Privacy at Incommon
Last updated 26 October 2026
Incommon is a dating app, so almost everything in it is personal. This page says plainly what we hold, who else touches it, and how to make it stop. No part of it is written to be skipped.
The short version: we keep what you put in your profile and what you post, plus a record of the taps you make in the app so we can tell what is working. We do not sell it, we do not advertise, and there is no third-party analytics or tracking in the app. You can delete all of it from inside the app, whenever you like, and it goes immediately.
Who we are
Incommon is a small independent team. We decide what happens to the information described here, and you can reach a person at hello@dateincommon.com.
What you give us
- How you sign in — your phone number, or an email address and password.
- If you join the list on this website — the answers to the questions on it: your first name, gender, date of birth, height, neighbourhood, where you grew up, what you do, your education, what you are working toward, when you would like to settle down, whether you have or want children, how much faith matters to you, drinking and smoking, politics (if you choose to say), a set of either-or questions about how you live and how you are in a relationship, what you put first in your life, who you are looking for and what is non-negotiable to you, anything you add in your own words, up to ten photos of you, and five short prompt answers. Each question says on the page whether it will be shown on your profile; most are not, and are used only to decide who we introduce you to. The answers are saved as you give them, before you give us your number, under a code your browser keeps; your mobile number comes last, and we confirm it by texting you a code. We use the number for one more text, when your city opens, with the link to download the app. Everything carries into the app so you are not asked twice. It is deleted with the rest when you delete your account; if you never make one, write to the address at the bottom of this page and we will remove it, and an intake that never reached the number is removed by us after thirty days.
- If you vouch for somebody — your name, a way to reach you (a number, an email address or a handle) and what you wrote about them. We keep it with their application and read it before we let them in; a person may use the contact to check something, and nothing else. The member sees your name and that you vouched, never your words. It is deleted with their account.
- Your profile — your first name, photo, date of birth, gender, where you live, and whichever of these you choose to add: hometown, occupation, education, height, whether you have or want children, how you feel about drinking and smoking, religion, and politics. Where you live is picked from a list of real places, so we also hold that place's coordinates — the neighbourhood's, never your own location. We use them for one thing: so that the people you are set up with are near enough to meet. We do not track where you are, and the app never asks your phone for its location.
- What you are looking for — the kind of relationship, who you are open to, and the age range. This decides who you can be set up with.
- What you write — your prompt answers, your daily posts and any photos in them, your comments, and your messages. The day's photo prompt is answered with both cameras at once, so that post holds two photos: what was in front of you, and you. We also keep whether that photo was taken within a few minutes of the prompt landing, which is what the Candid badge on it means.
Your date of birth is used to work out your age and to keep under-18s out. Incommon is for adults; you must be 18 or over to use it.
What we record as you use it
- What you do in the app — opening it, finishing a step of setting up, liking, commenting, posting, being set up with someone, sending a message. We record that the action happened, when, and what it was about. This is how we tell a screen that works from one that quietly loses people, and it is what a future version of the matching will learn from.
- What the feed showed you, and for how long — which posts we put in front of you, where in the feed each one was, how many seconds it stayed on your screen, how much of it fitted on your screen at once, and why the feed was asked for (you opened the app, pulled to refresh, or scrolled for more). This is the part that is easy to under-describe, so plainly: it includes how long you spent looking at a particular person's photo. We record it because "liked two of three posts" and "liked two of thirty" mean opposite things about somebody, and without knowing what was on offer we cannot tell them apart — which is what the matching needs in order to be about taste rather than about who scrolls most. It is never shown to anyone, including the person whose post it was, and it is deleted along with everything else if you delete your account.
- Who you have blocked or reported — if you block somebody, or report them, we record that you did and when, so that neither of you is shown to the other again. The person is not told. A report also keeps what you wrote in it, and a copy of the post, comment or message you reported, if you reported one.
- That you agreed to the terms — which version of the terms you agreed to, and when. You agree before you can post, comment or send a message, and we keep the record so either of us can show what was agreed.
- Crashes — when the app breaks we get a report of where in the code it broke. It is set up not to send your IP address or your device name.
- Notifications — if you allow them, a token that lets us send a notification to that phone. Signing out removes it.
What we do not do
- We do not sell or rent anything about you, to anyone, ever.
- There are no adverts, and no advertising or marketing trackers in the app.
- We do not follow you around other apps or websites, and we use no third-party analytics product.
- We do not use what you write to train anybody else's model.
Who else touches it
We use a small number of companies to run the app. They only ever act on our instructions, and each one sees only what its job needs.
| Who | What for | What they see |
|---|---|---|
| Supabase | The database, your photos, and signing in | Everything described above |
| Twilio | Texting you a sign-in code, and the daily prompt if you ask for it by text | Your phone number and the text |
| The list of real places that appears as you type where you live, where you grew up or where you studied | What you type into those three fields, and nothing that identifies you | |
| Vercel | Hosting this website | The ordinary record of a page being served: your network address and the page asked for, nothing we add |
| Resend | The few emails we send | Your email address and the email |
| Sentry | Telling us when the app crashed | Where the code broke, not who you are |
| Expo | Delivering app updates and notifications | Your notification token and which version you run |
| Apple | Distributing the app | That you installed it, under Apple's own privacy policy |
Everything is stored in the United States. If you are writing to us from elsewhere, that is where your information goes.
Texts, if you ask for them
Two different things arrive by text, and you can have either without the other. A sign-in code is sent when you ask to sign in. The day's prompt is sent only if you switch it on, on the last screen of account setup, and only to the number you signed in with and that we already confirmed by texting you a code. If you joined the list on this website, one more text arrives: the one that says your city is open, sent once, to the number you confirmed when you joined.
- How often. At most one prompt message a day, plus our replies to texts you send us. A sign-in code arrives only when you ask for one.
- What it costs. Message and data rates may apply. That is between you and your mobile carrier; we do not charge for it.
- We do not share your number. Mobile numbers and any consent you give to be texted are never sold, rented, or shared with anyone for their own marketing, and they are not shared with third parties for any purpose other than delivering the messages you asked for. Twilio carries the messages on our instructions and does nothing else with the number.
- Stopping. Reply STOP to any message to turn texts off, or turn the setting off under Profile. Reply HELP to be reminded how. Carriers are not liable for delayed or undelivered messages.
What we can see
We can read profiles, photos, posts and safety reports through an admin tool, because approving people and answering reports needs it. We deliberately cannot read your messages through it. The permission to do so was never granted, because the product promises a conversation is between two people. If a report requires us to look at something, the report carries its own account of what happened. The one exception is a message somebody reports: the report keeps a copy of that message, and that copy is what we read, never the rest of the conversation.
While Incommon is in early access
Incommon is opening city by city, and everyone in it was let in by us. One thing works differently for now, and the app says so on every screen: the feed is not anonymous — every post shows who wrote it, to everyone on Incommon.
How long we keep it
While your account exists, we keep what is described above. Delete your account and it goes at once — profile, photos, posts, likes, comments, set ups, messages, your phone number and email, and the record of what you did in the app. There is no waiting period, and deleting cannot be undone, by you or by us.
We do take a daily backup, so that a fault on our side cannot lose everybody’s data. A backup made before you deleted your account still holds your rows, and we delete each backup within 30 days — so the last copy of you is gone within 30 days of your deletion. We would not use a backup to bring a deleted account back, and we do not restore individual accounts from one.
Safety reports are the exception, and the only one. If someone has reported you, or you have reported someone, we keep that report, the name it was filed against and any copy it kept of what was reported, so that deleting an account cannot be a way to undo it.
How to delete your account, from inside the app or by asking us.
What you can do
- See and change it — your profile is editable in the app at any time.
- Delete it — from the bottom of Edit profile. Straight away, no questions.
- Turn off notifications — in your phone's settings, or by signing out on that phone.
- Stop the texts — reply STOP to any message, or turn the setting off under Profile.
- Ask us for a copy, or to correct something — email hello@dateincommon.com and we will answer within 30 days, usually the same week.
Depending on where you live you may have a legal right to a copy of your information, to have it corrected or deleted, or to object to how we use it. Ask us and we will do it — we would rather not make you cite a law first.
If this page changes
We will change the date at the top, and if the change actually affects you we will tell you in the app rather than hope you check.
Asking us something
hello@dateincommon.com. A person reads it.