Skip to content
aireio

Privacy

Last updated 25 September 2026

This page describes what aireio collects, who can see it, and how to remove it, in plain words. It covers the website and the iPhone app, which shows the website.

If you only browse

We keep ordinary server logs (your IP address, the pages you request and your browser type) briefly, for security and to keep the site running. Your IP address is also held in memory for a short while to limit how often one visitor can post or report. Your theme choice is saved in your own browser. We run no advertising and no third-party analytics or tracking.

If you search for a city we do not cover, we count that search by its text so we know which city to add next. It is not linked to you. If you report something without an account, we store a salted hash of your IP address with the report, never the address itself, so one person cannot file the same report many times.

If you create an account

We store your email address, and a hashed password if you set one. If you sign in with Google or GitHub on the website, we also store the name and picture they share with us. On your profile you can add a username, name, bio, profile picture, phone number, links, current city and language; all of these are optional. A cookie keeps you signed in for up to thirty days.

What you post, and who sees it

Shown to everyone, with your username or name:

  • Reviews, and photos you add to places. Photos are re-encoded when you upload them, which removes their metadata, including any location your phone stored in them. Before that, the location and time your phone stored are compared once with the place's, to confirm you were there. Only that you visited, and when, is kept; it counts, without your name, towards the place's busy-hours chart.
  • Your public profile at /u/your-username: username, name, bio, picture, links, current city and how much you have contributed.
  • Lists you make public, with their notes.
  • Work sessions you host or join: the time, the note, and who is going.
  • Check-ins: that you are working somewhere now. Where you are sitting and how to spot you are shown only to signed-in visitors, and only while the check-in lasts (up to eight hours). Afterwards the visit counts, without your name, towards the place's busy-hours chart.

Pooled with everyone else's and not shown by name: your amenity ratings and Wi-Fi details, likes and dislikes, helpful votes and photo labels. Private to you: favorites, private lists, the cities you follow, your notifications, the reports you filed and the people you blocked. If you claim a venue, the name, email, role and message you send are seen only by us, to reply to you.

Keeping it safe

Every photo is checked by an automatic classifier before it appears. It runs on our own server; your photo is not sent to anyone else. Reviews, captions, notes, lists and profiles are checked against a short list of slurs and profanity. Anyone can report anything on the site, and we review every report. If you block someone, neither of you sees the other's posts, check-ins or sessions; they are not told. When we suspend an account, what it posted stops showing. We keep a record of every moderation decision.

Emails and notifications

We email you only to sign you in (a magic link), to reset your password, and, if you follow a city, a digest of what changed there, which you can turn off on your Following page. Notifications about your posts and sessions appear in the bell on the site.

Other services

  • Cloudflare serves the site and stores and serves its images and maps.
  • An email provider delivers the emails above; it receives your address and the message.
  • Place details come from Google Places, OpenStreetMap, Overture Maps, Wikidata and the places' own websites. We ask them from our server, not from your browser. The profile picture of someone who signed in with Google loads from Google.
  • Some place pages show pictures straight from the venue's own website, and a map of a city we have not yet stored comes from OpenStreetMap's tile servers. Those sites see your IP address, as with any image on the web.
  • A place's Facebook page loads only if you choose to show it, and Facebook may then set its own cookies.
  • If you report that a place has closed or has wrong details, we may pass that on to OpenStreetMap as a public note, without your name.
  • If you sign in with Google or GitHub, their privacy policies cover that sign-in.

The iPhone app

The app shows this website, so everything on this page applies to it, and the app adds no analytics or advertising identifiers of its own. It asks for the camera or your photo library only when you choose to add a photo. Inside the app, sign-in is by email and password or a magic link.

Deleting your data

You can delete your account at any time from Account settings, in the app as on the website. It takes effect at once and erases your account and how you sign in, your profile and profile picture, favorites, likes, ratings, reviews, lists, city follows, the sessions you host, your blocks and your notifications. Pooled place scores are recalculated without your votes.

Some things stay, without your name or account on them. Photos you added to places stay up, credited to “a visitor”, because they describe the place rather than you. Your past check-ins stay as anonymous counts in the busy-hours chart, with where you sat and how to spot you removed. Reports you filed and venue claims you sent stay as records of what was decided. If you want any of your photos taken down too, remove them from the place page before you delete your account, or ask us afterwards.

Age

aireio is for people aged 18 and over, because work sessions and check-ins arrange meetings in person. We do not knowingly keep an account for anyone younger; tell us and we will delete it.

Questions

Use the contact page.