Mixalyst Privacy Policy

Last updated: November 3, 2026

Mixalyst is an app for communities that gather in person: invitations, RSVPs, messages, photos, volunteers, tickets and the rest of an event's life, in one place. This policy explains what information Mixalyst keeps, why, who helps us run the service, and the choices you have.

The short version

• Your community's members, messages, photos and attendance belong to your community. We don't sell them, we don't show ads, and we don't mine them.
• Mixalyst has no AI features and never uses what you or your community shares to build or train AI. Section 5 covers the companies that deliver our email and payments.
• Your sign-in is your email address. There are no passwords, no advertising identifiers, and no third-party tracking or analytics tools in the app.
• When the app hits an error, it sends us a technical report with anything you or your community wrote removed first. It is not linked to your account.
• You can delete your account from inside the app at any time.

1. Who we are

Mixalyst is operated by TBO Soft LLC, a California limited liability company ("Mixalyst", "we", "us").

Questions or requests: [email protected].

2. What we collect, and why

We collect only what the app needs to work. Here is all of it.

Your account

• Email address — how you sign in (we email you a one-time code or link; there is no password) and how we reach you about your communities.
• Display name and profile photo — how other members see you. Each community can also hold a nickname for you and your answers to that community's profile questions; those belong to that community only and are never shared with your other communities. You also keep a private log of your own answers, so you can reuse them when you join somewhere new.

What you share in a community

• Messages on community and event boards, threads and direct messages, plus reactions, mentions and pins.
• Photos, videos and audio you add to albums or messages, with any captions or descriptions. Phones often write hidden details into a photo or video file, such as the place it was taken and the device it came from. We remove the location and other hidden details from every photo and video when it is uploaded, before it is stored or shown to anyone, and keep only what is needed to display it the right way up and in the right colours.
• Events and plans — events you create or propose, announcements, volunteer jobs and shifts you sign up for, things you offer to bring, budgets and organizer notes.

Taking part in events

• RSVPs, guests you bring (the name you give a guest, and how many are children if the event prices children differently), attendance check-ins, waitlist places, and answers to an event's RSVP questions.
• Invitations. When you invite someone by email, we keep that address so the invitation can be sent, tracked and withdrawn. You can see your own list of people you have invited.
• Releases of liability. If an event's organizer requires a signed release (a waiver), we keep a record of the signature: the release text you agreed to, the name you typed, your email, the time, and the IP address and browser/device description of the device used to sign. If a parent or guardian signs for a minor, we also keep the minor's name and the guardian's confirmation that they may sign. We keep this so the organizer can show the release was signed.

Money (only if you buy a ticket, run a community fund, or buy a Mixalyst plan)

• Card details go straight to Stripe, our payment processor. Mixalyst never sees or stores your card number. When an owner saves a card for a Mixalyst plan, Stripe keeps it; we keep only Stripe's reference to it.
• We keep the record of each payment: what it was for, the amount, Stripe's processing cost, refunds, and Stripe's reference numbers. Mixalyst takes no part of a community's sales. For each plan we keep the plan, its price, when it renews, and the renewal terms you agreed to and when.
• Giving money to a community fund (contributions) is not offered yet. When it is, a person who gives anonymously will be shown to other members and the owner without a name; disputes and legal process can pierce that anonymity, because Stripe and the law require it.
• Community owners who set up a community fund complete Stripe's own identity and bank verification on Stripe's pages. Stripe keeps that information; we keep only Stripe's account reference and whether setup is complete.
• Owners can also record cash received at the door or elsewhere. Those are bookkeeping notes; no money moves through Mixalyst.

Your device and notifications

• A push notification token for each phone or browser where you allow notifications, so we can send them. Notifications name the place and what happened ("3 new messages in Potluck Planning"); they never contain the text of a message.
• Your notification settings — mutes, quiet hours, what you have seen and read.

Kept only on your device (never sent to us)

• Message drafts you have not sent.
• On the phone app, events you mark available offline are saved in your phone's own secure storage, along with any photos waiting to upload.
• Your phone's calendars: if you turn it on, the phone app reads your phone's own calendars (read-only) to show them beside your community events. They are used only to draw your screen. They are never sent to us, never stored on our servers, and never written back to your phone. You can switch it off, or hide a calendar, at any time.
• Dictation: if you tap Dictate, your phone or browser's own speech recognition turns your words into text. Mixalyst never receives the audio. Apple or Google may process it under their own terms.

Error reports (diagnostics). When something goes wrong in the app, on the web or the phone, or on our servers, we collect a technical report so we can fix it:

• which screen it happened on, as a pattern such as "a community's event page" (the specific community, event or person is removed);
• the kind of error, its message with every value removed, and where in our code it happened;
• the app version, whether it was the web or phone app, the phone or computer operating system and its version;
• a random identifier for this installation of the app. It is not your account and is replaced with a new one every 30 days.

Each report is cleaned on your device before it is sent, and cleaned again when it reaches us. It never includes message text, names, email addresses, photos or links to them, or anything you typed. Reports are not linked to your account and are not used for tracking or advertising. We built this reporting ourselves; no outside analytics company receives it. It is stored with Cloudflare (see section 5).

Anonymous usage (product improvement). Unless you turn it off, the app also records which screens are opened and which steps of a task are finished (for example "opened the new-event page", "published an event", "saved an RSVP") and how long a step took, so we can see where people get stuck and whether a change made things easier. Each record carries only:

• the step's name and a few fixed choices from a list we define (such as "publish now" or "schedule");
• the screen, as a pattern with the specific community, event or person removed;
• the app version, web or phone app, and the same random installation identifier described above (replaced every 30 days);
• if we are comparing two versions of a screen, which version this installation was shown.

It never includes message text, names, email addresses, photos, anything you typed, or which community or event it was. It is not linked to your account and not used for tracking or advertising. Turn it off any time: on the web, Account → ⋯ → Anonymous usage; on the phone app, Menu → Anonymous usage. The switch applies to that device, and once it is off nothing more is sent from it.

What we don't collect

• No phone numbers, no device location, no address book, no advertising identifiers.
• No third-party analytics, tracking or crash-reporting tools are built into the app.
• Our hosting providers keep their own technical logs of requests to the service, which can include IP addresses, under their own retention rules. On our plans, Supabase keeps its request and database logs for 7 days, and Cloudflare keeps our servers' logs for 7 days. Cloudflare's privacy policy sets no fixed period for its own network logs; it keeps them as long as is consistent with its business purposes. Postmark keeps a copy of each email it sends for us, and its delivery record, for up to 45 days (its standard period), then deletes it.
• Our own server code is written not to log personal information: no request bodies, message text, email addresses, names or media links. The records it does keep (time, page address without its query string, response code, error text) are archived in storage we control and deleted automatically after 90 days.

3. How we use it

Only to run Mixalyst for you and your communities:

• to sign you in and keep your account secure;
• to show your community what its members share, live, as it happens;
• to send the invitations, notifications and emails you and your communities trigger;
• to process ticket sales, refunds, community funds and Mixalyst's plans;
• to keep the records the law, our payment processor or a release of liability requires;
• to answer you when you contact us;
• to find and fix errors in the app, using the error reports described in section 2;
• to see which parts of the app are hard to use and whether our changes help, using the anonymous usage records described in section 2 (unless you turn them off).

What we never do. We never sell your information or your community's. We never show ads or let advertisers use the app. We never build profiles of you for marketing. Mixalyst has no AI features. We never give your community's content to an AI model, and we never use it to build or train one. Some things must pass through the companies that deliver our email and payments, and some of those companies' own terms allow them to use that data to improve their services, which can include machine learning; section 5 names each one and what its terms say. These are founding commitments of the product, not settings that can be switched on later.

A community may choose, knowingly and as a group, to add an AI assistant as an ordinary member, in which case it sees what any member of that community sees — nothing more. Mixalyst itself never does this.

Your own device's features. Your phone or computer may have its own built-in features that work on what is on your screen or in your notifications — for example notification summaries, writing tools, translation, captions or dictation from Apple or Google. Those belong to your device maker and run under its terms. Mixalyst does not send them anything and cannot switch them off for you; you control them in your device's settings.

4. Who can see what

• Your community. What you share in a community is visible to that community's members, as its settings allow. Some things are more limited: organizers and owners see more of the roster and the answers you give to required questions; owners can see every board but never your direct messages.
• People outside a community see nothing, except what an invitation deliberately shows the person it was sent to.
• Your communities don't see each other. Nobody in one community can see which other communities you belong to.
• Mixalyst staff. Access to community data is locked down at the database, for everyone. We do not browse communities to provide support. When a member reports something (a message, a photo or video, or a member), Mixalyst's reviewers see that one reported item — a copy of it as it stood when reported, kept with the report — plus who reported it and why, and nothing else in the community. A copyright notice we receive is handled the same way. The community's owner is told a report was made, never by whom. Besides reports, we look at community data only in these cases, and only as far as each needs: a valid legal demand such as a court order or subpoena (we tell the people affected unless the law or someone's safety stops us); investigating a security problem; and preventing serious harm to someone. We keep report records, and the log of what we did about each one, so we can show how it was handled.

5. Services that help us run Mixalyst

We use a small number of companies to host and deliver the service. We give each one only what its job needs (the table below). Each handles that information to provide its service, under its own terms and privacy policy.

What these companies say about AI.

• Supabase: we have turned off its AI assistant for our whole account, so it can't read our data.
• Cloudflare states that it does not use its customers' content to train AI models without the customer's consent. We use none of its AI services.
• Postmark's terms allow it to use the emails it sends for its customers to train and improve its own email service.
• Stripe's privacy policy says it uses payment information, including to train its own models that protect against fraud.
• Google Firebase Cloud Messaging's privacy information says it uses its service data to maintain and improve Firebase.

These summarize each company's own published terms as of the date at the top of this policy; each company can change its terms.

Link previews. When a message includes a web link, our server fetches that page to show a preview. The website sees our server, not you.

We share information outside these companies only: when the law requires it (for example a valid court order, or a report of child sexual abuse material to the National Center for Missing & Exploited Children); when it is needed to protect someone from serious harm; or if Mixalyst's business is sold or merged, in which case this policy keeps applying to the information. We never sell it.

6. How long we keep it, and deleting it

Delete your account from inside the app: Account → Delete account. You confirm with a fresh sign-in code and by typing "delete my account". Then:

• your name and photo are removed, your nicknames and community profile answers are deleted, and everywhere you appeared you are shown as "Former Member";
• you may choose to remove all the photos, videos and audio you shared, in every community, in the same step;
• your sign-in is deleted, every session is signed out, and your email address is freed.

What stays: messages, RSVPs, sign-ups and media you chose not to remove stay with the community, attributed to "Former Member", so its conversations and records still make sense. If you are the only owner of a community, you must first add another owner or close the community. Payment records and signed releases are not deleted with your account; they are kept for the periods below, because tax, accounting and legal rules require it.

Error reports and anonymous usage records are kept for about three months, then deleted automatically. They are not linked to your account, so deleting your account does not need to delete them, and we could not find yours if asked.

Leave a community. Your community nickname and profile answers there are deleted. You can also remove your shared photos and choose to be shown as "Former Member". Your messages stay so conversations make sense.

Delete a message or a photo. You can delete your own messages, and remove your own photos, videos and audio, at any time. They disappear for everyone immediately, and the stored file is erased from storage 30 days later (a mistake can be undone in the app until then). The one exception: a file reported as child sexual abuse material is preserved, as US law requires, for the authorities.

Closing (disbanding) a community. When an owner disbands a community, every member loses access at once. For 30 days an owner can still download a copy of the community's basic records (the community's details, its events, its board names, and the member list as names and roles — no messages, photos or email addresses) or cancel the disband, which brings it back for everyone. After 30 days the community's messages, photos and other files, events, member list and every other record are erased, except the two kinds of records below. An owner can also choose Erase now to erase it straight away instead of waiting the 30 days, once nothing is owed.

Payment records (tickets, payouts, refunds, plan charges) are kept for seven years after the year of the payment, for tax and accounting. Signed releases of liability are kept for at least seven years after the event, so a release can be shown if a claim is made. When a closed community is erased, its payment records are kept de-identified — the person each record belonged to is replaced by an anonymous number that leads to no one — while a signed release is kept as it was signed, because recording who signed it is its purpose.

Your agreement to the Terms — which version of the Terms of Service you agreed to, and when — is kept after you delete your account, with your name and email gone from it, as proof that you accepted them if a dispute arises; like payment records, it is kept for seven years.

Emails that bounce or are marked as spam are added to a do-not-send list so we don't keep emailing them. People who opt out of a community's invitations are remembered by email address so that community can't invite them again (you can undo your own opt-out from your account).

7. Your choices and rights

You can, in the app:

• see and edit your profile, nicknames and answers;
• turn notifications off, mute any conversation, and set quiet hours;
• ignore another member, which stops their direct messages and notifications to you;
• remove your own messages and media, leave a community, or delete your account;
• turn off anonymous usage records (Account → ⋯ → Anonymous usage on the web; Menu → Anonymous usage on the phone app). It is on by default.

You can also email [email protected] to ask for a copy of your information, to correct it, or to delete it. We will answer within the time the law requires, and within 45 days. To protect you, we'll ask you to send the request from the email address on your account, or to confirm it with a sign-in code.

Do Not Track. Mixalyst does not track you across other sites, so it does not respond differently to browser "Do Not Track" signals.

California residents. California law (the CCPA, as amended by the CPRA) gives you the right to know what personal information we collect, to get a copy, to correct it, to delete it, and to opt out of its "sale" or "sharing" for advertising. We do not sell or share personal information in either sense, and we do not use sensitive personal information to infer anything about you. We will not treat you differently for using these rights. (Today the CCPA applies only to much larger businesses than Mixalyst; we honor these rights anyway, for everyone.)

Outside the United States. Mixalyst is run from the United States, and our providers store data there. The Mixalyst app is offered in the United States only. If you use the website from another country, your information is sent to and kept in the United States.

8. Children

Mixalyst accounts are for adults: you must be 18 or older. When you sign up we ask the year you were born. If you are under 18 we don't create an account, and we keep nothing beyond what is needed to stop an immediate retry: a one-way scrambled fingerprint of the email address (not the address itself) and the time, deleted after 24 hours. We never store the year you give us. If you believe someone under 18 has an account, tell us at [email protected] and we will delete it.

Children still come to events, so adults sometimes enter limited information about them: how many children are coming, or a minor's name when a parent or guardian signs a release for them. That information is entered by the adult, never by the child, is used only for that event, and is visible only to the people who run it.

9. Security

All traffic to Mixalyst is encrypted. Access to community data is enforced at the database for every request, so a mistake elsewhere in the app cannot show your data to someone who isn't in your community. Photos and videos are served only through our own gate, which checks your membership on every request. On phones, your sign-in is kept in the operating system's secure storage. Our providers encrypt the data they store for us. No system is perfectly secure; if a breach affects your information, we will tell you by email, as the law requires.

10. Changes

If we change this policy in a way that matters, we will tell you in the app or by email before the change takes effect.

11. Contact

TBO Soft LLC — [email protected]