Privacy

Last updated: 17 August 2026

whim is a small service that helps people find company for cinema outings in Madrid. This page explains what we collect, why, and what your rights are. It's written to be read, not skimmed past. It's short on purpose.

Who is responsible

Julie Moscatelli, NIF Y9063344R, 28016 Madrid, Spain ("whim", "we"). For anything about your data, write to help@whim.social.

What we collect

Your account email; your profile (username, date of birth, gender, photo, bio, languages, film interests); the listings, applications and matches you create; your chat messages with a confirmed match; reports you send; and whether you have paid the outing fee. Payments run through Stripe's secure checkout; we never see or store your card details.

How your photo is handled

Your photo stays private. Other users cannot see it until you and another person have both confirmed an outing together. Then, and only then, you each see the other's photo so you can find each other at the door.

Founder review

whim is personally vetted: the founders review every profile before approving it, and may review chat messages when needed for the safety of the community. This is also disclosed inside the chat itself.

Why we process your data

To run the service you signed up for (account, listings, matches, chat, payments); to keep the community safe (profile vetting, chat review, reports), which is our legitimate interest; and to keep the records Spanish law requires us to keep (payments).

Where it lives, and who helps us

Your data is stored in the EU (our database and file storage run on Supabase, hosted in Paris). We use a small set of processors to operate: Supabase (database, login, storage), Stripe (payments), Resend (email), and Vercel (hosting the app). Internal operational alerts to the founders are delivered via Telegram.

How long we keep things

Chat messages are deleted 30 days after they are sent. Listings and matches that never led to a payment are removed about 90 days after they end. Records connected to a payment are kept for about 6 years, as Spanish commercial law requires. Your profile stays until you ask us to delete your account.

Your rights

You can ask to access, correct, export or delete your data at any time: email help@whim.social and a human will handle it. If you believe we have mishandled your data, you can complain to the Spanish supervisory authority (AEPD, aepd.es).

Age

whim is for adults: you must be 18 or older to use it.