email, so we can reach you about your account and you can get back in if you lose your phone number. If you sign in with your phone, we also use your number to stop it being saved as your own trusted contact. |
| Your profile | First and last name, date of birth, gender, home area (its name and its centre, to about 1 km), job, a short bio, interests, when you're usually free, the emoji you pick, and your two photos if you add them (small, 400 by 400 pixel copies). | So hosts and members know who they're meeting, and to show you plans that fit you and are near your home area. Gender is used for plans limited to some groups, such as women-only plans. |
| Plans and chats | Plans you post, join requests and the notes you add, who is in which plan, group chat messages and polls, poll votes, and your notifications. A plan's chat closes 3 hours after the plan starts: you can still read it, but nobody can post in it. | To run the app, including the Chats list of every group you're in. |
| After a meetup | Your rating of the meetup and who showed up. | To show how many meetups people have been to and turned up for, which helps everyone decide who to meet. |
| Safety | Reports you make (including the reported message and your reason), people you block, your answers to "Arrived safely?" check-ins, and your trusted contact's name and phone number. | To keep people safe and act on reports. |
| Settings | People you follow, plans you save for later, alerts for new plans, muted chats, and similar choices. Only you see which plans you've saved; the host isn't told. | So the app remembers your choices on every device. |
| Face check | If you take it: passed or failed, a confidence score, how closely your face matched each of your two photos, and the time. See section 4. | To confirm people are real before they post plans or ask to join. |
| Usage statistics | Only if you turn on Share usage statistics (at sign-up or in Profile; it's off unless you choose it): which features you use, for example "opened the app" or "sent a join request", with your account ID and a random ID for each visit. Never the content of your messages, what you type, or recordings of your screen. Turning it off deletes what was collected. | To learn what works in the beta and what to fix, with your consent. |
| Feedback and beta sign-up | Anything you send through the feedback form on the website or in the app, including a few words you add after a quick question in the app, and which of those you used (linked to your account if you're signed in to the app in the same browser), and, if you filled in our earlier beta sign-up form, what you entered there (name, email, date of birth, gender, neighbourhood, interests, availability). | To improve the app. If you later create an account and confirm the same email, your earlier details can fill in your profile so you don't type them twice. |
What we don't collect
- Your exact location. The app reads it only when you ask: on the SOS screen, to put it into a message you send from your own SMS or WhatsApp, and when you tap Use my current location, to find the name of the area or place you're in (see Photon in section 5). For your home area we save only the area, rounded to about 1 km. For a plan's venue we save the venue's spot, which the plan shows to people nearby.
- Your photo library. When you add a photo, the app sees only the photo you pick, and uploads only the small, cropped copy.
- Your contacts, or other apps' data. When you share a plan, your phone's own share menu (or your browser's) sends a link to the app you choose. We don't see who you send it to.
3. Who can see what
| Who | What they see |
|---|---|
| People a plan is open to | Your name, age (not your date of birth), gender, job, bio, interests, emoji or photos, a "Verified" badge if you passed the face check, how many meetups you've been to and turned up for, and the plans you host. |
| A host you ask to join | All of the above, plus the note you add to your request. |
| Members of a plan you're in | Who else is going, and the group chat. Everyone in a group sees its full history, including messages sent before they joined. |
| Only you | Your email, phone number, date of birth, trusted contact, settings, and the details of your checks. |
| The beta team | We can see what is stored in order to run the app, fix problems and handle reports. We read individual messages only when they are reported, for someone's safety, or when the law requires it. |
If you block someone, you stop seeing each other's plans.
Some hosts and plans are samples, made up so the app never looks empty. They are labelled "Sample" everywhere. Nobody real is behind them, and nobody will be at those plans.
4. Face check (and a later ID check)
The face check is optional. You can skip it at sign-up and still browse plans. You need it to post a plan, ask to join one, or see plans limited to some groups. We ask for your consent separately, at the moment you take the check. It works like this:
- A few seconds of camera video go straight from your browser to Amazon Web Services (Amazon Rekognition Face Liveness), which confirms a real, live person is in front of the camera. The video doesn't pass through our servers, and we don't keep any of it.
- You need two photos of your face first. Amazon compares one frame from the video with each of them, to check they all show the same person. If you change or remove a photo later, you take the check again.
- We keep the outcome: passed or failed, a confidence score, a similarity score for each photo, and the time.
- If the scan passes, we don't keep the frame. If it fails, we keep that one still frame (not the video) in private storage that only our team can open, so a person can compare it with your two photos by eye. It is deleted as soon as our team has reviewed your check, or when you pass, or if you delete your account. We never use it for anything else or share it.
- After 5 attempts without passing, the check is paused for 24 hours and you then get 5 new tries. A person on our team gets an email about it and reviews your outcomes and kept frames, and may also compare your photos with you, for example on a video call. You get a notification if they approve it, and you can also email us at admin@overhere.social to have it checked by hand.
Other people see only a "Verified" badge, never your check details.
Plans limited to some groups (for example women-only) are shown to people who have passed the face check and whose profile gender is in that group. The face check doesn't confirm gender: it is what you enter in your profile. Hosts see who asks to join and decide who comes.
An ID check is not available yet (it shows as "Coming soon" in the app). When it comes, it will have its own notice and consent. We will never store your full Aadhaar number, and Aadhaar will never be the only way to verify.
5. Services that help us run Overhere
These companies handle data for us, only to provide their service. Some may process it outside India.
| Service | What it does |
|---|---|
| Supabase | Stores the app's data and handles sign-in. |
| GitHub Pages | Hosts the website. Like any web host, it receives your IP address when you load a page. |
| Photon (komoot, Germany) | Searches places across India when you type a venue or your home area: what you type is sent to it a moment after you stop typing. If you tap Use my current location, your position is sent to it once to find the area's or place's name. It sees your IP address, but not your name or account. |
| OpenStreetMap | Only when you open the map in Discover, on the website or in the app: supplies the map images. Your device fetches them from OpenStreetMap's servers, which see your IP address. |
| Our email provider (Resend) | Sends sign-up confirmation emails, codes to confirm your email address, and password emails (these are the only emails we send you; we don't send marketing email). It also sends our own team short alerts when a face check is paused (with your name) or when phone sign-in for a number is paused after wrong codes (with that number). |
| Name.com | Our domain provider. Emails you send to admin@overhere.social pass through its forwarding service to our inbox. |
| Twilio | Only if you sign in with your phone number: sends your one-time code by SMS, and checks the code you type. It receives your phone number. After 5 wrong codes within an hour, we pause phone sign-in for that number for an hour; to count them we keep a one-way code made from the number, not the number itself. |
| Amazon Web Services | Only if you take the face check: runs it (see section 4). |
| Cloudflare Turnstile | When you sign in, sign up, ask for a code or reset a password: confirms that sign-ins and code requests come from a person, not a bot. It runs in your browser and sees your IP address and basic browser details. We don't use it for anything else. |
We don't sell your data or share it with advertisers. We share it with authorities only when the law requires it, or to protect someone from serious harm.
6. What stays on your device
The app keeps a few things in your browser's storage: your sign-in session, your light or dark theme choice, a few display choices (such as tips you've closed, and whether you've seen the welcome screens), and a copy of the app so it opens quickly and works offline. Overhere doesn't set cookies, and uses no advertising, tracking or session-recording tools. The fonts and code the pages need are served from our own site, so loading a page doesn't contact Google or other font or code providers. Cloudflare Turnstile runs only when you sign in or ask for a code (see section 5). If you start signing up or signing in on our home page, the phone number or email you type is passed to the app in this browser tab only, and is cleared as soon as the app reads it (or after 10 minutes). Clearing this site's data in your browser removes all of it and signs you out. The phone app keeps the same kinds of things on your phone; uninstalling it removes them.
7. How long we keep it
We keep your data while you have an account. When your account is deleted (from Profile → Delete my account, or by us when you email):
- Upcoming plans you host are cancelled and their members are told; you leave the groups you're in and their hosts are told.
- Your account, profile, photos, plans, join requests, notifications, ratings, face check results, any kept face check frames and usage records are deleted.
- Messages you sent in group chats stay, so the conversation still makes sense for the others, but they no longer show your name.
- Feedback you sent is kept without any link to you. On request, we also delete it and your earlier beta sign-up.
8. Your choices and rights
- See and correct your data: most of it is in Profile in the app, where you can change it. For anything else, email us.
- Delete your account and data: in the app, Profile → Delete my account. It happens straight away. You can also email admin@overhere.social from the address or phone number on your account.
- Withdraw your consent: turn off Share usage statistics in Profile at any time (this also deletes what was collected). For everything else, delete your account as above: the app can't work without your profile.
- Control who you deal with: mute chats, leave plans, block people and report messages from inside the app.
- Complaints: email us first and we'll try to put it right. You also have the right to complain to the data protection authority where you live. In India, that is the Data Protection Board of India.
9. Age
Overhere is only for people aged 18 or over. You confirm you're 18 or older before an account is made, and you give your date of birth when you create your profile. If the date of birth shows you're under 18, we don't create the account, and we delete the sign-in details (phone number or email) straight away. Sign-ups that are started but never finished are deleted after 7 days. If you believe someone younger has an account, tell us and we'll delete it.
10. Security
Everything travels over encrypted connections (HTTPS). The database shows each person only what they are allowed to see, and it checks every request itself; the app in your browser can't get around those checks. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.
11. Changes and contact
When we change this policy we update the date at the top. If a change affects how your data is used, we'll tell you in the app first.
Questions, requests or complaints: admin@overhere.social.
Grievance Officer. For complaints about your data, about content on Overhere, or about a decision we made, write to our Grievance Officer, Kajal Aswani, at admin@overhere.social. We acknowledge complaints within 24 hours and resolve them within 15 days.
Terms and community guidelines · Copyright · Photo, icon and font credits