Privacy Policy

Last updated November 8, 2026

GroupBuild is a virtual coffee shop where people building things on their own work alongside each other. This page says what we keep about you, who can see it, and how to get it removed. We don't sell your data, and we don't show ads.

What we keep

• Your Google account basics. You sign in with Google, which gives us your email address and an account id. We never see your Google password.
• Your profile. The name and character you choose, what you're working on, and your country (worked out from your connection, never your precise location).
• Your projects. The names, links and icons of the things you add.
• Your work sessions. When you started and stopped, and on which project and kind of work.
• What you ship and say. The "I shipped" notes you post, and room chat.
• Friends. Who you've asked or accepted as a friend, and when you were last in the café.
• Revenue, if you connect it. If you link a payment provider (like Stripe or RevenueCat) to show your level, we store the read-only key you give us, encrypted, and the totals it reports.
• Coffee. If you buy a coffee, Stripe handles the payment. We only learn that it went through, never your card details.
• Settings on your device. A few preferences live in your browser's local storage, not on our servers.

Who can see it

• Everyone in the café sees your name, character, country, current project, level, ships, chat, and when you were last in.
• Only you see your work sessions and hours. Weekly emails show you your own numbers, and the café-wide totals only once enough people are in that nobody can be picked out.
• Nobody, including you, can read back a connected provider's key or the dollar amounts. Only our server uses them, to work out your level.
• Anyone with the link can see a day card you choose to share, with only what you left showing.

Google user data

When you sign in with Google, GroupBuild asks Google only for your email address and a Google account id (the openid and email scopes). We don't ask for, and can't see, your contacts, calendar, files, Gmail or anything else in your Google account.

• How we use it: the account id signs you in and keeps your profile and history together. The email address is how we send you account email and the weekly summary, and how you can reach us about your data.
• How we store it: in our database (InstantDB), over encrypted connections. Your email address is never shown to other people in the café.
• Who we share it with: nobody, except the services listed below that run GroupBuild for us (our database, our host, and our email sender, which needs your address to deliver email). We don't sell it, use it for advertising, or use it to train AI models.
• Deleting it: email mo@groupbuild.app and we delete your account, email address and everything tied to it. You can also remove GroupBuild's access at any time from your Google account's security settings.

GroupBuild's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we use it for

To run the café: show you and others in the room, keep your history and levels, and send you email about your account. That includes a weekly summary of your week, which you can turn off with the link at the bottom of any of them.

Services we rely on

These companies process data for us, only to run GroupBuild:

• Google, for sign-in.
• InstantDB, our database.
• Vercel, which hosts the site and runs our server code.
• Stripe, for coffee payments.
• Plunk, which sends our email.
• Stripe and RevenueCat, if you connect them to show your revenue.

How long we keep it

Chat is deleted after a few hours. Everything else stays while you have an account, so your history keeps adding up. Ask us to delete your account and we remove it all.

Your choices

• Edit your profile and projects in the café at any time.
• Turn off the weekly email from the link in any of them.
• Ask for a copy of your data, or for your account and everything in it to be deleted, by emailing mo@groupbuild.app.

Children

GroupBuild isn't for anyone under 13, and we don't knowingly keep data about them.

Changes

If this page changes in a way that matters, we'll update the date at the top and say so in the café or by email.

Contact

Questions about any of this: mo@groupbuild.app.