Privacy Policy

JoinUp, by Test Camp Inc. · Last updated: November 9, 2026

JoinUp is an app for organizing spontaneous hangouts ("Joinups") with people you know. This policy explains what information we collect, why we collect it, who we share it with, and how you can delete it. We have tried to keep it short and honest.

1. Who we are

JoinUp is owned and operated by Test Camp Inc. ("we", "us"). We are the data controller for the information described in this policy. You can contact us using the details in the Contact section below.

2. What we collect

Phone number

JoinUp accounts are verified by phone number. When you sign up or sign in, we send a one-time SMS code to the number you provide through our SMS provider. Your phone number is stored with your account and is used for sign-in, for account security, and so people you know can find you if they already have your number. That matching uses a one-way code of your number made on our servers, not the number itself. We do not use your phone number for marketing.

Email address

You can add an email address to your account, or a school email to join your school's community. We confirm it with a code we send there, and keep it with your account. If your school isn't on our list and you tell us, we keep the school email domain you entered, with your account, so we can add the school.

Profile information

Your editable display name, your two initials, a profile photo if you choose one, and an About line if you write one. Your name and initials are shown to other JoinUp users who come across you in the app: for example your contacts, members of your Groups, people in Joinups you join, and someone who looks up your number. Who can see your profile photo is your choice in Settings; it starts as Everyone. Who can see your About line is also your choice: everyone, your contacts, your contacts except people you pick, or nobody. It starts as nobody, and even when you open it up, only people you share a chat, a Group or a Joinup with can see it. Where your photo is missing or hidden from someone, they see your initials instead.

Date of birth

We ask for your date of birth when you set up your account, or the next time you open the app if your account is older than that step, because JoinUp is for adults. We keep it on your account to apply that rule; it is never shown to other people, and it is deleted when you delete your account.

Gender

You can tell us your gender when you set up your account. Answering is optional. We keep your answer on your account and do not use it for anything today; it is not shown to other people, and it is deleted when you delete your account.

Location

When you create a Joinup you pick a place for it; that place, including its map coordinates when available, is stored with the event and shown to the people who can see that Joinup. On a plan that people outside your contacts can find, those people see only the general area until you approve them, unless you switch approval off. If you grant the app location permission, JoinUp uses your device's location while the app is open to name your area and show Joinups near you, to fill in your current address when you create a Joinup, and to search for venues and addresses near you. Before your position goes to a place-search or geocoding service, it is rounded to roughly 11 metres. JoinUp's own address search gets your exact position only to sort results by distance, and does not keep it. If you switch on Tell me when something forms near me in Settings, we keep your area's name, its map point and the distance you chose on our servers so we can tell you when a Joinup you can join forms nearby. If your area was set from your location, that map point is your phone's position, not rounded. Once saved it stays, even if you turn the alert off, until you delete your account. If you use your current location as a Joinup's place, the Joinup's map point can come from that position. Location permission is optional: if you decline, the app keeps working and you can choose an area or type an address yourself.

Arrival sharing. For a Joinup you are confirmed for, JoinUp shares that you are on your way unless you turn it off. While it is on, your position — rounded the same way — is written to our servers. While you share your arrival for a Joinup, people confirmed for that Joinup and the one JoinUp contact you choose for that plan can see your shared location. You can stop sharing at any time. Your chosen contact can view your arrival and the destination you can see for that plan while access is active. They cannot see the plan's chat, arrival notes or other people's locations through this feature. Changing or removing your contact, leaving the plan, the plan ending, or a block ends their access. Removing that person from your JoinUp contacts stops their access while they are not your contact. Your contact's app receives your name, your initials, your photo if your visibility choice allows it, the plan's title, when sharing opens and closes, and whether you are sharing. While arrival sharing is open, our servers also make the destination as you can see it available to that contact, whether or not you are sharing, and your location while you share. An arrival notification contains only identifiers needed to open JoinUp. It does not include your location, destination address, plan title or name. Opening it checks access again. Sharing stops when the Joinup ends or when you stop it. In the live arrival table, only one position is kept per person per plan rather than a history, and each position expires by itself; section 7 explains the separate database copies. It updates only while the app is open. It is on by default. After a one-time notice, sharing starts by itself when you open a plan you are confirmed for once its sharing window opens (an hour before the start, unless the host sets a different time). Your phone asks for location permission the first time. You can turn it off for one plan, or for every plan in Settings.

You can also post a short arrival status, such as on my way, running late or here, with an optional travel mode, expected arrival time or short note, and the host or a co-host can mark you as arrived; people confirmed for the plan see these while arrival sharing is open.

Arrival counts for businesses are not switched on yet. When they are, an arrival at a place during a plan will be counted for the business there, and the business will see only a number of different people per day and nothing else: no name, no face, no list, and no day when too few different people arrived.

JoinUp does not track your location in the background, and never asks for background location permission.

Content you create

Joinups you post, the Joinups you join, group and community memberships, messages you send in a Joinup's chat or in a conversation, the photos, videos, voice messages, files, polls, places and contacts you send in a chat, your reactions and poll votes, the stories you post and who has viewed them, and reports you file about someone or something they posted. Chat messages are visible to the other participants of that chat. In your conversations we also record when your app received a chat and when you read it. When you play someone's voice message, we record that you played it. The sender can see this in Message info. In a community chat they see only how many people got, read or played the message, and in a Joinup chat only how many played a voice message. In one-to-one chats you can turn off Read receipts in Settings. While either of you has it off, neither of you sees when the other read a message, and a voice message played in that chat is not recorded as played. Both of you still see when a message reached the other person's phone. In group and community chats they are always shared. We keep a record that a voice message was played for no more than 30 days. Deleting your account removes your receipts. When you join a Joinup's chat, your view of its history starts from the point you joined. Messages and photos are protected in transit and by access rules enforced on our servers, but they are not end-to-end encrypted — our servers can read them. Treat a JoinUp chat like any ordinary group chat.

To keep recent conversations readable when you reconnect, JoinUp keeps a display copy on this device of up to 50 settled messages in each of up to 20 one-to-one, group, community and Joinup chats in total. Group and community copies come from chats in your own inbox. This display copy excludes media files, view-once messages, disappearing messages unless kept, and messages not yet sent; it can show a photo marker or a voice message's duration without the media. It is shown as saved data, with Send disabled until the message history refreshes. History last updated more than seven days ago is not restored. A confirmed loss of access, including leaving a chat, removes its saved copy when the app learns of it. Signing out, changing accounts or deleting your account clears these copies.

If you tap Back up chats, JoinUp keeps one extra copy of the newest conversation text you can currently read in our existing hosted database, linked to your JoinUp account. For each message it includes the message and conversation identifiers, whether it was sent anonymously, the sender shown in the conversation or their anonymous alias, the message kind (text), the text and when it was sent; for the backup, its identifier, creation time, expiry and whether older messages were left out. We use it to restore readable text to the same account when you are online. This server copy is readable by JoinUp and is not end-to-end encrypted. This feature uses our existing database host and does not send a new backup to your iCloud or Google account.

A text backup keeps your newest readable messages, up to 10,000 messages and 16 MiB. When there is more, the oldest messages are left out and the app says so. If there is no text you can back up, the new backup is refused and any previous backup is kept. Joinup chat, photos, videos, voice recordings, files and other attachments, disappearing messages unless kept, view-once content and chats with Advanced chat privacy enabled are not included. A backup does not restore messages or conversations your account can no longer read, including content removed by moderation, messages you can no longer read because of a block, or conversations you have left or lost access to. Such an access change can make the whole backup unavailable; the app then says the backup can no longer be restored, and the stored copy still follows the replacement, deletion and expiry rules below. If anyone edits, unsends or deletes a saved message, or someone stops keeping it, the whole backup is erased. Turning on Advanced chat privacy in a saved chat also erases the backup. If you use Delete for me on a saved message or clear a saved chat, your backup is erased too.

This optional server text backup is separate from the saved history on your phone. Each belongs to one account. Restored text must still pass the server's current access checks. The phone's saved history is cleared on sign-out, account changes and account deletion as described above.

The prayer and gratitude feed is available only in founder test-mode communities today. If you post there, we store the text and your account as its author, even though other members see a community nickname. Prayer requests can reveal religious beliefs.

If you review a place, your stars, your words, any photos and the date are shown to other signed-in JoinUp users who open that place, once enough different people have reviewed it. People you have blocked, and people who have blocked you, do not see it. Our servers also make your display name and initials available with each review you publish, together with a list of your other published reviews and the places and dates they are for.

Contacts

You can add people on JoinUp by typing their phone number. You can also let JoinUp look through your phone's contacts to find people you already know — that happens only when you ask for it, and only if you grant the contacts permission. When you do, JoinUp reads the phone numbers in your contacts, turns each one into a one-way code on your phone, and sends those codes to our servers to check which ones have a JoinUp account. The names you have saved never leave your phone. You can decline, and JoinUp works without it. Sending a contact in a chat is different: the name and the one number you pick go into that chat. If you give one of your JoinUp contacts a name of your own inside JoinUp, that name is kept on our servers with your account and is shown only to you.

Who can add you to Joinups

Settings offers Everyone or My contacts. Where My contacts except… is available, you can choose contacts who cannot add you directly or send you a named invitation, including a Group Joinup notification. We store that exclusion list with your account. Choosing Everyone or My contacts clears it. These exclusions do not affect broadcast lists. Existing memberships and history stay as they are. Invitations sent before an exclusion stay in the host’s Invited or Snoozed list, and you can still act on them. Only attempts made after the exclusion are suppressed. Lifting an exclusion makes stored suppressed phone invitations available immediately. Deleting your account removes your list and your appearance in other people's exclusion lists. We also keep private records of suppressed invitation attempts: which Joinup and who tried to invite whom. Named-attempt records have no time limit; they remain until the Joinup or either account is deleted. Phone-attempt records are also removed when lifting the exclusion makes that invitation available, or when its stored phone target is deleted.

Last seen and online

While your app is open, we keep the time you were last on, so people can see your last seen time or that you are online now. Who can see it is your choice in Settings: Everyone, My contacts (people you have accepted as JoinUp friends) or Nobody. It starts as My contacts. You can separately let everyone see when you are online. If you hide your last seen, you cannot see anyone else’s. We also keep a note of each month in which you opened the app, so we can count how many people use JoinUp each month; the count we look at has no names in it. Deleting your account removes your last seen time and these notes.

Device and technical data

If you turn on push notifications, we store a notification address for your phone. With it we keep your phone's time zone, your quiet hours and sound choices, the app version it runs, and a random ID the app makes for that install, so notifications arrive at the right time with the right sound. On iPhone, while you are signed in, we also store a separate call-ringing address for your phone so incoming calls can ring, even if notifications are off. It is removed when you sign out or delete your account. The notification itself — which can include a sender's or caller's first name, the first 80 characters of a message or photo caption, and the name, place or new time of the Joinup, Group, community or reviewed venue it is about — passes through notification delivery services on its way to your phone. We also keep basic technical logs (such as timestamps and error information) needed to operate and secure the service; a record of each phone you are signed in on, with when it signed in, when it was last active, and its device description, which you can see and sign out in Settings → Devices; and, to stop abuse of the sign-in code, short-lived one-way-scrambled forms of the phone number and network address a sign-in request came from.

Photos you share

If you choose a photo or video to send in a chat or post as a story, or a photo to use as your profile photo, a group photo, a Joinup cover or a Joinup recap, or to set as a community cover, it is uploaded to our servers so the people meant to see it can see it. We open your camera or photo library only when you tap to add a photo or video, and we take only the ones you pick, up to 10 at a time. Photos are stored privately: a chat or community photo can be opened only by someone signed in who is allowed to see a chat or community it was sent or forwarded to, and your profile photo is shown to the people who see your profile, subject to your photo visibility choice. Unless Advanced chat privacy is on for the chat it is in, people in a chat can forward a message or photo you sent there to other chats, up to five at a time, where it is marked Forwarded, and people in those chats can forward it on in the same way. A forwarded copy stays in those chats even if you later delete your message, and the photo is kept until the last forwarded copy is gone. We do not use your photos for anything else, except that a photo someone reports can be reviewed by our safety team and, where the law requires, reported to the National Center for Missing & Exploited Children.

You can also post a story: words, a photo, a video or a Joinup card. For 24 hours it is shown to the friends in the audience you choose and to the people or groups you mention. After that only you can still see it, until you delete it or your account. When someone opens your story we record who it was and when. While the story is up, only you can see that list, and a person is left off it if either of you has Read receipts off. Sharing is off unless you turn it on; if you do, people who can see your story can reshare it to their own audience.

Calls

JoinUp can place one-to-one voice and video calls between people who already have a chat with each other, and group voice and video calls among the members of a group chat. During a call we use your microphone so the other person can hear you. We also use it when you record a voice message or a video. We use your camera only when you take a photo, record a video, scan a friend's JoinUp code or turn on video in a call, and we do not record or store the call. We keep a record of each call: who called whom, or for a group call who started it and who joined and left, and when; whether it was voice or video; when it was answered and ended; and whether it used the relay and an estimate of how much data it used. The people on the call can see it in their call list, and we use it to keep call costs in check. Removing a call from your list hides it only for you. In a group call, everyone's audio and video always go through a forwarding server, which sends each person's stream on to the others. In a one-to-one call, the audio and video go through a relay service if the two phones cannot connect directly, or every time if you turn on Always relay calls. JoinUp does not record or store call audio or video. The forwarding and relay providers process call media and technical information under their own privacy practices. A one-to-one call first tries to connect the two phones directly, so unless you turn on Always relay calls, the other person's phone receives your network (IP) address, even if the call then goes through the relay. To prevent this, turn on Always relay calls (Settings, then Storage and data, then Calls): every one-to-one call then goes through the relay, and a call cannot connect if the relay is unavailable.

How you use the app

JoinUp is built to keep a record of which Joinups and places it showed you, where they sat on the screen, and whether you opened or joined them, so it can get better at choosing what to show you. That record is switched off today, so nothing is kept. If we switch it on, we will update this page first. It will hold no message text and no trail of where you have been, and it will not be used to follow you into other apps or websites.

We keep a record of the places you open and save, the Joinups you save, the Joinups you create, join, leave and turn up to, and when you answer an invitation. We use it to understand how the app is used. These records are set to be removed after 400 days, but removal is manual today, so they can stay longer. If you delete your account, these entries stay as counts with no account attached. Businesses never see your personal record.

AI assistant

If you use the AI assistant, what you type in that conversation goes to the AI provider that writes the answer. AI suggestions that use the details of a Joinup or place, including how far you are from it, are not switched on yet; we will update this page before they are. We do not save a transcript of your questions or the answers on our servers. We keep per-account question counts and technical usage records, including the model, route, token use and cost, to enforce limits and account for use. The AI provider processes the conversation under its own privacy practices.

Identity verification

JoinUp does not ask anyone to verify their identity yet, and no check runs today. When verification is turned on, JoinUp will ask mainly where people you don't know can reach you: before you host or join a plan strangers can find, when someone outside your contacts asks to join your plan, or when you ask to join a host who doesn't have you as a contact. Plans among your contacts never need it, unless the host of a plan chooses to admit only verified people; then anyone new joining that plan will be asked to verify. We will update this section before verification starts. The first check will be a short live selfie. It will run on a cloud face-recognition service in JoinUp's own cloud account. Our server will hold the selfie only while the check runs, compare it with the photos on your profile, and delete it when the check finishes; it will never be stored. A government ID check will be asked for only in some cases, or when you choose it from your profile, and a separate identity-verification provider will run it; the ID photos and the selfie taken with it will go from your phone to that provider, not to JoinUp.

For the government ID check, this is how it will work when switched on: the provider will confirm that a live person took the selfie, that the document is genuine and matches the selfie, and that you are 18 or over. Where the check includes screening, the provider will also check the name and date of birth on the document against sanctions and warning lists; that screening is not a criminal-record check. JoinUp will not receive or store the selfie, document images or details read from the document for this check. What JoinUp keeps is the outcome of each step and when it happened, a reference number for the check, which kind of check was run, the verified badge on your profile if you earned one, a short-lived token that brings you back into JoinUp when the check finishes, and a count of the checks started on your account. When you delete your account, we will remove those results from your account, ask the provider to delete everything it holds from your check, and keep only a note that the deletion was requested and when, so the check cannot be restored later. Even while your account stays open, the provider will keep what it holds from a check for no more than 2 years after the check. If an account is banned for serious harm, JoinUp will keep a scrambled code made from the ID details, which can't be turned back into them, to stop the person from opening a new account, and delete it when the ban ends; the provider will delete everything it holds from the check as usual. Today JoinUp is offered in the United States. If we open JoinUp in another country, we will update this section before anyone outside the United States is asked to verify. The ID check will open on the provider's own page in your phone's browser, not inside JoinUp, and your selfie and document will go to the provider from there. There is no charge to you for the check.

Business pages

If you claim a business page on JoinUp or help manage one, we keep a record of each claim: who made it, when, the verification method used, and the evidence given for it, which today is the result of a code we call or text to a phone number already listed for the business. When you start a claim, we also keep the business name you enter and which version of the JoinUp Business Terms you accepted and when, and we copy the confirmed email address on your JoinUp account onto the business's record as its contact address. That copy stays with the business's record, including after you delete your JoinUp account. We also keep a record of which JoinUp accounts manage each page. We use these records to decide, review and protect claims, to resolve disagreements about who manages a page, and to enforce the JoinUp Business Terms, and we keep them while the claim stands and afterwards for as long as those purposes or the law require.

3. What we do not do

• No ad network. JoinUp contains no advertising SDK, and nothing you do in the app is measured for an advertiser.
• No third-party tracking. We do not share your data with data brokers or use it to profile you across other apps or websites.
• No background location tracking. Location is used only while you are using the app, and only if you allow it.

4. How we use your information

• To create and secure your account (phone verification).
• To run the product: showing your profile to the people you interact with, delivering invites, chats, and notifications, and showing nearby Joinups.
• To keep the community safe: reviewing reports of abusive content or behavior and enforcing our Terms of Service.
• To operate, debug, and improve the service.
• To comply with legal obligations.

5. Anonymous Joinups

Some Joinups can be posted anonymously. While an anonymous Joinup is filling up, your name is left off its ping and invite, and other people see how many are in, not whose idea it was. Once it locks in (reaches the number of people it needs), people who can see the Joinup are shown that you created it, and that stays true even if someone later drops out.

For a Joinup, anonymity covers who created it. It does not hide the Joinup from the people it was sent to, but an anonymous Joinup is kept off the map for everyone except its creator, the people going and the people invited. While it is still filling up, the people in it see how many are in but not who, except that anyone who writes in its chat is shown there by name. The creator can still read the roster while it fills. Once it locks in, the people who can see it are shown who created it, and once enough people are confirmed, everyone confirmed is a visible member of it.

A community's owner or admins can also turn on anonymous chat for that community. Other members, and the community's admins, then see a nickname such as 'Brave Otter' above your messages instead of your name, and the nickname stays the same in that community's chat. JoinUp still keeps who wrote each message, so that reports and bans still work. Messages are not end-to-end encrypted, and anonymous messages stay visible to someone who has blocked you, because hiding them would show who wrote them.

6. Who we share information with

Depending on the feature you use, JoinUp may share information with the following categories of recipients for the purposes described:

• Cloud hosting, storage and backend providers — receive account information, content, files and technical request data to store and process JoinUp data, run backend functions and keep the service available.
• Phone-verification providers — receive your phone number and the verification information needed to send and check sign-in codes.
• Notification and app-update providers — receive device and app information and, for notifications, the message content needed to deliver notifications and app updates.
• Place-search, mapping and geocoding providers — receive the place you type, the area you search and related map or venue requests to return place names, addresses, venue results, maps and photos. Searches normally use Google through our servers, with OpenStreetMap services as a fallback; the fallback receives your query and your phone's network (IP) address directly. The OpenStreetMap Foundation policy covers Nominatim and describes request logs and search-query analysis for operations, research and improving map data. The Overpass server has its own privacy policy. Clearing searches on your phone does not clear provider logs. Your phone's geocoding service can also receive location requests. When available, an arrival time estimate sends your route's start and destination points and travel mode to Mapbox through our servers. The native Google Maps SDK also collects usage, identifiers, crash and performance data under Google's privacy practices. When your device location is sent to these providers for a venue search, or to name your area or the address you are at, it is rounded to roughly 11 metres first.
• Calling and connectivity providers — receive connection information and the call audio and video in transit: always for group calls, and for one-to-one calls when a relay is needed or you have turned on Always relay calls. JoinUp does not record or store call audio or video. Provider handling of call media and technical information follows their own privacy practices; JoinUp keeps call records as described in sections 2 and 7.
• Content-processing providers — receive the JoinUp content selected for automated processing to enrich it for app features.
• AI providers — receive what you type in your conversation with the AI assistant, to write the answer. When switched on, report triage sends the reported content’s text, the report reason and any note, and the reported account’s moderation history to an AI provider for review. When used, support tools can also send support text to an AI provider. Automated checks of business replies and AI suggestions using details of a Joinup or place are not switched on yet.
• Email delivery providers — receive your email address and the email we send you, to deliver it.
• Website, legal-page and invite-link hosting providers — receive the page or link request and related technical information to serve JoinUp pages and invitations.
• Calendar, messaging and other destinations you choose — receive the event, file, link or message information you direct JoinUp to send or open so they can perform the action you requested. A calendar link can include the Joinup title and start and end time; a calendar file you choose to share can also include its place.
• Link-preview websites — when Link previews is on and supported on your phone, typing a URL in a chat can contact that website, the site holding its preview image, and up to two sites either of them redirects to before you press Send. Each receives the address requested and your phone's network (IP) address, without cookies or account credentials. Link previews starts on; you can turn it off in Privacy settings. Websites handle these requests under their own privacy practices.
• Security, identity-verification and diagnostic providers — when one of these features is used, receive the account, identity, technical, usage or error information needed to prevent abuse, verify identity, secure JoinUp and diagnose problems.
• Businesses on JoinUp — when you book with a business through JoinUp, that business sees your booking and the booking name JoinUp shows it. When you review a place, the business that manages it sees your stars, words and date, and can reply. Your review is also shown to other JoinUp users, as described in section 2.

Service providers process information for the purposes described above. Destinations you choose process what you send under their own terms and privacy practices. We may also disclose personal information when required by law or when reasonably necessary to protect the rights, safety, or security of our users or the service.

A one-to-one call first tries to connect the two phones directly, so unless you turn on Always relay calls, the other person's phone receives your network (IP) address, even if the call then goes through the relay. Turn on Always relay calls in Settings to send every one-to-one call through the relay instead.

7. Retention and account deletion

We keep your information while your account exists, with shorter periods for some records and copies that stay after deletion, as described here. A note that someone played your voice message is kept for up to 30 days, or less if the message disappears sooner. An arrival position or arrival note is deleted when it expires, when the Joinup stops sharing arrivals, or when you are no longer going. Notifications waiting to be delivered, which can include the first line of a message, are deleted 30 days after they are sent or given up on. The connection details used to set up a call are deleted when the call ends; the record that the call happened stays in your call list. You can delete your account directly inside the app. There are two exceptions: an open legal or safety matter about your account, when the app tells you it can’t be deleted yet, and an account refused for age (section 9). In both cases, contact us.

Not everything is removed. Some information is retained after deletion — for example, records the law requires us to keep, and records needed to handle safety reports about conduct that occurred before deletion.

JoinUp does not ask about marketing email yet, so it keeps no marketing-email answers; we will update this policy before it does.

We keep a record that a staff invitation was issued and when; after your account is erased nobody is named in it, and it is deleted twelve months after its last event.

Mail you send us is kept for as long as we need it to help you, settle disputes and meet safety and legal duties. When you delete your account, our support-mail records from the email address confirmed on your account or your verified school email are removed, except mail about an open safety, legal or money matter, which is kept until that matter is handled. Originals in our inbox are removed by hand. Ask us to remove mail you sent from any other address.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. The in-app deletion flow covers the most important of these directly. For anything else, contact us using the details below and we will respond within the timelines the applicable law requires.

9. Children

JoinUp is not directed at children. You must be at least 18 years old to use JoinUp, and signup asks for your date of birth to check it. If you give a date of birth under 18, setup stops. You can correct a mistyped date once; if the date is under 18 again, the account can't be used. We don't keep that date. The account itself is not deleted automatically: it keeps the phone number you signed in with and a note that it was refused for age, plus anything it already held if it was set up before we asked for a date of birth. Contact us and we will delete it. If we learn in any other way that an account belongs to someone under 18, we will delete it.

10. Security

Data is encrypted in transit, access to production systems is restricted, and clients can only read data through access rules enforced server-side. No system is perfectly secure, but we design so that the app can only ever see what it is supposed to see.

11. Changes to this policy

If we make material changes to this policy, we will update this page and change the date at the top. Continued use of JoinUp after a change means you accept the updated policy.

12. Contact

Questions about privacy, or requests about your data: