PartyIRL · getting the night ready
Loading…PartyIRL · getting the night ready
Loading…The boring-but-important stuff
Effective: August 14, 2026 · PartyIRL is operated by Yolk Labs
PartyIRL (“we,” “us”) is a product operated by Yolk Labs. This policy covers partyirl.com and the PartyIRL web and mobile applications (together, the “Services”). It explains what we collect and what we do with it. Contact us anytime at support@yolklabs.com.
Your phone number is your account. We require it, we store it, and we use it to sign you in: you enter your number, we text you a one-time code, and confirming that code creates or unlocks your account. It’s also how someone can add you as a co-host or hand you an event before you’ve ever signed up.
Your email address is optional. You can add one from your account page and confirm it with a code. We use it only for account and event mail — verification codes, notifications you switch on, and calendar invites — and you can remove it at any time, which stops all of it. You can also choose which categories of email you receive; marketing is off unless you turn it on.
Neither is shown to other guests. Your phone number and email never appear on an event page or a guest list. They’re account credentials and contact details, not profile fields. The one exception: when someone invites a co-host by phone number, that event’s hosts see the last four digits of the number they invited, so they can tell pending invites apart. Never the whole number, and never for regular guests.
One-time codes are stored hashed, never in plain text, and can only be used once.
A small number of Yolk Labs staff can see your phone number and email in an internal admin console, to answer support requests and act on abuse reports. Every action they take there is logged.
We use one cookie: the session cookie that keeps you signed in. There are no third-party ad trackers and no analytics cookies on the Services.
Event pages are meant to be shared, so some of this is visible by design. Your name, handle, and photo appear to people who can see an event you’re part of. Hosts choose who sees the guest list — only them, only confirmed guests, or anyone with the link — and everyone always sees the headcount.
Public events can be found in Discover and indexed by search engines. Link-only and private events are not listed and are marked so search engines don’t index them, but anyone with the link can open them. A link is not a password: treat it as public if you share it widely.
The text you type to create an event is sent to AI models running on AWS Bedrock to build your draft, and content is screened by the same service for abuse. Your prompts and content are not used to train models, and they aren’t shared with third-party AI providers.
We do not sell your personal information. Ever. We don’t share it for advertising. We use a small number of service providers, who may only process your data to run the Services for us:
We may also disclose information if the law requires it, or to protect someone’s safety.
Account and event data is kept while your account exists. Past events are archived rather than deleted, so hosts and guests keep their history.
Anti-abuse data is deleted on a schedule, not kept indefinitely. One-time codes stop working within minutes, and a daily job deletes the verification records entirely after 48 hours — the phone number or email, the hashed code, and the IP. Feedback you send is kept, but the IP attached to it is erased after 48 hours. Sessions are deleted 30 days after they expire or you sign them out.
If you ask us to delete your account, we’ll remove your personal information; content that is part of someone else’s event history may be retained in de-identified form.
Depending on where you live, you may have additional rights over your data — to access it, correct it, delete it, or object to how it’s used. The same address handles those requests, and we won’t treat you differently for making one.
Data is encrypted in transit and at rest, the database isn’t reachable from the public internet, and one-time codes are stored hashed. No system is perfectly secure, but we’d rather tell you what we actually do than promise more than we can keep.
The Services aren’t directed at children under 13, and we don’t knowingly collect their information. If you believe a child has given us information, email us and we’ll delete it.
PartyIRL is expected to grow. If it becomes its own company, or if Yolk Labs is involved in a merger, acquisition, or sale of assets, your information may be transferred to the successor entity under this same policy (or one at least as protective).
If we change this policy, we’ll update the date above. If a change materially affects how we handle your information, we’ll tell you in the app, and by email if you’ve given us one.