Privacy Policy

1. Who we are

MyGroupy is a social planning and coordination app operated by Dominic Murray. This policy explains how we handle information in MyGroupy and on this policy website. Contact DominicMurray24@outlook.com for privacy, security or support requests. MyHelp is a separate app with its own privacy notice; creating an account in one app does not create an account or grant SMS consent in the other.

2. Information used by the app

Account and profile: the phone number or email you choose for sign-up, an account identifier, verification status, username, optional display name and profile picture. Authentication credentials are handled through our authentication service.
Social and planning activity: friendships, requests, group memberships, plans, events, trips, destinations, dates, RSVPs, polls, comments, shared content and the settings or changes you make.
Optional permissions: information from contacts, selected photos, calendar sources or health connections only when you choose a feature that needs it and grant the relevant access. Availability depends on the app version.
Service and safety records: sign-in attempts, delivery results, account and device identifiers, push-notification tokens where enabled, security events, error records, reports and requests you send us. Providers also process network information such as IP addresses and request times.

3. Why we use information

We use information to create and protect accounts; deliver requested verification messages; save and synchronize your activity; show content to people authorized to see it; match contacts when requested; operate notifications and optional connections; investigate abuse; respond to support or privacy requests; and maintain the service. We do not sell personal information or use health information for advertising, marketing, insurance, employment or lending decisions. We do not add your number to a marketing list because you request a verification code.

4. Contacts and invitations

Contact sync is optional. MyGroupy asks for device permission after you choose to sync and have a verified phone account. Contact names are read locally to display people on your device; normalized phone numbers are sent to our service to find eligible MyGroupy accounts. Contact names are not included in that matching request. You can decline or revoke device access. Email sign-up does not require contact sync. Selecting a contact is not permission for us to send them unsolicited messages. Invitations, when available, require your own deliberate action; the authentication SMS program does not send friend invitations.

6. Optional calendar, photos and health features

You control whether to grant camera, photo, contacts, calendar or health permissions in the app and device settings. Where calendar connections are available, selected sources are imported for planning; they do not authorize us to change your external calendar. Health features, where enabled, are optional. Your health history belongs to your account; a group can access a feature only while the required participation and sharing permissions remain active. Ending group sharing ends that group's current access; it does not itself erase your account's health history. Health features are for personal coordination and are not medical advice. We do not claim every optional connection is available in the pre-release app.

7. Service providers and limited disclosures

We use Supabase for account authentication, database and storage services; Twilio for requested authentication SMS; and Resend for authentication or operational email where configured. Device platforms and push-notification services process information needed for features you enable. This policy website is hosted through OpenAI Sites on Cloudflare infrastructure. These providers process the data needed to perform their services and maintain their own operational or security records. We may disclose information when required by law or where necessary to protect rights, safety or the service. We do not provide another app with your account information or messaging consent merely because its operator is the same person. The SMS restrictions below apply to all broader disclosure language in this policy.

8. Authentication SMS and your choices

The MyGroupy authentication SMS program sends a one-time code when you choose phone authentication and request a code, including an explicit resend or account-recovery request. Message frequency follows your requests; normally one message is sent for each code request. Message and data rates may apply under your mobile plan. SMS is optional because email sign-up is available. Password sign-in does not routinely require a new SMS.

SMS consent is specific to MyGroupy authentication. It does not authorize promotions, invitations, another app's messages or recurring marketing. We do not sell, rent or transfer mobile numbers or SMS consent for another party's marketing. All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.

Reply STOP to stop this sender's SMS. Reply HELP for help or email DominicMurray24@outlook.com. An opt-out can prevent subsequent authentication texts. Use email sign-up, your existing password, or contact support where available; we do not promise that an email address can automatically recover a phone-only account. If an approved sender is shared between apps, STOP at that sender can also block the other app's messages. Each app still needs its own consent. The SMS Terms provide further details.

9. Website visits and local storage

This policy site has no advertising trackers, analytics scripts or phone-number collection endpoint. Its consent preview is an illustration: nothing typed there is submitted or saved by this site. The host still receives your IP address, requested URL and browser or device headers to serve and protect the website. The app uses device-protected storage for authentication sessions and limited startup recovery information. Signing out is different from deleting an account.

10. Retention and account deletion

We keep account and shared activity information while it is needed to operate your account, the relevant shared space, safety and security, or applicable obligations. MyGroupy's account-deletion process includes a 30-day recovery period, with account visibility and access restricted during pending deletion. After the recovery period, the deletion process removes or deidentifies personal records and resolves ownership of shared spaces. Shared trip logistics may remain for the remaining participants with personal attribution removed where appropriate. Authorized safety or legal records can be retained for their limited purpose.

Provider logs, backups, exported copies and content held by other people may follow separate retention rules. We do not promise immediate or universal erasure or a single deletion deadline for every provider record. If a deletion or cleanup fails, it must be completed or retried rather than treated as successful. Contact us about a specific record or retention request.

11. Your controls and privacy requests

Use available profile, privacy, membership, permission and deletion controls. Depending on where you live and the law that applies, you may have rights to request access, correction, deletion, a copy of information, restriction of processing, objection or withdrawal of consent. Contact DominicMurray24@outlook.com. We may need to verify your identity before acting; do not send passwords, verification codes, identity documents or private health records in an initial email. You may also contact your local privacy regulator where applicable. We do not promise a support response time or limit rights the law gives you.

12. Minimum age

MyGroupy is for people aged 13 and over, or any higher minimum age required where they live. If you are under the age of majority, use the service only with a parent or guardian's permission and involvement as required by law. The service is not directed to children under 13. If you believe a child below the applicable minimum age has provided information, contact us so we can investigate and take appropriate action.

13. Security and international processing

We use access controls and service-provider security measures to protect information. No service can guarantee perfect security or uninterrupted availability. Information can be processed in the United States and other places where our service providers operate; these locations may have different privacy laws. Where required, appropriate transfer protections must apply. Do not share passwords or verification codes and report suspected account misuse to us.

14. Changes and contact

This policy is dated October 17, 2026. We will revise it when practices change and provide additional notice of material changes where appropriate. Merely viewing a policy does not consent to a new use of your information. Contact: Dominic Murray, MyGroupy, DominicMurray24@outlook.com.

15. MyHelp authentication SMS addendum

This section covers only the planned MyHelp account-verification SMS program, operated by Dominic Murray. It does not apply MyGroupy's social-app, contacts, health, age or deletion rules to MyHelp. MyHelp's full Privacy notice and planned SMS disclosures describe the workplace app's separate practices.

When this optional feature is enabled and you request a verification code, MyHelp, its authentication provider, Twilio and telecommunications providers process your number, verification request and status, message and delivery information needed for authentication and fraud prevention. MyHelp must record the consent process and honor opt-outs before enabling it. No consent is inferred merely from creating an account or entering a number elsewhere.

The purpose is requested account verification, not marketing, invitations or workplace alerts. Normally one message is sent per requested code, including an explicit resend. Message and data rates may apply. Email sign-in remains available without opting into SMS. A MyHelp opt-in does not opt you into MyGroupy or any other program.

We do not sell, rent or share mobile information or consent for third-party or affiliate marketing. The SMS originator consent restrictions in section8 also apply to MyHelp. Providers process necessary delivery and security information to perform the service; provider records may follow separate retention rules. Consent and opt-out records are used for delivery, security, honoring choices and applicable obligations. No universal erasure deadline for all provider records is promised.

Reply STOP to stop SMS from the sender; reply HELP or contact DominicMurray24@outlook.com for help. A STOP at a shared sender can block texts from either app; it does not authorize either app to reuse another app's consent. No shared-number approval or live MyHelp SMS service is claimed. See the MyHelp SMS Terms and proposed pre-release consent flow.