Privacy Notice

Who handles the data

Alistair Gillespie operates Lineup. Contact hello@alistairgillespie.io with privacy questions or deletion requests.

What we collect

• Workout details supplied by hosts, including the place name, exact meeting pin, date, time, and workout plan.
• Your profile details, including your name and optional age, approximate location, and photo.
• Your RSVP response, event-scoped browser token, and waitlist state.
• Your mobile number if you verify a host or attendee identity, plus the time, source, and version of any workout-text consent.
• Your notification preference and an Apple Push Notification service device token when you enable iPhone notifications.
• Your email address if you ask to hear when Lineup launches.
• Basic service logs needed for security and reliability.

How we use and share it

We use data to show the workout, maintain the roster, authenticate hosts and attendees, send a requested launch update, deliver workout texts you separately request, prevent abuse, and operate the service. Attendee names and profile photos are visible on that workout.

Private safety reports and blocking records are visible only to authorized service operators and are used to review abuse, enforce restrictions, and protect members.

We use service providers only to operate Lineup: Supabase for authentication, storage, the database, and notification delivery processing; Twilio for one-time verification codes; Vercel for web hosting; Apple for iPhone maps and push notifications; and OpenStreetMap-based map, tile, and search providers on the web. These providers may process technical request data under their own terms when you use the relevant feature.

Contracted service providers may process mobile data only on Lineup’s behalf to authenticate users and deliver requested messages. They may not sell it, use it for their own purposes, or use it for marketing or promotional purposes.

Mobile messaging privacy

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.

Lineup does not sell, rent, or buy mobile phone numbers or text-messaging opt-in data and consent. The dedicated Lineup SMS Privacy Notice governs the recurring workout-text program.

Your choices

Guests do not need a phone number or account to read a workout. When you first commit, Lineup verifies your mobile number with a one-time code and keeps you signed in for quicker RSVPs on later workout links. Phone verification is authentication only; workout text consent remains separate and optional. Message frequency varies according to the workouts you join and changes made by their hosts. Message and data rates may apply. Reply STOP to end SMS messages or HELP for help.

You can turn iPhone notifications off in your Lineup profile or in iOS Settings. You can also sign out, block another member, submit a private safety report, or permanently delete your account from Account in the app. Account deletion removes your profile, photo, phone sign-in, hosted workouts, RSVPs, and registered notification devices. You may also contact us through Support.

Retention and security

We keep account and workout data while your account is active or as needed to provide the service. Account deletion removes your active profile, photo, phone sign-in, hosted workouts, and RSVPs immediately from Lineup’s primary database. Limited de-identified safety records, security logs, and encrypted processor backups may remain for their normal retention periods and are not restored for ordinary product use.

Public links use high-entropy identifiers. Raw mobile numbers and private report details are never exposed through public workout APIs. We use access controls, row-level database policies, rate limits, and server-side validation to limit unauthorized access and abuse.