DropIn Privacy Policy

Effective date: October 5, 2026

DropIn is a mobile app and website (dropin.reecenben.com) that lets creators and studios see who is active nearby, message each other and request studio sessions. DropIn is a product of Reecenben, Inc., a Delaware corporation at 300 Creek View Road, Suite 209, Newark, Delaware 19711, USA ("Reecenben," "we," "us"). This Privacy Policy explains what we collect, how we use it, who can see it and the choices you have.

The most important point: when you turn on Go Active, DropIn uses your device's precise location and shows your position to other DropIn users near you. Go Active is off by default. You choose when to turn it on and you can turn it off at any time.

1. Information we collect

Account and profile information

• Name or display name, username, email address and phone number (if you add one).
• Profile photo, bio, creator type, skills, links to your social or music profiles, and any other details you add to your profile.
• Your password, stored only in hashed form.

Precise geolocation (sensitive personal information)

• When Go Active is on, we collect your device's precise location (latitude and longitude, such as from GPS) and your beacon status.
• When you browse the radar, we use your current location to find users and studios within the radius you select (1 to 25 miles).

Messages and bookings

• The content of direct messages you send and receive, including photos or files you attach, and when they were sent and read.
• Studio booking requests, including the studio, the requested date and time, and any notes.

Studio and verification information

• For studios that apply to be a Verified Hotspot: business name, studio address, contact details, photos, and documents that show you operate the studio.

Safety information

• Reports you submit about other users, reports others submit about you, blocks, and our records of how we handled them.

Beta and waitlist information

• If you apply for the beta or sign up for updates on our website: your name, email address, and the answers you give on the application.

Device and usage information

• Device model, operating system, app version, a device identifier, push notification token, IP address, crash reports, and how you use features of the app (for example, when you open the app or start a Go Active session).
• In-app events such as opening the app, viewing a studio or profile, searching, starting or completing a booking and sharing an invite, linked to your account or to a random identifier the app creates. We use them to measure and improve DropIn, not for advertising.
• Profile views: when you open another member's profile, we record that you viewed it (one record per profile per day).
• Studios you save, collab posts and replies you write, invite codes you use or share, and your booking credit balance.
• On our website, we use Umami, a privacy-focused analytics tool that we host ourselves at stats.reecenben.com. It does not use cookies and does not build profiles of individual visitors.

2. Precise geolocation: how it works

Purpose. We use your precise location only to: (a) show your position and distance to other DropIn users within their radar radius while Go Active is on; (b) show you creators and studios near you; (c) calculate distances; and (d) protect users, for example by investigating a safety report. We do not use your precise location for advertising, we do not sell it, and we do not share it with data brokers.

Opt-in consent. We collect precise location only after you give two separate permissions: first, you allow location access in your device's system prompt; second, you turn on Go Active in the app, after we explain on screen that your location will be visible to nearby users. You can use your account, profile and messages without ever turning on Go Active.

Who can see it. While Go Active is on, signed-in DropIn users within their selected radius can see your profile, your beacon status, your approximate distance from them, and your position on the map. Your position on the map can reveal the area or building where you are. Do not turn on Go Active in a place you do not want others to know about, such as your home.

How to stop sharing. You can stop sharing your location at any time by doing any of the following:

• turning off Go Active in the app;
• signing out of the app;
• turning off location access for DropIn in your device settings (on iPhone: Settings, then Privacy and Security, then Location Services, then DropIn; on Android: Settings, then Location, then App permissions, then DropIn); or
• deleting your account.

When you stop sharing, your pin is removed from the radar right away.

Retention. We keep only your most recent shared location with your account, so the radar can work. Each new location replaces the previous one, and we do not keep a history of where you have been. Short-lived location updates used while Go Active is on expire automatically. Your stored location is deleted when you delete your account. If your location is part of a safety report, we keep the location data related to that report for as long as needed to investigate and resolve it, and for up to 1 year after it is resolved, or longer if the law requires.

3. How we use information

• To create and run your account and show your profile.
• To run the radar, map and grid discovery, messaging and booking features.
• To verify studios.
• To send you notifications you have turned on, such as new messages and booking updates.
• To keep DropIn safe: detect fraud, spam, harassment and misuse, review reports, and enforce our Terms of Use.
• To fix bugs and improve the app, using usage and crash data.
• To run the beta program and tell you when new builds are available.
• To comply with the law.

4. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share personal information only:

• With other users, as described above: your profile is visible to other users, your location is visible while Go Active is on, your messages are visible to the people you send them to, your booking requests and bookings are visible to the studio's host, and if you are a host, your studio listing (name, photos, address, rate, opening hours, amenities, add-ons and reviews) is public in the app. If you view another member's profile, a member with DropIn Pro can see that you viewed it in the last 30 days (your name, photo and creator roles). Collab posts you publish are visible to signed-in members with your approximate distance from them (rounded to about 1 km), and your replies go to the post's author. The person who invited you can see that you joined and booked, through the credit they receive.
• With service providers that act on our instructions, including the hosting providers of our servers, Hostinger (email), Apple and Google (app distribution and push notifications), Expo (push notification delivery), Stripe (payments, subscriptions, host payouts and host identity verification), Cloudflare (photo storage), and crash-reporting tools. We never see or store your full card number; Stripe handles it.
• For safety and legal reasons, when required by law, subpoena or court order, or when we believe in good faith that disclosure is needed to prevent death or serious bodily harm, to protect users or the public, or to protect our rights.
• With a successor in a merger, acquisition, financing or sale of assets, subject to this Policy.

5. Data retention

• Precise location: as described in Section 2.
• Account and profile: while your account is open. When you delete your account, we delete it as described on our Account Deletion page.
• Messages: while your account is open. When you delete your account, we delete the messages you sent from our servers.
• Booking records: up to 2 years after the booking date, so studios and users can resolve disputes, then deleted.
• Safety reports and enforcement records: up to 3 years, so we can prevent banned users from returning and protect users.
• Device and server logs: up to 90 days.
• Profile views: 90 days, then deleted automatically.
• In-app events: up to 13 months, then deleted automatically.
• Collab posts and replies: while your account is open (closed posts stay visible only to you).
• Beta applications and waitlist: until the end of the beta program or until you ask us to delete them.

Deleted data may remain in encrypted backups for up to 30 more days before it is overwritten.

6. Security

We use reasonable safeguards, including encrypted connections (HTTPS and TLS), hashed passwords, access controls, and multi-factor authentication for staff accounts. Only staff who need access to do their jobs can view user data. No system is completely secure, and we cannot guarantee absolute security.

7. Your privacy rights

Depending on where you live, including in California, Texas, Colorado, Connecticut, Virginia, Utah, Oregon and other U.S. states with privacy laws, you may have the right to:

• know what personal information we collect, use and disclose, and get a copy of it in a portable format;
• correct inaccurate personal information;
• delete personal information;
• opt out of the sale of personal information, targeted advertising and certain profiling (we do not do any of these);
• limit the use of sensitive personal information (we already use your precise location only for the purposes in Section 2, which are the purposes the law allows);
• withdraw consent to processing of sensitive data at any time, by turning off Go Active or location access; and
• not be discriminated against for using your rights.

California (CPRA). Precise geolocation is "sensitive personal information" under California law. We use it only to provide the services you request, and we do not use it to infer characteristics about you. In the last 12 months we collected identifiers, customer records, internet and app activity, precise geolocation, audio or visual information (profile photos), the contents of messages, and inferences limited to your search radius preferences. We collected them from you and your device, for the purposes in Section 3, and disclosed them to the recipients in Section 4. We have not sold or shared personal information.

Texas (TDPSA). Precise geolocation is "sensitive data" under the Texas Data Privacy and Security Act. We process it only with your consent, given through the two-step opt-in in Section 2. We do not sell sensitive data.

How to make a request. Email info@reecenben.com with the subject line "Privacy request" from the email address on your account. We will verify your identity by matching it with your account, and we respond within 45 days. If we need more time, we will tell you, and the total will not exceed 90 days. You may use an authorized agent, who must provide proof of your permission. If we deny your request, you may appeal by replying to our decision with the subject line "Privacy appeal," and we will respond within 60 days. If your appeal is denied, you may contact your state attorney general.

We treat a Global Privacy Control signal as a request to opt out of sale and sharing. Because we do not sell or share personal information, no further action is needed. Our website does not respond differently to "Do Not Track" signals.

8. Age requirement

DropIn is only for people 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that a user is under 18, we will close the account and delete its information. If you believe a minor is using DropIn, email info@reecenben.com.

9. International users

DropIn is offered in the United States. We process and store information in the United States.

10. Changes to this Policy

We may update this Policy. When we do, we will post the new version with a new effective date. If a change is material, especially any change to how we use location, we will notify you in the app or by email before it takes effect, and we will ask for your consent again where the law requires.

11. Contact us

Reecenben, Inc., Attn: DropIn Privacy
300 Creek View Road, Suite 209, Newark, Delaware 19711, USA
info@reecenben.com