What we collect, and why.

StandIn is a small NYC pilot. We collect what it takes to match you with a StandIn, keep you updated, and process payment — nothing more.

Last updated: July 28, 2026.

What we collect.

Your phone number (to verify your identity and recover your bookings across reinstalls), your name, your email if you join the waitlist, request a line, or apply to work, the details of each line request you submit (the line, the date, the line-up and swap-in times, the address or cross streets, and any notes you write), and a push-notification device token if you allow notifications. After a completed job, Stripe sends us a payment confirmation record — a reference and an amount. If you apply to work as a StandIn, the application form collects your name, email, phone, neighborhood, and your written answers; if you then work a job, the app records your check-ins, which can include the location of the line you are holding.

Photos, and the camera permission.

We do not collect photos from you. There is no photo upload in the iOS app or on this website, for customers or for StandIns — the application form asks for your name, email, phone, neighborhood and written answers, and nothing else. The iOS app asks for camera access for one reason: so Stripe's card scanner can read a payment card when you add one. That scan happens inside Stripe's own payment sheet, StandIn never receives an image from it, and you can decline camera access and type the card number in by hand instead. The photographs on this website — the line and venue pictures, and the founder portrait — are editorial photography we publish ourselves; they are not collected from users and are not connected to anyone's account.

What we don't collect.

The customer app does not use location services on your device — no GPS, no background tracking of where you are. We don't collect your contacts, your browsing history, or any photos. We don't run advertising, and there is no cross-app or cross-site tracking of you anywhere in StandIn.

How we use it.

To match you with a StandIn, to process payment for completed jobs, to send you status updates about your booking by text and push notification, and to recover your booking history if you reinstall the app (matched to your verified phone number). We keep a simple, self-hosted log of app events (like app opens and booking status changes), tied to your account id, to understand what is working. There is no third-party analytics or advertising SDK in the app. We do not sell your data, and we do not use it for advertising.

This website: fonts, analytics, and hosting.

This site is hosted on Cloudflare, which processes your IP address and request details in order to serve the pages. The typefaces are loaded from Google Fonts, so Google receives your IP address and the standard request information that comes with it — browser and device type, and the page asking for the font — every time a page loads; that is what delivers the fonts, and it is the only thing it is used for here. Page views are measured with Cloudflare Web Analytics, which records the page you visited, the page you came from, your browser and device type, and an approximate location derived from your IP address. It sets no cookies, creates no persistent identifier, and is not connected to your account, so it cannot follow you across other sites. We have not set, and so do not state, a retention period for that analytics data. Anything you submit through a form here — a line request, a waitlist signup, or a StandIn application — is stored in a Cloudflare database, and a copy is emailed to our own team through Google Gmail. There are no advertising cookies, no social-media pixels, and no other trackers on this site.

Mobile information and SMS consent.

StandIn may collect a mobile phone number to verify a user's identity and provide requested service-related communications. StandIn does not sell mobile phone information. StandIn does not share mobile phone information with third parties or affiliates for their marketing or promotional purposes. SMS consent is not shared with third parties or affiliates for marketing purposes. Users may reply STOP to opt out of SMS messages and HELP for assistance. Message and data rates may apply.

Who sees it.

The StandIn assigned to your job sees your first name, the line and time, and your booking notes, so they know who they're covering for; before a job is accepted, workers see only the line, neighborhood, and time — never your name or phone. Your phone number is used for booking recovery and, when needed, for the founder to reach you directly during this early pilot. The service providers that handle data for us are: Cloudflare, which hosts this website, stores what you submit through its forms, and provides the page-view analytics described above; Supabase, which provides the database and sign-in behind the iOS app; Stripe, which processes payments — your full card details go straight to Stripe and never touch our servers, we keep only a payment reference and an amount, and Stripe runs its own fraud prevention; Twilio, which delivers the SMS verification codes for phone sign-in; Apple, which delivers push notifications — we store a device token to send them, and the notification text never includes your name or phone number; and Google, which serves this site's fonts and carries the booking and application alerts we email to ourselves.

How long we keep it.

Deleting your account and keeping a business record are two different things. When you delete your account we remove your profile, your device token, and your support messages, and we strip your name, phone number, email, and notes out of your booking history. What is left is a de-identified transaction record — the amount, the date, and which line — that can no longer be linked back to you. We keep that record because we need it for accounting and tax, and because a refund, a chargeback, a dispute, or a fraud claim can arrive after the fact. We have not fixed a retention period for it, so we are not going to state one: it is kept for as long as those accounting, tax, and dispute obligations run.

Your choices.

You can delete your account and personal data at any time in the app — our Account Deletion page covers both the in-app and the email route. You can email support@gostandin.com to ask what we hold about you, to have something corrected, or to ask about this policy, and a person will answer you. We are a small pilot team, so we are not going to promise a response deadline we cannot guarantee. This policy does not grant you fewer rights than the law where you live already gives you.

Changes to this policy.

This is a small, early-stage pilot and this policy may be updated as the product grows. We'll update the date below when it changes.

Questions about your data, or want it deleted: support@gostandin.com