Privacy

Pull Up has two kinds of people: creators, who run votes, and fans, who vote, RSVP or follow a city.

• When you vote for a creator, that creator decides what happens with your details: they are the controller (GDPR) or responsible party (POPIA). Pull Up processes your details for them, as their processor or operator, under our data processing terms.
• Pull Up is the controller for creators' own accounts, for “Follow a city” on Discover, and for the security and anti-fraud data that keeps votes honest.

“We” means Pull Up, Pull Up, 20 Bergsig Ave, Paarl, 7646, South Africa. Questions about this policy: privacy@pullupnext.com.

• Your contact: an email address or a WhatsApp number. It's how one person gets one vote, and how we confirm your vote. It's needed to vote, whether or not you want messages.
• Your city and your vote, and the first name you give, if any. Your first name only shows in the live feed if you leave “show my first name” on.
• Your choices: whether you asked to hear from the creator by email or WhatsApp, the exact wording you agreed to, its version and when. These boxes start unticked. A vote counts without them.
• Verification: whether you tapped the link in the confirmation email (links last 72 hours).
• RSVPs: whether you're going to an announced event (the creator only sees counts on the public page).
• Check-ins: if the host uses door check-in and you scan their code at the event, that you were there and when. It builds your badge with that creator; the public page shows only how many have checked in.
• Where a vote came from: the platform link it was shared on (for example Instagram or WhatsApp).
• A hashed IP address. We never store your IP address. We store a one-way hash of it, salted with a value that changes every day, to spot vote flooding and enforce rate limits. Your approximate location from your IP is used once, to suggest your city, and isn't stored.

You must be 16 or older to vote.

When you follow a city (“Follow Cape Town”), we keep your email address, the city, when you agreed and the wording you agreed to, and a hashed IP address. You get one email to confirm. Once confirmed, we email you when any creator announces a pull up in or near that city. Every alert has a one-click unfollow. Creators never see these addresses.

While Pull Up is in its trial, creators join a waitlist before they can make a page. We keep what you tell us (your name, email, the social profile your fans know, and the link, category, city and note if you add them) and a hashed IP address, to decide who to invite and to send you your invite. You get one email confirming you're on the list, and your invite when it's your turn; nothing else. Only the Pull Up team sees the list.

There's no account to make. On My Pull Up you enter your email and we send you a link; tapping it signs you in on that device, and so do the links in our emails (locking in a vote, or “I'm coming” in an announcement). The page brings together what each creator's list holds under that email, your votes, RSVPs, check-ins and badges, and shows it only to you. Creators still see only their own list, never another creator's. From the page you can switch a creator's emails on or off, or delete your data from their list. We only email a sign-in link to an address that already has something on Pull Up.

• Your sign-in email (and your Google account's email and name, if you sign in with Google).
• Your public profile: handle, display name, photo, bio, category, social links and home city.
• Your votes, events and messages, and how they performed (deliveries, opens, clicks).
• For Pro, your subscription status from Paddle, our payment provider. Paddle collects and stores your card or other payment details; we never see them.
• How you use the dashboard (for example which features you open), tied to your user ID, never your email.

• Counting votes, confirming them and stopping fake ones: to run the vote you took part in, and our legitimate interest in keeping results honest.
• Sending the creator's announcements to you: only if you ticked the box for that channel (your consent). Messages come from Pull Up on the creator's behalf.
• City alerts from Discover: your consent, confirmed by email.
• The creator waitlist: you asked to join it, and we use it only to invite you.
• Running creators' accounts and Pro subscriptions: our contract with the creator.
• Improving Pull Up: aggregate product analytics, our legitimate interest. Fan pages send no analytics cookies or scripts; their page-view events are recorded on our servers without identifying you.

We don't sell personal data, and we don't use it for advertising.

Every email has an unsubscribe link at the bottom, and works with your mail app's own unsubscribe button. Unsubscribing from one creator doesn't affect others. “Stop all Pull Up emails” stops every creator's messages to that address. WhatsApp messages (when they launch) stop when you reply STOP.

A creator can message you at most 3 times in any 7 days through Pull Up, and never sends you the same announcement twice: Pull Up holds back anything more.

Addresses that bounce, complain or ask us to stop all emails go on a suppression list so they're never messaged again.

The creator you voted for sees your contact details, city, first name, consent choices, verification, RSVP and check-in status in their dashboard, and can export them. Our terms only let creators use them for what you agreed to: hearing about their pull ups.

Service providers who run parts of Pull Up for us, under contracts that require them to protect your data and use it only for us:

We may also disclose data when the law requires it, or to protect people from fraud or harm.

Our database is in the United States. If you're in South Africa, the EU, the UK or elsewhere, your data is transferred there under safeguards such as the European Commission's Standard Contractual Clauses in our providers' data processing agreements, and POPIA's rules on cross-border transfers.

• Fans who didn't verify their vote and didn't ask for messages are deleted 90 days after the vote closes.
• Other fan records stay until you delete them (below), the creator deletes them, or the creator deletes their account.
• The suppression list keeps a bare address so we keep honouring “stop”.
• Hashed IP addresses can't be linked across days, because the salt changes daily.
• City follows stay until you unfollow.
• Waitlist entries stay until you join, ask us to remove you, or the trial ends and the list is no longer needed.
• Creator accounts stay until the creator deletes them. Paddle keeps billing records for as long as tax law requires.

You can ask to see, correct or delete your data, object to how we use it, or withdraw your consent at any time. The quickest way for fans: “Delete my data” on the unsubscribe page (the link at the bottom of any email) removes your details, votes, RSVPs and check-ins from that creator's list in one tap.

For anything else, email privacy@pullupnext.com. If your request is about a creator's list, we'll pass it to them and help them answer. You can also complain to a regulator: in South Africa the Information Regulator, in the EU your national data protection authority, in the UK the ICO.

• Fans: a signed cookie remembers your vote on that vote page for 180 days, so you can see or change it, and another remembers your RSVP. Scanning a door check-in code sets one more for 30 minutes, so you can finish checking in, and signing in to My Pull Up sets one that names your email for 60 days (signing out removes it). All are needed for the page to work. No analytics or advertising cookies.
• Creators: sign-in cookies keep you logged in to the dashboard, and a short-lived cookie holds the handle you're claiming during sign-up.
• Bot checks (Cloudflare Turnstile) run when you submit a form and don't set tracking cookies.
• Street maps (for pinning a place in the vote builder, and on a vote between places when you tap “Show street map”) load their tiles from OpenFreeMap, which sees your IP address like any website does and sets no cookies. Nothing loads them until then.

Data is encrypted in transit, access to every table is restricted row by row, secret keys never leave our servers, cookies are signed, and forms are protected against bots and abuse. No system is perfect: if a breach affects your data, we'll tell the creators involved and the regulators, and you where the law requires it.

If we change this policy in a way that matters, we'll update the date at the top and tell creators by email before it takes effect.