Your privacy

Enlave collects only the information it needs to run your membership, your card, your visits and your seats at events. We do not sell personal information.

Aplomb Tech is the data fiduciary for Enlave. It decides why and how your personal data is used. Its address, email and phone number are on the contact page. Enlave is for adults: we do not knowingly accept members under 18.

What we collect

Your name, verified mobile number, member number, country, city, optional region, postal code and email, interests, the time you accepted the terms, and whether you opted in to WhatsApp updates. We store hashed, expiring sign-in codes and revocable session credentials.

Your card: the card record and, when you add it to Apple Wallet, the device-library identifiers and push tokens Apple gives us. Your visits: when staff scan your card at a member place, we record the place, the privilege, the staff member and the time, and the bill amount and bill reference if staff enter them. Your stamps: each stamp, welcome stamp and reward redeemed at a shop is an entry in that shop's stamps ledger, with the shop, the branch, the date and time, and the staff member who recorded it. Your events: the seats you claim, your check-ins, and for a paid seat the Razorpay payment reference, amount and status. The WhatsApp messages you send to Enlave. Concierge preferences, if you save any.

Your location, only when you give it: the city you name on My Enlave or over WhatsApp, and the city a scan or your browser puts you in, for up to 4 days. If you allow shared locations to update your card, a pin you send on WhatsApp or share on Places near me is kept rounded to about 100 m for 12 hours, then forgotten. While Places near me is open on your screen, your browser keeps sending a rounded position so the list follows you; only the first is kept as a pin, and the rest are used for the list and not stored. You can turn this off in your profile or send STOP-LOCATION on WhatsApp.

Your birth month, only if you add it in your profile, never the day or year. When you add it you choose its use: treats from every place you have visited, or only from places whose card you hold. A month given before that choice existed keeps the second use until you say yes, and your profile asks you once. You can change the use or remove the month at any time. No merchant is told a member's birth month. Staff see only an ordinary coupon, and counts of treats given and redeemed.

If you join through a merchant's join code or link, we record that merchant on your membership and your card says you joined through it. The merchant gets only a count of members who joined through its code; it does not learn which members joined that way.

A shop you visit sees your member number, your visits there and your stamps and rewards there. It never sees your full name, phone or birth month. Staff see your first name when they scan your card.

If you join through a member's invite link, we record whose link it was on your membership. That member sees only a count of friends they brought in, not your name or number. Anyone who opens your own invite link sees your first name.

If you list a business on Enlave for Business, we check that it is real. We keep any registration number you give (GSTIN, Udyam, FSSAI or Shop and Establishment), the result of our check, the name and PIN code the government's record shows, when it was checked and by whom, and a keyed fingerprint of the number so the same number on another listing can be spotted. A sole proprietor's GSTIN contains their PAN, so we treat these numbers as personal data. If you send a photo of a code held in front of your signboard, or of your Shop and Establishment certificate, we strip its location and camera data, keep it in our database where only our team can see it, and delete it once the check is recorded, or 14 days after you sent it. At review we may read the phone number on your shop's Google listing and compare it with your mobile; we keep only the Google place reference and whether they matched, never the number; the match counts for 30 days. If we call you to check your shop, we record that the call was made, when and by whom.

If you took part in the founding campaign, we keep your claim history and the purchase details you entered for tax and dispute obligations, and your receipt image until the deletion date below.

How it is used

We verify that you hold your mobile number, issue and update your card, confirm your membership when staff scan it, show your visits and seats, take payment for paid seats, send the WhatsApp messages you asked for, show the places near a location you shared, and keep an audit history. Apple and Google Wallet never tell us where you are, and we do not track your location in the background: we use only the cities and pins you give us.

To know when a neighbourhood has enough members for Enlave to price its network for businesses, Enlave counts members whose card city is that neighbourhood's city and who had a visit staff recorded at one of its places. It never counts a pin, and the count names no one. If you own a business on Enlave, we record that you saw a pricing notice on its Enlave for Business pages, and when; the first owner's view starts the notice's 30 days. Erasing your account removes you from those records and keeps only that the notice was seen.

Who receives what

Meta (WhatsApp) receives your mobile number and the message content when we send you a code, a seat confirmation or a reminder, and when you message Enlave on WhatsApp. We send WhatsApp updates only if you opt in, and you can send STOP at any time.

Apple receives the device tokens it needs to tell your phone that the card changed, not your name or mobile number. Enlave signs your Apple Wallet pass itself. If you add your card to Google Wallet, Google receives your display name, member number, your city if you set one, the city your card follows, the name of the place on your card nearest a pin you shared, an opaque membership code and the map positions of up to 10 places on your card. Those places can reflect cities you visit. If you joined through a merchant, Google also receives that merchant's name and the name and address of its nearest branch. It does not receive your mobile number or email.

When you pay for a seat, you enter your payment details in Razorpay's checkout, not on Enlave. Razorpay may receive your mobile number to fill in the form. Enlave receives the payment reference, the amount and its status, never your card, UPI or bank details. We send Razorpay only our own reference numbers for the event and seat. Razorpay also pays any reward due on a founding-campaign claim, and receives your name, mobile number and the reward amount to do so; you give UPI or bank details only to Razorpay.

Fly.io hosts the Enlave servers and database, so everything above is stored with them.

Concierge preferences and optional AI

You may save interests, a budget, dietary preferences and favourite offers. These are optional and stay off your card. Questions and replies are kept only in the current open concierge session, limited to ten exchanges; they are not stored in our conversation database. Clear the conversation or leave the page to discard it. Saved preferences and favourites remain until you change or remove them, or ask us to delete your account.

The local interpreter makes no external AI requests. If external AI is enabled and you separately opt in, your question, selected preferences and the previous search intent are sent to OpenAI to interpret your request. We do not attach your member ID, mobile number, Wallet tokens or payment records. Common mobile-number, email and UPI patterns are redacted, but this is not a guarantee that all sensitive text can be detected. Do not enter sensitive information. You may revoke consent in preferences for future requests; OpenAI's processing and retention follow its own terms. Recommendations are selected by our server, not invented by the model.

Enlave's assistant on WhatsApp

The assistant answers members' free-text WhatsApp messages about their card, places, events and plans. Its first reply each day says it is Enlave's assistant and how to reach a person. It answers only from what Enlave looks up for you, and turns down anything else. It reads your message with email, UPI, mobile-number and other long-number patterns removed, your first name and card city, and what Enlave looks up for you, including places near a location you shared. Requests go through OpenRouter to Anthropic's Claude, run by Anthropic or by a cloud host such as Amazon Bedrock or Google Vertex AI, and each one asks that nothing be kept or used for training; their processing follows their own terms. Your messages and the replies are kept for 90 days, like other WhatsApp messages. The assistant never messages you first, replies only within WhatsApp's 24-hour window, and anything it would change for you waits until you confirm it. STOP stops all WhatsApp messages from Enlave, except sign-in codes you ask for. Send START to turn them back on. A message you start with SUPPORT still reaches a person.

Enlave's administrators may connect an outside AI app, such as ChatGPT, Claude or Grok, to run Enlave. That app's provider then receives what the tools return to administrators: counts, event and Moment text, and place names. If you connect an AI app to your own account, it acts only through the access you granted, and you share its tool results with that app and its provider under their terms. You can disconnect it on your profile.

How long we keep it

Sign-in codes expire after five minutes. Session cookies are required for sign-in. A daily clean-up deletes sign-in codes a day after they expire, sessions once they expire, and WhatsApp messages 90 days after they arrive. Your account stays until you ask us to delete it. Payments, refunds, seats, check-ins, visits, founding-campaign claims and payouts, and our audit history are kept for as long as tax, accounting or dispute obligations require. If you delete your account, your stamps ledger is kept under your member number, without your name, mobile number or email, so the shop's reward records stay correct.

Business checks are kept while the business is on Enlave. If you ask us to delete your account, we clear the registration number and the name it matched and keep the fingerprint, except a GSTIN printed on an invoice, which we keep for as long as tax records require.

Receipt images from the founding campaign can be opened only by their owner and authorized administrators. Each is deleted 90 days after the campaign ends, at the next daily clean-up once any payout on it is settled.

Your choices

You can remove your card from Wallet or sign out to end the current session. To ask for access, correction or deletion, contact anil@aplombtech.in with your member number. We act on access and correction requests within 30 days, as we do for deletion. How to delete your data gives the steps and what we keep.