Privacy Notice

Member contact details and administration

Contact email comes from your current confirmed sign-in account. An international mobile is required at new profile completion; no SMS verification is provided. Existing members are asked for missing numbers without replacing names or inventing data. Email and phone each default private. “Visible to other Club members” controls each field independently, not authorised administration access. Authorised Club administration may access contact details and reliable joining records for membership, support and safety even when sharing is off. Administrative access is audited without contact values; no automatic notice is sent for each view. These details are not included in member lists or offline member copies and are not supplied to advertisers or external providers. Joined means sign-in account creation, not approval. Unrecoverable admission methods are shown as Unknown; invitation secrets and inviter identity are not disclosed. Mobile/sharing changes are available in My Profile; email changes require a separate confirmed account-change process, not a typed profile email.

What is stored on our servers

Account: email address and sign-in records.

Profile: name, displayed title, represented and host country, city, organisation, field and languages. Approved members can see member profiles.

Profile photo: a photo is required to use the app. It is kept in private storage on our servers, not just on your phone, and is never available at a public link. You choose who can see it: "Connected contacts only" (the default) or "All verified members" (approved, active members). Contacts are members who accepted a mutual contact request; disconnecting removes their access. Photo links are issued for one minute at a time, so a change of setting or a disconnection applies to new views straight away and to an already-open link within a minute. When you replace your photo, the previous one is deleted.

Contacts: who you sent or received contact requests from and whether they were accepted. Only the two members involved can see a request.

Membership and roles: application status, verified role records and admission history.

Verification: if you submit identity documents, the images are kept in private storage visible only to authorised reviewers and deleted after the stated retention period; we keep only the review outcome, not document numbers or birth dates.

Content you create: dossiers, meeting notes, tasks, events, invitations, community records, working groups and earlier group posts. These are stored on our servers in readable form and shown to the members they are shared with.

Service and security records: information needed to operate the service, support accounts, prevent misuse and meet legal obligations.

Personal flights: the itinerary, local times and time zones, and optional notes you enter; these are private to your account and appear in your personal calendar.

Linked external profiles: the service and profile details you deliberately link. Linking is optional and separate from registration; the external provider also applies its own privacy rules.

Messages

Private messaging is not yet available. Sending is switched off and nothing is sent through it today. No end-to-end encryption is active in the app right now.

The agreed design for when it opens: 1:1 messages are intended to be end-to-end encrypted on participants' devices, so their content should be readable only by the participants' authorised devices. This is a plan, not a current capability.

Group messages are not end-to-end encrypted. Group content will be stored on our servers in readable form and shown to the group's members.

Encrypted key backup and multi-device recovery are not implemented yet. Nothing of that kind exists or is stored today; it will only be added together with messaging.

For 1:1 messages, once messaging opens, our chat server will still store encrypted copies of the messages and attachments and information needed for delivery. Encryption protects content, not this information, and does not mean messages are deleted.

Advertising

Advertising is switched off unless the Club turns it on. When it is on, an approved advertisement may appear in one window of the desk scene and in the sponsored offers list. Every advertisement is labelled "Advertisement" and names the advertiser; "Details" shows the advertiser's legal identity.

Sponsored offers and desk-window advertisements may be limited to a host country, city or existing organisation. Only your posting host country/city, or a temporary-stay country/city you explicitly select, and existing organisation are compared. A selected stay is stored for your account and expires back to posting location; you can clear it earlier. Your represented nationality is not used. No behavioural profile is created. Your messages, documents, records, photo, contacts, roles and other profile details are never used for advertising.

When advertising is on, our own server counts, per campaign and day, how often the desk window advertisement was at least half visible for one uninterrupted second with its image loaded and the page visible, and how often its link was tapped. These counts are sent without your sign-in token, contain only the campaign and the type of event, and are stored only as daily totals per campaign plus a short-lived total per campaign and minute used to limit abuse. No advertising history is linked to you, your account, your browser or your device, and nothing is stored on your device for this. As with any connection to our servers, our hosting providers process normal security and access logs (for example IP address and time) separately to operate and protect the service. The counts are events, not unique people, and say nothing about purchases. Advertisers receive only aggregate reports (small daily numbers hidden) sent by the Club outside the app; they get no access to the app. No advertising SDK, device or advertising identifiers, third-party pixels or advertising cookies are used. Advertisement images are served from our own storage, not from the advertiser. Opening an advertiser's link takes you to their site, which then applies its own privacy rules.

You do not need to give marketing consent to use the app. Accepting these Terms is not consent to behavioural advertising, marketing or individual measurement; none of these takes place. Earlier optional measurement choices are kept only as a historical record and are not used.

Who can access data

Access is limited by membership approval and the sharing scope of each record. Authorised Club personnel process limited member and account information as needed for eligibility review, account support and security. Submitted identity documents are accessible only to authorised reviewers. Access to shared member content remains limited to its permitted sharing scope.

Your choices

You can manage available account settings and photo visibility and request account deletion from My Account. Profile corrections may require Club support after onboarding. You may exercise applicable rights of access, correction, erasure, restriction, objection and portability, and complain to the competent data protection authority. Some records may be retained where necessary for legal obligations or legitimate claims. Questions about your data can be raised with the Club.