Privacy policy.

1. Who is responsible for your data

[registered entity name], [registered address], United Arab Emirates, trading as The Man Cave Project, decides what is collected here and why. Questions about any of it go to [privacy contact email].

2. What we collect

Only what the service needs to work:

• Account and profile: your name, email address, phone number where you give one, city, profile photograph, headline, bio, interests and the tier and rank you hold.
• Membership and billing: which tier you are on, when it renews, whether it is frozen or ending, and the payment records Stripe returns to us. We never see or store your full card number.
• What you do here: the gatherings you reserve, the seats you are checked in to at the door, the points you earn, the badges you hold, the men who vouch for you and the connections you make.
• What you write: posts and comments in the Fire, chat messages, and photographs, images and files you upload.
• Coaching: the sessions you book, with whom, when, and what was paid. Coaches see the members who book them.
• Device and notification data: the push token your phone or browser gives us so we can send you a notification, and the device type behind it.
• Technical data: IP address, timestamps, error reports and basic usage logs, which is how we keep the thing standing up and spot abuse.
• Referrals: the code you were invited on, and the codes you hand out.

3. Where it comes from

Most of it comes from you, when you fill in your profile, book a seat or write something. Some comes from other people: a member who vouches for you, a host who checks you in at the door, a member whose referral code brought you in. Payment outcomes come back to us from Stripe.

4. Why we use it

• To run your membership: to let you in, to seat you, to bill you, to show you what you hold.
• To take payment and pay coaches, through Stripe.
• To let you talk to other members, in the Fire and in chat.
• To send you what you asked for: reservation confirmations, reminders before a gathering, and notifications you can turn off on your device.
• To keep the rooms safe: to look at reports, to moderate, and to act on members who break the terms.
• To understand what is used and what is not, so we can improve it.
• To meet our legal, tax and accounting obligations.

5. The basis we rely on

We process your data to perform the agreement we have with you (your membership and the seats you book), on the basis of our legitimate interests in running and securing the service, with your consent where consent is what applies (push notifications, and anything you choose to publish), and where the law requires us to keep records.

Where we rely on consent you can withdraw it at any time, including by turning notifications off on your device.

6. Who we share it with

We do not sell your data. We share it with the companies that run parts of the service for us:

• Google Firebase and Google Cloud: sign-in, the database, the files you upload, hosting, and push notifications through Firebase Cloud Messaging, which in turn hands the message to Apple or Google.
• Stripe: payments, subscriptions, and payouts to coaches through Stripe Connect.
• Stream: chat. Your messages, your display name and your avatar are held there so the chat works.
• Chapter hosts and franchise operators: the hosts running a gathering see who is coming and check people in, and a chapter operator sees the attendance and revenue for his own chapter.
• Professional advisers and the authorities, where the law requires it or where we have to defend a legal claim.

7. What other members see

Your name, photograph, city, headline, bio, interests, tier, rank, badges and the vouches you hold are visible to other members in the directory. So is anything you post in the Fire, anything you write in a chat and the fact that you are coming to a gathering you have booked.

Your email address, your phone number and your billing details are not shown to other members.

8. Where it is held

Our infrastructure runs on Google Cloud and Firebase, and our processors operate in the United States, the European Union and elsewhere, so your data is transferred outside the United Arab Emirates. Where we do that, we rely on the safeguards those providers offer, including standard contractual clauses.

9. How long we keep it

We keep your account data for as long as you have an account.

When you delete your account, we erase your profile, your photograph and your contact details, cancel your membership and stop billing. What you posted stays, attributed to a former member, because deleting it would tear holes in other men’s conversations. Attendance records and financial records also stay, because we are required to keep them.

Logs and technical data are kept for a limited period and then removed.

10. Your rights

You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to have it sent to another provider. You can do a lot of this yourself: your profile is editable in the app, and account deletion is in your profile under the danger zone.

For anything else, write to [privacy contact email] and we will answer within thirty days. If you are not satisfied, you can complain to the UAE Data Office or your local data protection authority.

11. Notifications and email

We send transactional messages: a confirmation when you book, a reminder before a gathering, a receipt, an alert when something happens on your account. Push notifications can be turned off on your device, and we will always include a way out of any marketing email we send.

12. Cookies and local storage

The website stores your sign-in session and a few interface preferences in your browser. We do not use advertising cookies and we do not track you across other websites.

13. Security

Traffic runs over HTTPS, sign-in runs through Firebase Authentication, card data never touches our servers, and access to the back office is restricted to the people who need it. No system is perfect, and if a breach affects you we will tell you and the relevant authority as the law requires.

14. Children

This is an adult community. The service is not for anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe we have, write to us and we will remove it.

15. Changes to this policy

We may update this policy. The date at the top of the page tells you when it last changed, and we will tell you in the app or by email if the change matters to you.

16. Contact

Write to [privacy contact email], or to [registered entity name], [registered address], United Arab Emirates.