Privacy policy

Effective November 5, 2026

bimpsin ("we", "us") is an app that helps friends make plans to see each other, based in Manitoba, Canada. This policy explains what we collect, why, who we share it with, how long we keep it and what you can do about it. It covers the bimpsin app, the invitation pages at bimpsin.com, our text messages and this website.

What we collect

Your account

• Phone number, which you use to sign in. Friends who have your number can find you on bimpsin.
• Name you choose. If you sign in with Apple or Google, we receive the name on that account.
• Email address, only if you sign in with email, Apple or Google. Firebase Authentication (Google) holds it; our server doesn't store it.
• Settings: time zone, region, your usual free times, quiet hours, how often you'd like to see people, and your answer to a sign-up question about how often you see friends.
• Device details: platform, app version and a push notification token.

What you put in the app

• Plans: titles, places, dates, the messages you write in invitations, and who's invited.
• Answers: which dates work for you and whether you're in.
• Friends and groups: who you're connected with, how you'd like to be contacted by each person, and groups you save.
• Ideas and notes: things you'd like to do and private notes, which are encrypted on our server.
• Links and text you share into the app, such as an event page, so we can read the details. Our server fetches the page, so the website sees our server, not you.

Your calendars, only if you connect them

• Calendars on your phone: the app reads your events on your phone and sends us only the start and end of busy times, for about the next 10 weeks. Titles, places and attendees stay on your phone.
• Google Calendar: we ask Google for your free/busy times and list of calendars. If you tell us how to recognize your own events on a shared calendar (for example by colour or attendee), we read those events' details on our server to work out which are yours, keep only the busy times and discard the rest right away. If you choose to have plans added to your calendar, we write those events, and holds marked "Tentative".
• Microsoft Outlook: we read free/busy times only, and your account name to label the connection.
• We keep calendar access tokens encrypted. Disconnecting a calendar deletes its busy times and removes events we added.

bimpsin's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising or to train AI models, and no one reads it except where you ask us to, for security, or where the law requires.

Contacts, only if you allow it

To find friends already on bimpsin, the app scrambles (hashes) the phone numbers in your contacts on your phone and sends only those hashes. We compare them with people on bimpsin and don't keep them. Contact names never leave your phone during this. If you then add someone who isn't on bimpsin, we receive and keep the name and number you add, so we can text them invitations.

Friends without the app

If someone invites you to a plan before you have bimpsin, we have your phone number and the name they saved you under, which plans you were invited to, your answers, and the texts we send you and you send back. If you later join with that number, this becomes part of your account.

Location

We don't use your phone's location. When suggesting places, travel times or weather, we use place names and area names, and round any coordinates to about 1 km before they go to an outside service.

Text messages

We keep a record of each text we send and receive: the phone number, the message, and whether it was delivered. Replies to invitations are shown to the person who invited you.

Technical information

We use IP addresses to limit repeated sign-in attempts. Our server keeps operational logs for troubleshooting. Invitation pages don't use cookies or tracking, and work without an account.

How we use it

• To run bimpsin: sign you in, find times that work, send invitations and updates, and add plans to your calendar if you ask.
• To text friends you invite who don't have the app, and to handle their replies.
• To make suggestions, using the AI features described below.
• To keep bimpsin safe: limit texting, stop spam and abuse, and enforce our terms.
• To meet legal obligations, such as honouring opt-outs from texts.

AI features

bimpsin uses Anthropic's Claude models to read replies to invitations, suggest dates and places, sort notes, and read event pages you share. To do that, we send Anthropic only what each task needs, such as the reply, the plan's title, dates and place, and first names of the people in it. When filing a note, we send the note and the names of your friends so it can be matched to the right person. We remove phone numbers from everything sent. Anthropic processes this to provide its service to us and, under its commercial terms, doesn't use it to train its models. We keep what's sent and received, encrypted, for 30 days for troubleshooting, then delete it.

Who we share it with

Other people on bimpsin

People in a plan see its title, place, time, who's invited (if the host allows it) and everyone's answers. They don't see your calendar, notes, ideas, groups or reasons.

Service providers

We use these companies to run bimpsin. They get only what they need for their part:

• Telnyx or Twilio: phone numbers and the content of texts we send and receive.
• Google Firebase: sign-in (name and email for Apple, Google or email sign-in) and push notifications. Notification text, such as a friend's name, a plan's title, or a friend's reply, passes through Firebase Cloud Messaging and Apple's push service.
• Anthropic: the AI features above.
• Google: Google Calendar if you connect it, and Google Places and Routes for place suggestions and travel times.
• Microsoft: Outlook calendar free/busy times if you connect it.
• Open-Meteo: rounded coordinates and dates, for weather.
• Apple and Google sign-in, if you use them.
• Our hosting provider, which runs our server and database.

Some of these providers process information in the United States and other countries, where laws may differ from those where you live.

Legal reasons

We may disclose information if the law requires it, or to protect someone's safety, or the rights and security of bimpsin and its users.

We never

sell personal information, share it for advertising, or share phone numbers or text consent with third parties for their marketing.

Texts to people without the app

We text someone only when a bimpsin user who knows them invites them to a plan. Each invitation names who it's from and says it came through bimpsin. Reply STOP to any text to stop all texts from bimpsin, or use the Stop texts link on any invitation page to stop invites from one person. Reply START to get texts again. Message and data rates may apply. See how our texts work.

How long we keep it

• Your account: until you delete it.
• Busy times: deleted once they've passed.
• AI requests and responses: 30 days.
• Text message records and opt-outs: as long as needed to run bimpsin, honour opt-outs and meet legal obligations.
• Backups: kept encrypted, and overwritten over time.

When you delete your account

Deleting your account from the app removes your phone number, name, notes, ideas, groups, friend connections, calendar connections and busy times, settings, AI logs and devices, and signs you out everywhere. You can choose whether plans we added to your calendar are removed too. Plans you were part of with other people stay so they still make sense to them, with your name shown as "Deleted". Numbers you added for friends without the app stay with those plans. Email us if you'd like those removed too.

Your choices and rights

• See and download your data: use Export my data in the app.
• Correct it: change your name and settings in the app, or email us.
• Delete it: use Delete everything in the app. If you don't have the app but get our texts, email us to delete your number and messages. We'll keep only what we need to make sure you're never texted again.
• Withdraw consent: disconnect calendars, turn off contacts access or notifications, or reply STOP to texts.

Depending on where you live, you may have other rights, such as to object to or restrict some uses. Email us and we'll respond within 30 days. If you're in Canada and unhappy with our response, you can complain to the Office of the Privacy Commissioner of Canada.

Security

All connections use encryption in transit. On our server, notes, calendar tokens and AI logs are encrypted, and sign-in codes and links are stored scrambled (hashed). The app's own database on your phone is encrypted and cleared when you sign out. No system is perfectly secure, but we work to protect your information and will tell you if a breach puts you at real risk of significant harm.

Age

bimpsin is for people 18 and older. We don't knowingly collect information from anyone younger. If you think a minor is using bimpsin, email us and we'll delete their information.

Changes

We'll update this page when our practices change, and change the date at the top. For significant changes, we'll let you know before they take effect.

Contact

Questions, requests or complaints: privacy@bimpsin.com. Our privacy officer is responsible for bimpsin's privacy practices and answers at that address.