Privacy Policy
Version 2026-05-04
1. Who we are
The data controller for personal data processed on JustJoin is Moovers CommV, Schilderstraat 1, 8770 Ingelmunster, Belgium (VAT BE 0767.796.570). For any privacy question, write to support@justjoin.app.
We have not appointed a Data Protection Officer because we do not meet the criteria of Article 37 GDPR. Privacy requests are handled directly by the operator.
2. What we collect and why
Hosts (account holders): name, email, password (hashed), club details, payout details (handled directly by Stripe). Legal basis: contract performance (Art. 6(1)(b) GDPR).
Attendees (no account): name and email when you join a session, optional note to host, payment status. Legal basis: contract performance for the booking (Art. 6(1)(b) GDPR).
Visitors: if you accept analytics, technical data such as page views, interactions, and session replay (Amplitude EU). Legal basis: consent (Art. 6(1)(a) GDPR + ePrivacy).
Transactional emails: confirmations, reminders, updates, post-session follow-up. Legal basis: contract performance.
3. Host access — privacy by design
Hosts never see attendee email addresses or phone numbers. All host-to-attendee communication is mediated through JustJoin. Post-session feedback is anonymous and aggregated.
4. Sub-processors
We use the following providers to operate the service. They process personal data on our instructions only:
| Provider | Purpose | Region | Transfer safeguard |
|---|---|---|---|
| Lovable Cloud (Supabase) | Database, auth, storage, edge functions | EU (Frankfurt) | N/A — EU |
| Resend | Transactional email | EU | N/A — EU |
| Amplitude | Product analytics & session replay (consent only) | EU instance | N/A — EU |
| Stripe Payments Europe Ltd. | Payment processing | Ireland (EU) | N/A — EU |
| Google / Apple | OAuth sign-in (only if you choose) | US | SCCs + Data Privacy Framework |
5. International transfers
All core processing happens in the EU. The only US-based optional providers are Google and Apple, used solely if you choose social sign-in. Transfers rely on Standard Contractual Clauses and the EU–US Data Privacy Framework.
6. Retention
- Booking and session records: 24 months after the session, then anonymised.
- Payment and invoice records: 10 years (Belgian tax law obligation).
- Account data: until account deletion, then removed within 30 days.
- Analytics data: 14 months (Amplitude default for EU).
- Email logs: 12 months.
7. Your rights (GDPR Articles 15–22)
You have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data, and to withdraw consent at any time. We respond within 30 days.
- Hosts: use the in-app Privacy & data page to export your data or request account deletion.
- Attendees (no account): email support@justjoin.app from the address you used to book, and include your manage-booking link if you have it. This helps us verify and locate your data quickly.
- Anyone: for any other request, write to support@justjoin.app.
You also have the right to lodge a complaint with the Gegevensbeschermingsautoriteit (APD/GBA), Drukpersstraat 35, 1000 Brussels, Belgium (https://www.dataprotectionauthority.be), or with the supervisory authority of your country of residence.
8. Cookies & tracking
We use only strictly necessary cookies by default (login session, security, consent record). Analytics cookies are loaded only after you click "Accept" in the consent banner. You can change your choice anytime below. A separate "Advertising" category, off unless you allow it, lets us measure which ads bring hosts to JustJoin (no ads are shown on JustJoin) and can be withdrawn from the same place as analytics.
Current preference: Not decided
9. Automated decision-making
We do not use automated decision-making or profiling that produces legal effects on you (Article 22 GDPR).
10. Children
JustJoin is not directed at children under 16. We do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
11. Changes
If we materially change this policy, we will notify hosts by email and update the version number above. Continued use after the effective date constitutes acceptance.
12. Related documents
Terms of Service · Imprint · Waiver
For questions about this policy, visit our Contact page or learn more About JustJoin. Return to the Home page.