Privacy and Data Policy

Account details: your name, email address, date of birth and password (stored only in hashed form by our authentication provider).

Application details: preferred name, city and country of residence, nationality, the country that issued your passport, languages, occupation, a social handle, a short biography, travel interests and preferences, desired destinations, availability, whether you drink alcohol, smoking preference, and your answers to our written questions.

We never ask for and never store a passport number, a passport scan or any other identity document image.

Photographs: at least five recent photographs of yourself that you upload.

A verification selfie: a single photograph taken with your device camera inside the application, used only to check that the photographs you submitted are of you.

Technical information needed to run the service securely: sign-in events, timestamps and records of staff actions on your application.

Your selfie is stored privately. It is never used as a profile image, never shown to other members and never published.

It is reviewed manually by an authorised member of staff. There is no biometric matching, no face recognition and no automated liveness or identity technology in this service. We never describe a review outcome as 'face verified' — the status is simply that a person has looked at it.

When a reviewer opens your selfie from the review screen, that access is recorded in our internal activity log.

To assess your membership application, confirm you are 18 or older, curate compatible travel groups, issue and manage invitations, and communicate with you about your application and trips.

We rely on your consent for the photographs and the verification selfie, on the performance of our agreement with you for membership and trip administration, and on our legitimate interest in keeping the club safe and private.

You may withdraw the optional media consent at any time from your settings. Withdrawing a required consent means we can no longer process your application.

Only authorised club staff. There is no public member directory, and members cannot see each other's applications, photographs, selfies or contact details.

Our hosting and database provider processes the data on our instructions to run the service. Where a trip proceeds, only the details a supplier genuinely needs (for example a name for a hotel or flight booking) are shared, and only after you have a confirmed place.

We never sell personal information and we do not use it for advertising.

Notices about your application, invitations and membership are delivered inside the app.

No marketing email is sent from this service. Transactional email such as address confirmation or password reset is sent only where an email delivery provider is configured by the operator; if none is configured, no email is sent at all.

Application data, photographs and the verification selfie are kept while your application or membership is active, and for a limited period afterwards so that decisions can be explained and re-applications handled — normally no more than 24 months after your last activity, unless you ask for deletion sooner.

You can request deletion of your account and data at any time from your member settings. We remove your application, photographs and selfie, keeping only minimal records where the law or a genuine dispute requires it.

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal information, to withdraw consent, and to complain to your local data protection authority.

To exercise any of these, use your member settings or contact the office at eo@exeof.com.

Photographs and selfies are held in private storage that is not publicly reachable, and are opened only through short-lived links issued to you or to an authorised reviewer. Access rules are enforced by the database itself, not only by the app.

The club operates globally, so data may be processed in countries other than your own. We take reasonable steps to ensure a comparable level of protection wherever it is handled.