Privacy policy

Last updated: 19 September 2026

Who we are

The Pineapple Club is operated by Onesec B.V., based at Verdunplein 17, 5627 SZ Eindhoven (KvK 88897605). Onesec B.V. is the data controller for the personal data we process through the website, the platform and (once available) the app.

What data we collect

When you sign up, we collect your first and last name, email address, phone number and date of birth, plus lifestyle-related preferences relevant to your profile. We also collect data on account activity, event participation and technical use of the platform.

Once you use the app, this is supplemented with: device type, operating system and device identifiers, a push token for notifications (via Expo and Firebase), and your active device sessions (visible and individually revocable in your account settings).

For the distance filter, and only if you allow it, we ask for your precise location on your phone. Other members never see your exact position, only a distance band (for example “within 5 km”); we never share your location data with third parties.

If you use Face ID or your fingerprint to lock the app, that check stays on your device; we never receive it.

For the verification badge, we ask for a selfie and a short check that confirms you're a live person (for example blinking, smiling or turning your head). That check happens on your device and never leaves your phone; the selfie goes through the same review as your other profile photos. We don't use an ID document or an external biometric or ID-verification service for this.

If you sign in with Apple or Google, we receive an identity confirmation and, only on your very first sign-up with that account, your name. If you use Apple's "Hide My Email" feature, we treat that relay address like a regular email address. If you link an Apple or Google account to an existing password account, we first ask for confirmation (your password or a fresh verification code); we never link automatically based on a matching email address.

If the app crashes unexpectedly, we receive technical diagnostic data about that crash via Sentry. This data is not linked to you as a person.

What we use it for

Your data is used for member verification, account management, organising events, surfacing relevant events to members based on aggregate attendance behaviour of a group of members (never targeted at you as an individual), safety, discretion and enforcement of the code of conduct, moderation of photos, messages, posts and comments (both automated and by our moderators), general administrative purposes, and making notifications, the distance filter and the verification badge work.

Legal basis

Processing is based on performance of the agreement, consent, legitimate interest (safety, community management and keeping the platform relevant), legal obligations, and explicit consent for special category personal data (see "Dating and special category personal data" below).

Cookies and similar technologies

With your consent, this website places cookies for analytics and advertising (Meta Pixel, Google Tag Manager). You can change your choice anytime via the cookie settings at the bottom of the page. What you enter through the newsletter form is used only to send that newsletter, with your explicit consent.

Dating and special category personal data

Dating is a separate, optional layer within the platform: you only see Dating after mutual opt-in, never automatically through your Space membership. Data associated with it, such as preferences, intentions and Dating photos, is special category personal data under the GDPR (Art. 9) and is stored with additional encryption. You can turn Dating off at any time; your data is then deleted, subject to a short cooling-off period.

Beyond Dating, membership of certain Spaces can itself constitute special category personal data, for example because it says something about your sexual orientation or preferences. We only process this on the basis of your explicit, voluntary consent given at sign-up, and handle it with the same care as your Dating data.

Retention periods

Data for active members is retained for as long as the account remains open. We retain payment data for a maximum of 7 years in connection with tax obligations. We retain moderation data for a maximum of 1 year, unless linked to a sanction. If an application is rejected, we delete the associated photos and application data within 24 hours.

Payments, tickets and administration

We share payment data with Stripe for payments and with Weeztix for ticketing. Once the app is available via the App Store and Google Play, you'll also be able to pay via an in-app purchase; Apple and Google process that payment and store your card details themselves, we only see a purchase confirmation. Managing or cancelling a subscription taken out via the App Store or Google Play is done through your App Store or Google Play account, not through the website.

The 14-day right of withdrawal (see our terms and conditions) also applies to an in-app subscription: if you withdraw within 14 days of access starting, we may charge a reasonable amount pro rata for the period used, with the remainder refunded.

Third parties and processors

We work with Railway (hosting of this website), Cloudflare (content delivery and security for this website), Hetzner (hosting of the member platform and the app), Mailchimp (newsletters), Resend (transactional emails), Google Workspace (member support via contact@pineappleclub.nl), Stripe (payments), Weeztix (ticketing), Expo and Firebase (push notifications), Sentry (crash and error diagnostics), and Apple and Google (signing in via Sign in with Apple/Google, and in-app purchases once the app is live). A data processing agreement is in place with every processor where the GDPR requires one.

International transfers

Our preference is to process and store data within the EEA; our own infrastructure (such as Hetzner) is accordingly located in the EU. Some of the parties above, in particular Apple, Google and Mailchimp, process data outside the EEA. Where that's unavoidable, we ensure the applicable safeguards are in place, such as the European Commission's standard contractual clauses or a valid adequacy decision.

Security

Encryption of data in transit (TLS) and, for Dating data, also at rest. Role-based access and logging on our side. You can view your active device sessions and end them individually or all at once from your account settings.

Children and age

The Pineapple Club is intended exclusively for people aged 21 and over. We do not knowingly collect data from people under 21 and verify your age at sign-up and again at the door of an event.

Your rights

You can request access, correction, deletion, data portability and withdrawal of consent via privacy@pineappleclub.nl or via contact. Once the app is available, you can also delete your account directly yourself via Account settings > Privacy in the app. If you disagree with how we handle your request, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes to this policy

We may update this policy from time to time, for example when new functionality such as the app is introduced. The date at the top of this page shows when that last happened. In the event of a significant change, we'll let you know via the platform or by email.