Privacy Policy

Last updated November 7, 2026

This policy explains what Corra LLC, which operates iniki (“we,” “us”), collects when you use followiniki.com or the iniki app, why, who else handles it, and the choices you have. Using iniki is also governed by our Terms of Use.

The short version: we collect what we need to run the club. Nothing about you is shown to the public, but every member can see your profile, which chats you’re in and which spots you mark. We don’t sell your information. Our public pages carry Google Analytics and Meta’s advertising pixel, which you can switch off; nothing inside the club does. If you buy or sell tickets, Stripe handles the payment and we don’t see a card number. You can delete your account yourself at any time.

1. Information we collect

If you join the waitlist

Your email address or your Instagram handle, whether the account is for a person or a club, who you go out as, the kinds of night you picked, the neighborhood you chose, and whether you’d like to be an Insider or a Guide. If you leave a handle, we may message you there with your invite. If you came from an ad or a referral link, we may note which one.

If you send a takedown request

Your name, email address, what you report and your signed statement, and what we decide about it.

If you become a member

  • Sign-in details. You sign in with Google, with Apple in the app, with an emailed code, with a code texted to your phone, or with your email and a password. If you use Google or Apple, it confirms your email address to us and we don’t see that account’s password. We don’t copy your name or photo from it. A password is kept only in a securely hashed form that we can’t read.
  • Your phone number. Joining in the app takes a mobile number, which we confirm with a texted code and keep on your account. Before a code is sent, we check with Twilio that the number is a mobile line.
  • Your profile. The display name, username, birthday, neighborhood and photos you give us, and your gender and bio if you add them. Your birthday is how we confirm you’re 18 or over.
  • What you do in the club. The chats you join and whether you spun in, the nights you plan or join, the spots you’re interested in, your posts, comments and reactions, the members you star, follow or swipe on, your friends and groups, and the members you block.
  • Messages. What you write in a chat and in direct messages. Messages are stored on our servers so they can be delivered and shown back to you. They are not end-to-end encrypted.
  • Invites. Who invited you, and who you invited.
  • Reports. If you report something, or are reported, we keep the report and the words it quotes.
  • Your agreement. Which version of the terms you agreed to, and when.
  • Notifications. If you turn them on, the address your browser gives us, or in the app the token your phone gives us, for sending a push notification to that device.
  • Messages to us. Anything you send to the iniki account or to our email addresses.

If you buy or sell tickets

  • Buying. The email address the tickets go to (your account’s, if you have one, and whatever you give us if you don’t), your order (the event, the day, the tickets, the price and the refund policy it was sold under), and each time a ticket is scanned at the door, by whom. Stripe takes your payment on its own page and tells us it went through; we never see your card number. If you let Stripe save your details with Link, that is Stripe’s, under its own terms.
  • Selling. Your Stripe account and whether Stripe has passed it, the version of the Seller Terms you agreed to and when, whether staff have approved you, and your sales, refunds and disputes as Stripe reports them. Stripe collects your identity, bank and tax details itself; we don’t hold them.
  • When you provide personal data in connection with iniki, Stripe receives that personal data and processes it in accordance with Stripe’s Privacy Policy.

Collected automatically

Your IP address, browser and device type, and the pages you request. Our hosting and database providers keep standard server logs, and we use them to keep the Service secure, limit abuse and fix errors. We also note the IP address each time you sign in and each time you send a photo, against your account, for safety reports and legal requests. The neighborhood on your profile is the one you picked. If you allow it, the app sends roughly where you are, to about half a mile, with a search, to sort spots by distance; we don’t save it. The app also sends it when you join and from time to time as you use it, to check you’re near a city we’re open in: we keep which city you were near and when, not where you were.

  • Inside the club, we log which screens you open, when you open the app and for how long, when a notification is sent to you and when you tap one, and when you share a link or copy an invite, against your account. That log is ours alone: it isn’t sent to anyone else, and it goes with your account.
  • Analytics, on our public pages only. The home page, our ad landing pages, the waitlist and the invite pages use Google Analytics to count visits, how people found us, what kind of device they use and roughly where they are (city or region), and whether they joined the waitlist or made an account. It identifies your browser with a random ID in a cookie, not with your name or account. If you came from one of our Google ads, Google Analytics tells Google Ads that the click led to a signup. We’ve switched off Google signals and ads personalization, so Google can count our ads with this but can’t use it to target you.
  • Advertising measurement, on our public pages only. We buy ads for iniki on Meta (Facebook and Instagram). The home page, our ad landing pages, the waitlist and the invite pages load Google Tag Manager, which loads Meta’s pixel. The pixel reports back to Meta which of those pages you viewed and whether you joined the waitlist or made an account, and Meta can match that to your Facebook or Instagram account if you have one. If you came from one of our ads, the link carries an ID that says which. We use it to see which ads work and to show iniki ads to people who have visited before. You can turn this off in Your privacy choices.

Information about places

The spots, their photos and their details come from daytori, a guide to places that Corra LLC also runs. That information is about businesses, not about you. Your iniki account is separate from any daytori account.

2. How we use it

  • To run your account, sign you in, and show you the club.
  • To show other members what the next section describes.
  • To show you the chats at spots you’re interested in, and to pick a chat when you spin.
  • To send you the notifications and emails described below.
  • To read and act on reports, enforce the rules, and prevent spam and abuse.
  • To understand, in aggregate, which nights and neighborhoods people use, so we can improve the club.
  • To comply with the law and enforce our Terms.

3. What other people can see

  • The public sees nothing about you. Profiles, chats, posts and nights are for signed-in members. One exception: a night you set to “link only” can be opened by anyone you give its link to.
  • Every member can see your profile (your name, username, photos, age, neighborhood, bio, stars and iniki points) and that you’re in a chat, including whether you spun in. You can hide your age.
  • Every member can see that you marked a spot, with your profile, on that spot’s card, that week and the week after. Your friends and the people in your groups also see the spots you marked.
  • Your friends only, unless you change it: the list of spots on your profile.
  • Whoever you choose: each post and each night goes to everyone, to your friends or to one group.
  • People in the conversation: what’s said in a chat is seen by everyone in it, and a direct message by the friend you sent it to.
  • The seller of a ticket you bought sees which of your tickets have been scanned. Your payment is made to the seller’s own Stripe account, so in Stripe they see your email address and the payment details Stripe shows a merchant. We may also give the seller your email address, for the door or a dispute. The Seller Terms let them use it for nothing but the event. Your card statement shows the seller’s name.
  • Not shown to other members: your email address and your date of birth.
  • Blocking hides each of you from the other everywhere in the club.
  • Our staff can read a reported conversation, and can access account data when needed to handle a report, a safety concern or a legal request.

Your photos are stored at web addresses that are long and random but not password-protected, so anyone who is given a photo’s exact address can open it. Other members can also screenshot or repeat what they see. Think about that before you post.

4. Who we share it with

We don’t sell your personal information. We do send Meta information about what you do on our public pages so we can advertise there, which California law calls “sharing for cross-context behavioral advertising.” You can turn that off at any time in Your privacy choices. Apart from that, we share your information only in these cases:

  • Service providers that run parts of iniki for us, and may use it only to do that:
    • Supabase: sign-in, database, photo storage and live chat delivery
    • Vercel: hosting
    • Resend: sending email
    • OpenAI: checking photos before other members see them (never those in group chats or direct messages), and reading spot searches
    • Cloudflare: checking that the waitlist and takedown forms were filled in by a person
    • OpenFreeMap: drawing the map, which your browser or the app loads from it
    • Photon and the US Census Bureau: finding an address you type for a night or a spot
    • Apple: Sign in with Apple, if you use it
    • Twilio: checking that a phone number is a mobile line, and texting sign-in codes
    • Expo: delivering notifications to the app, passing each one and its text on to Apple
    • Stripe: taking payments for tickets, into the seller’s own Stripe account, and onboarding sellers. Stripe also acts for itself, under its own privacy policy, when it checks a seller’s identity, prevents fraud, or saves a buyer’s details with Link
    • Google: sign-in with Google, if you use it, and on our public pages Google Tag Manager, Google Analytics, and Google Ads, which Analytics tells when an ad click led to a signup. From our public pages, Google doesn’t receive your name or email address
    • Your browser’s push service (run by Apple, Google or Mozilla, depending on your device): delivering notifications, if you turn them on
  • Meta, for advertising. Unlike the providers above, Meta also uses what it receives for its own purposes, which is why it is listed separately. From our public pages it gets the pages you viewed, whether you joined the waitlist or made an account, your IP address and browser details, and the ad ID if you came from one of our ads. When you join the waitlist or make an account, it also gets your email address and your account number scrambled into a fixed code. Meta can check that code against the accounts it already holds, but it can’t read your address back out of it, and we don’t send the address itself. It gets nothing from inside the club: not your profile, your chats, or anything you post. Meta’s privacy policy covers what it does with it.
  • Other members, as described in What other people can see.
  • Legal and safety reasons. When the law requires it, or when we believe in good faith that it’s needed to protect someone’s safety or rights, including ours, or to investigate abuse.
  • Business transfers. If iniki is merged, acquired or sold, your information may transfer as part of that deal.
  • With your consent, or when you ask us to.

5. Cookies

  • Sign-in cookies (sb-…-auth-token) keep you signed in. They’re required.
  • Your city (iniki.city) remembers which city you’re looking at, for up to a year.
  • Analytics cookies (_ga, _ga_…, _gcl_au), on our public pages only. Google Analytics sets the first two to count visits, for up to 14 months. Google’s tag sets _gcl_au for up to three months when you arrive from one of our Google ads, so a click that later became a signup can be counted. Google’s opt-out browser add-on blocks them, and blocking them won’t change how iniki works for you.
  • Advertising cookies (_fbp, _fbc), on our public pages only. Meta’s pixel sets _fbp to recognize your browser across visits, for up to three months, and _fbc when you arrive from one of our ads, to say which. Blocking them won’t change how iniki works for you.
  • Your advertising choice (iniki_ads_opt_out), if you switch the pixel off on Your Privacy Choices.

If you open the sign-in screen, Google’s sign-in button loads from Google, which receives your IP address and browser details and may use its own cookies. Google’s privacy policy covers that. We honor the Global Privacy Control signal: if your browser or an extension sends it, we don’t load the advertising pixel at all and don’t report to Meta from our servers either. “Do Not Track” headers have no agreed meaning, so we don’t rely on them.

6. Emails and notifications

We email or text you sign-in codes, and email your invite and notices about your account. Push notifications (a message, a friend request, people joining a chat at a spot you were interested in) are off until you turn them on for a device, and you can turn them off again in settings.

7. How long we keep it

  • We keep your account and what you post until you delete it, except what’s said in a spot’s chat, which is destroyed 25 days after that chat’s weekend ends.
  • When you delete a post, a comment, a photo, a spot or a night, or unsend a message, it leaves the club at once and no member can see it. We then keep it out of sight for up to 25 days before it’s destroyed, so that a report made after the fact can still be looked into, and we can answer a lawful request about it. A group chat is kept the same way once its last member leaves.
  • When you delete your account, you and everything of yours leave the club at once the same way. Within the same 25 days, you can sign in and keep your account; after that, we destroy your sign-in, profile, photos, posts, messages, seats, interests, friendships, notification settings and the log of what you opened in the club. Nights you planned are removed with you. Your waitlist answers stay until you ask us to remove them.
  • A deleted thing or account is kept longer if a report about it is still open, or if the law requires us to preserve it (see section 4). Then it stays until the report is closed or the requirement ends. A photo staff took down for a report may be kept privately for a time after that.
  • We keep reports, including the words they quote, after the account they are about is gone, for as long as we need them to keep the club safe. A report about a deleted account no longer names it.
  • The log of which screens you open inside the club is kept for 13 months, so we can compare a month with the same month a year before. The IP addresses noted at sign-in and with each photo are kept for a year. Notifications are kept for 90 days.
  • Ticket orders, refunds and door scans are records of a sale: we keep them for at least 12 months after the sale, as California law requires, and for as long after that as a payment can still be disputed or tax and business records must be kept. Deleting your account doesn’t delete them; they stay with the email address the tickets went to. A seller’s sales and refunds are kept the same way.
  • Waitlist answers are kept until you ask us to remove them, including after you join.
  • Takedown requests are kept with what we decided about them.
  • Deleted data may stay in encrypted backups for a limited time before those backups are overwritten.

8. Your choices and rights

  • Edit your profile and your photos at any time.
  • Choose who sees your spots, and each post and night.
  • Block any member.
  • Delete your account from Settings in the app, or at the bottom of Edit profile on the site. It takes effect at once. You have 25 days to sign in and keep it; after that it can’t be undone.
  • Get a copy or fix something: email legal.iniki@corralimited.com from the address on your account, or, for a ticket bought without one, from the address the tickets went to. We may ask you to confirm the request came from you, and we’ll reply within the time the law sets.

We won’t treat you differently for using any of these rights.

Your privacy choices

To stop iniki sending your activity to Meta for advertising, use Your Privacy Choices, linked at the bottom of our public pages. We remember the choice in a cookie on that device, so you’ll need to set it again in another browser or after clearing your site data. Turning on Global Privacy Control in your browser does the same for every site that honors it, ours included.

California residents

California law gives you the right to know what personal information we collect, use and disclose, to get a copy of it, to correct it, to delete it, and to limit the use of sensitive personal information. You can use these rights by emailing legal.iniki@corralimited.com, and an authorized agent can act for you if they show us your written permission. Section 1 lists what we collect, and section 4 lists who receives it. The categories are identifiers, customer records, commercial information (tickets bought and sold), characteristics you choose to give us (age and gender), internet activity, photos, the content you post, and the contents of your messages. We use your messages and your birthday only to run the Service and keep it safe. We don’t sell personal information. We share identifiers and internet activity from our public pages with Meta for cross-context behavioral advertising, as section 4 describes, and you can opt out of that on Your Privacy Choices.

Outside the United States

iniki is run from the United States for people in the United States, and your information is stored and processed there.

9. Age

iniki is for people 18 and over, and we don’t knowingly collect information from anyone younger. If you think someone under 18 has an account, email legal.iniki@corralimited.com. We may end the account.

10. Security

We use HTTPS for all traffic, store passwords only as secure hashes, and limit access to personal data to the people who need it to run iniki. No service can guarantee perfect security. If a breach affects your information, we’ll notify you as the law requires.

11. Changes to this policy

When we change this policy, we’ll update the date at the top. We may also tell you in the app or by email.

12. Contact

Questions, requests or complaints about privacy: legal.iniki@corralimited.com, or by mail to Corra LLC, 2108 N St, Ste N, Sacramento, CA 95816.

Terms · Privacy · Your privacy choices · Ticket Terms · Seller Terms · The rules · How it works