HQ Coney
Privacy policy
Effective November 10, 2026
This policy covers the HQ Coney app and these web pages, run by HQ Coney (“the club”, “we”), a private members club.
What we collect
| Members | Name, mobile number, email if you gave one, member number, role, join date, and billing day. |
|---|---|
| Applicants | Name, mobile number, optional email, who referred you, what you tell us about yourself, your typed signature, and the rules version and price you agreed to. |
| Activity in the club | Bookings and any notes on them, votes on guests and applicants, door unlock attempts, sauna and steam use, and upkeep issues you report. |
| Dues and bar tabs | Bills, amounts owed and paid, how you paid (for example Zelle or check), and what was put on your tab. The app doesn’t process payments or collect card or bank details. |
| Messages | What you send to the board, and reasons you give when reporting a guest. |
| Your guests | The name and mobile number of each guest a member invites, the visit date, and their pass. If you invite someone, please make sure they’re comfortable with that. Guests who cause a problem may be kept on a ban list. |
| Your phone | A push notification address and the phone type (iOS or Android), if you allow notifications. Your login session is stored on the phone. |
We don’t collect your location, contacts, or photos, and the app has no advertising, analytics, or tracking across other apps.
How we use it
- To sign you in by text code and confirm you’re a member.
- To run the club: bookings, door access, sauna and steam, guests, member votes, the bar, and upkeep.
- To bill dues and tabs, send reminders, and pause access when dues are overdue.
- To send notifications and texts about your bookings, guests, votes, dues, and club news.
- To keep the club safe and enforce its rules.
Text messages
We only send texts needed to run the club:
- Login codes, each time you ask for one to sign in.
- Applicants: one text when your application is decided, either a welcome or a short reply if it wasn’t accepted.
- Guests: one day-pass text for each approved visit.
- Members with unpaid dues: a reminder on the due date and up to twice more in the following week, a text if access is paused, and any reminder a founder sends by hand.
- Founders: a text for each message sent to the board and each deleted account.
- Vendors: a text for each upkeep request the staff send them.
How often depends on what you do in the app. Most members get only a few texts a month. We don’t send marketing texts. Message and data rates may apply.
Reply STOP to stop our texts, or HELP for help. You can also email coney@flatout.solutions. Stopping texts also stops login codes, so you can’t sign in to the app by text until you reply START or contact us.
Mobile numbers and SMS opt-in data and consent will not be shared with any third parties or affiliates for marketing or promotional purposes. Twilio is used only to deliver our messages.
Who can see your information
- Other members see the names of applicants and what they wrote, and the names of guests and who invited them. They don’t see phone numbers or emails.
- Staff see member details, bookings, applications, guest numbers, and bar tabs.
- Founders also see everyone’s dues and payments.
- Guests and vendors: a guest’s pass text names their host, and an upkeep request text names the staff member who sent it.
Service providers
We don’t sell personal information. These companies handle it for us, only to provide their service:
| Supabase | Database, login, and server functions. Stores all the information above. |
|---|---|
| Twilio | Sends text messages. Receives mobile numbers and message text, only to deliver our messages. |
| Expo, Apple, Google | Deliver push notifications. Receive your push address and the notification’s text. |
| Kisi | Opens the club’s doors. Receives which door to open, not who you are. |
The app also links to outside services, such as the club’s WhatsApp group or a massage booking site. Their own privacy policies apply once you open them. We may also disclose information if the law requires it.
How long we keep it
We keep your information while you’re a member, until you delete your account or ask us to delete it. After that:
- Bills and bar tabs are kept without your name for as long as the club needs them for tax, accounting and legal reasons.
- Door, spa, and upkeep records and notifications are kept without any link to you.
- A guest ban stays on the list until the club lifts it.
- Applications that didn’t lead to membership, and guest details, are kept until you ask us to delete them, unless the club needs them to enforce its rules, such as a guest ban.
- Providers’ logs and backups may hold copies for a limited time.
Deleting your account and your choices
- In the app: Membership, then Delete account.
- On the web, without the app: delete your account here.
- Applicants and guests: email coney@flatout.solutions to see, correct, or delete your information.
- Notifications: turn them off in your phone’s settings.
Deleting your account ends your club and door access. The founders are told your name and any balance owed, and deleting doesn’t clear what you owe. Depending on where you live, you may have other privacy rights; contact us to use them.
Security
Information is encrypted in transit, and access inside the app is limited by role. No system is perfectly secure, so please tell us if you think your account has been misused.
Children
The club and the app are for adults aged 18 and over. We don’t knowingly collect information from children. If you think we have, contact us and we’ll delete it.
Changes
If this policy changes, we’ll update the date above and tell members about significant changes in the app.
Contact
HQ Coney, coney@flatout.solutions