Privacy policy
Last updated 23 July 2026.
This policy explains, in plain language, what personal data Good Company collects, why, and the rights you have over it. We aim to be a genuinely safe, respectful place, and that starts with handling your data carefully.
Who is responsible for your data (the controller)
The data controller is Good Company, run by its founder Ameen, based in Dubai, United Arab Emirates. You can reach us about anything in this policy at hello@goodcompanyfriends.com.
What we collect
- Account details: your name, email address, and password (stored only as a secure hash).
- Profile: your city, a short bio, an optional business/link, and an optional face photo.
- Date of birth: to confirm you are 18+. We store the full date privately but only ever show your day and month to other members — never the year.
- Optional government ID: only if you choose to verify your identity (see below).
- Basic activity: when you were last active, and anonymous page-visit counts (no cookies for logged-out visitors) so we can understand traffic.
Why we use it (lawful basis)
We rely on:
- Legitimate interests — keeping the community safe and running it (vetting, preventing abuse, showing approved members to one another).
- Consent — for your face photo and your government ID, which you actively agree to at upload and can withdraw at any time by deleting them.
- Contract — to provide the membership you signed up for.
Your ID document
If you verify your identity, your ID is uploaded to a private store (never on the public web), is seen only by Ameen to confirm you are who you say, and is deleted immediately after review. As a backstop, any ID still on file is automatically purged after 7 days. It is never shown to other members and never appears in the directory.
Who can see your profile
Your photo, name, city, and bio are visible only to signed-in, approved members — never to the public web, and member pages are not indexed by search engines. We do not sell your data, and we do not share your personal information beyond the profile you choose to publish inside the community.
How long we keep it
We keep your profile for as long as you have an account. When you delete your account, your profile and photo are removed straight away. ID documents are deleted after review (7-day purge backstop). Voluntary contribution records are kept for accounting, with your personal link removed when you delete your account.
Your rights
You have the right to access your data, correct it, delete it (erasure), receive a portable copy, and object to or restrict certain processing. You can exercise most of these yourself, any time, from your profile:
- Access & portability: "Download my data" gives you a JSON copy of your profile.
- Rectification: "Edit my profile" lets you correct your details.
- Erasure: "Delete my account" permanently removes your profile, photo, and any ID on file.
- Objection / anything else: email hello@goodcompanyfriends.com and we'll help.
Where your data is held (international transfers)
Our servers are hosted in the European Union (Germany). If you access Good Company from elsewhere, your data may be transferred to and stored there. We take care to work with reputable infrastructure providers.
If something goes wrong (breach response)
We keep personal data to a minimum and protect it with access controls. In the unlikely event of a data breach that risks your rights, we will investigate promptly and notify affected members and the relevant authority without undue delay.
Complaints
If you're unhappy with how we've handled your data, please contact us first at hello@goodcompanyfriends.com so we can put it right. You also have the right to complain to your local data-protection supervisory authority (for UAE residents, the relevant UAE data-protection regulator; for EU/UK residents, your national supervisory authority or the ICO).
Contact
Privacy questions or requests: hello@goodcompanyfriends.com