Privacy Policy

Who we are

Kellits PO Ltd (‘Kellits PO’, ‘we’, ‘us’ or ‘our’) operates Strength & Rituals and The Fixture. We are the data controller for the personal data described in this policy. Kellits PO Ltd is registered in England and Wales. Company number: 16493607. Registered office: 128 City Road, London, United Kingdom, EC1V 2NX.

Questions and requests about your data: myboroughuk@gmail.com. See also our contact page.

What The Fixture does

The Fixture helps a group of friends agree a date to meet and find somewhere convenient to get to. It is a planning tool for real-world meet-ups. It is not a medical, therapeutic or counselling service and it does not ask you about your health.

The data we process

Your account

• Your email address and a password. Passwords are held in hashed form by our authentication provider; we never see them.
• If you sign in with Apple or Google where that option is offered, we receive your email address and a sign-in identifier from that provider instead of a password.
• Sign-in and security records kept by our authentication provider.

Your profile

• A display name, which members of your groups can see.
• Your timezone and, optionally, interests you pick from a fixed list. These are only shown to you.
• If you answer the optional set-up questions (what usually gets in the way, who you want to see, how often), your answers are stored with your account. They are not shown to other members and we use them only to understand and improve the set-up experience.

Groups and fixtures

• Group names and descriptions; fixture names, descriptions, activity type, proposed dates and response deadlines.
• Your yes, maybe or no replies to proposed dates, any alternative dates you suggest with their notes, and whether you are going once a date is confirmed. Members of the group can see these alongside your display name.
• The venue an organiser chooses: its name, address, any notes and an optional meeting link, visible to the group. If the organiser changes or removes the venue, the previous choice is deleted 30 days later; a cancelled fixture’s venue is deleted 30 days after cancellation.

Your private preferences

For each fixture you can record a budget range and a short note. These are private to you: organisers and other members cannot see them. Please keep notes to what is useful for planning; there is no need to include health or other sensitive information.

Your starting point (place suggestions)

• Optionally, one starting point per fixture: a station, town or postcode you type in. No home address is required and the app never uses your device’s location or tracks where you are.
• What we keep: the text you typed, the matching place name, its map coordinates and Google’s place reference, plus whether you want it included in suggestions. We keep one starting point per fixture: saving a new one replaces the old one, and we do not keep a history of earlier starting points.
• Why: to turn what you typed into a place on the map and to estimate public-transport journeys, the text (and the resulting coordinates) is sent to Google Maps Platform when you save it and when an organiser asks for venue suggestions.
• Only you can see your starting point and your own journey estimates. Other members and organisers never receive your starting point, its coordinates or your journey times. They see only whether you have added one and, once at least three people are included, group-level figures such as the longest and average journey to a suggested venue.
• Deletion: change or remove a starting point at any time on the fixture page in the app or on the web (on the web you can also review all of your starting points under Settings). Starting points are deleted automatically once a fixture is cancelled or finished, at the latest 30 days after a confirmed fixture ends, and the coordinates and place name obtained from Google are cleared within 30 days of being looked up. Deleting your account deletes them straight away.

Invitations

• Invitation links contain a random code. We store only a hashed version of that code, together with who created the invitation, when it expires and whether it was accepted or declined.
• Anyone who opens an invitation link sees the group name, the display name of the person who invited them and, where the invitation is for a particular fixture, its name and proposed dates. They see nothing else about the group until they join.
• If an organiser addresses an invitation to a particular email address, we store that address with the invitation so that only that person can use it.
• In the iOS app an organiser can pick a person from their contacts to send them the link. Apple’s picker gives the app only the single email address or phone number chosen, which is used to address a message the organiser sends from their own Mail or Messages app. We do not receive or upload your address book.

Notifications

• In-app updates in your inbox when a fixture is proposed, confirmed or cancelled, and for organisers when attendance changes. These are part of running the service; you can switch the in-app inbox off in Settings.
• Essential emails about plans you are part of: invitations, a reminder before replies close, the chosen date and place, changes and cancellations, and reminders for tasks given to you. We send them through our email provider, Resend. They are not marketing.
• Push notifications, if you allow them on your iPhone, for the same events and for new chat messages. To send them we store a push token for your device, issued by Apple, linked to your account; it is deleted when you delete your account or if Apple reports it is no longer valid. Chat notifications say how many new messages there are, never what they say. You can turn notifications off in iOS Settings, or mute a Fixture’s chat.
• Account emails, such as the link to confirm your email address, are sent by our authentication provider on our behalf. We do not send marketing emails.

Paid organiser features

If an organiser with an active subscription covers a Fixture with it, we record that they are the Fixture’s sponsor and until when their subscription covers it, so that everyone in the Fixture gets the extra features. Other people in the Fixture can see the sponsor’s name; they never see anything about the sponsor’s billing.

If you buy an organiser subscription through the App Store, Apple handles the payment and we never see your card details. We receive, through our subscription provider RevenueCat, the product you bought, its status and expiry, the App Store transaction identifiers and the identifier that links the purchase to your Fixture account. We use this to give your account the paid features and to handle renewals, cancellations and refunds.

Chat, photos, tasks and calendar

• Chat messages you send in a Fixture are visible to the members of that group. Account-free invitees cannot see them. You can delete your own messages; organisers can remove any message. You can report a message to us.
• Photos you add to a Fixture’s album are visible only to the members of that group. Your phone or browser shrinks each photo before upload and removes its location and device details; we never receive the original. Photos are stored privately and shown through links that expire after 15 minutes. You can remove your own photos; organisers can remove any photo.
• Tasks record what needs doing, who added it, who is doing it, any due date and who completed it, visible to the group.
• Calendar. Adding a Fixture to your calendar happens on your device or in your own calendar account; we do not read your calendar. If you subscribe to your Fixture calendar link, that private link shows the Fixtures you are in; keep it private, and you can replace it at any time.
• We keep a short activity history for each Fixture (for example “date confirmed” or “Sam added 3 photos”), visible to the group.

Technical data

• Our hosting and database providers keep standard server logs: IP addresses, browser or device information, request times and error messages. We use these to keep the service secure and working.
• We count how many venue and journey searches are run per person, per group and per day so that the service stays within its limits. These counters contain no locations.
• We do not use analytics, advertising or tracking tools on the website or in the app. See the Cookie Policy.

Support

If you contact us, we keep your message and our reply so that we can help you and answer any follow-up.

Why we process it and our lawful basis

• To provide the service you asked for (performance of a contract): your account, profile, groups, fixtures, replies, starting points, invitations, in-app notifications and any subscription.
• Our legitimate interests in running a secure, reliable service and improving it: technical data, usage counters, support records and the optional set-up answers. We balance these interests against your rights.
• Your consent for anything optional that you can switch off, such as email updates when they become available. You can withdraw consent at any time in Settings.
• Legal obligations, for example keeping records connected to purchases or responding to lawful requests.

Who we share it with

We do not sell personal data and we do not share it with advertisers. We use these providers to run the service:

• Supabase hosts our database and authentication, in the European Union (Frankfurt).
• Vercel hosts the website and the shared service used by the iOS app.
• Google Maps Platform resolves starting points and search areas, finds venues and estimates public-transport journeys. Google receives the place text and coordinates needed for that request, not your name or account details.
• Apple and RevenueCat process App Store subscriptions, and Apple or Google provide sign-in where you choose that option.
• Apple Push Notification service delivers push notifications to your device. Apple receives your device’s push token and the notification text.
• Resend delivers our essential emails. It receives your email address and the email content.

Members of your groups see the information described above as visible to them. We may also disclose data where the law requires it or to protect the rights and safety of people using the service.

International transfers

Your data is stored in the European Union. Some providers, including Google, Vercel, Apple and RevenueCat, may process data in the United States or elsewhere. Where personal data leaves the UK we rely on safeguards recognised under UK data-protection law, such as adequacy regulations or the standard contractual clauses and UK addendum in those providers’ terms.

How long we keep it

• Your account, profile, groups and fixtures: for as long as you have an account. Deleting a group removes its fixtures, replies and invitations for everyone.
• Starting points: until you remove them, the fixture is cancelled or finished, or 30 days after a confirmed fixture ends. Coordinates and labels obtained from Google are cleared within 30 days.
• Venue suggestions and journey estimates: 30 days.
• Chat messages, tasks and activity: for as long as the Fixture exists. A Fixture’s chat becomes read-only 30 days after it ends or is cancelled. Deleted messages are cleared immediately.
• Photos: for as long as the Fixture exists, unless you or an organiser removes them. Removed photos stop being viewable within 15 minutes and are deleted from storage within a day.
• Invitations: until they are used, expire or are revoked, then as a record with the group.
• Server logs and support messages: for a limited period consistent with keeping the service secure and answering you.
• Subscription records: for as long as needed to provide the features you paid for and to meet our accounting obligations.

You can delete your account yourself at any time from Settings, in the app or on the web. This deletes your sign-in, profile, replies, private preferences, starting points, inbox, photos, calendar link and any subscription record on the account. Messages you sent stay with the group but are no longer linked to you (they show as from a former member). Groups you own are handed to another organiser or member so the group carries on; a group with nobody else in it is deleted with its fixtures. Your name is removed from fixtures and invitations that stay with a group. Deleting your account does not cancel an App Store subscription, which only Apple manages: cancel it in your Apple subscription settings (Settings → Apple Account → Subscriptions). If you cannot sign in, contact us and we will delete it for you.

Your rights

Under UK data-protection law you can ask to see the personal data we hold about you, have it corrected or deleted, restrict or object to how we use it, and receive a copy in a portable form. To exercise any of these rights, email myboroughuk@gmail.com from the address on your account. We will usually reply within one month.

You can also complain to the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to help first.

Age

The Fixture is for adults. You must be 18 or over to create an account. We do not knowingly collect data from anyone younger; if you believe we have, please contact us and we will delete it.

Changes to this policy

If we change what we collect or how we use it, we will update this page and, for significant changes, tell you in the app or by email before they take effect.