CupMeet ("CupMeet", "we", the "Service") is operated by Fuki, with registered office at Via Amerigo Vespucci, Traversa Ticno n.7, 80030 Castello di Cisterna (NA), Italy, company registration / VAT number IT10432911211 (the "Controller" for the purposes of personal data processing under Regulation (EU) 2016/679, the "GDPR").
For any question about this document, your personal data, or the Service in general, you can write to us at support@cupmeet.com.
2. Accepting these terms
By creating a CupMeet account you confirm that you have read, understood and fully accepted this document, covering both the Terms of Service (sections 2–9) and the Privacy Notice (sections 10–17). If you don't accept every clause here, you may not register for or use the Service.
The Service is restricted to people 18 years of age or older. By registering, you represent and warrant that you meet this age requirement: the app checks the date of birth you provide at registration, but cannot verify its accuracy, and it remains your responsibility to provide truthful information.
3. What the Service is
CupMeet is a platform that connects people based on where they'll be and when, helping you discover events, venues, and other users who share your languages and interests. The Service's role is limited to facilitating that connection: CupMeet does not organize, sponsor, verify, or supervise events created by users, and is not a party to any agreement, meetup, or interaction that results from them.
4. Your account
You're responsible for keeping your login credentials confidential and for all activity that happens through your account. You must notify us immediately at support@cupmeet.com if you suspect unauthorized access.
The information you provide (name, date of birth, city, photos, interests) must be truthful and about yourself: accounts that impersonate another person, use a false identity, or represent a non-human entity (bots, automated accounts) are not permitted and may be suspended without notice.
5. Prohibited conduct and content
By using CupMeet you agree not to post, upload, send in a message, or otherwise distribute through the Service any content that:
is illegal under Italian law, European Union law, or the law of the country you're accessing the Service from;
depicts, promotes, or facilitates the sexual exploitation or abuse of minors, in any form: CupMeet has zero tolerance on this point, removes any such content immediately upon becoming aware of it, reports it to the relevant authorities and to national or international bodies responsible for handling it (e.g. NCMEC), and permanently suspends the account involved;
is sexually explicit or pornographic material, or otherwise unsuited to a public, mixed-age context (notwithstanding the Service's own 18+ requirement);
incites, threatens, or glorifies violence, hatred, or discrimination based on race, ethnicity, nationality, religion, disability, sexual orientation, gender identity, or other protected characteristic;
promotes, organizes, or facilitates illegal activity — including, for example, the sale or use of illegal substances, unauthorized gambling, grooming, prostitution, or human trafficking;
infringes the intellectual property, privacy, or image rights of others;
amounts to harassment, stalking, threats, or intimidation of another person;
is spam, fraudulent content, phishing, or an attempt to collect other users' payment data or credentials outside the Service's official channels.
CupMeet reserves the right — but has no obligation — to remove any content, and to suspend or terminate an account that violates these rules, with or without notice, and to cooperate with the relevant authorities when required by law or when we believe it necessary for the safety of people using the Service.
If you come across content or behavior you believe violates these rules, report it using the in-app reporting tools or by writing to support@cupmeet.com: we review every report and act on it, but can't guarantee a response time or the outcome of any individual case.
6. Events and in-person meetups: disclaimer of liability
Events on CupMeet are created and run by other users or by business accounts, not by CupMeet. CupMeet is not the organizer, guarantor, or a party to any event: it does not verify the identity of whoever creates it, the accuracy of what's described, the safety of the stated venue, or the legality of what actually takes place there. Whoever creates an event is solely responsible for its legality, safety, and proper conduct.
If an event published on CupMeet turns out to involve, host, or facilitate illegal activity, and that activity actually takes place during the meetup between users, CupMeet bears no responsibility whatsoever for what occurred, for any resulting harm to people or property, or for any legal consequences borne by those who took part. Responsibility for what happens during a meetup arranged through the Service rests exclusively with whoever created it and whoever attended it.
Meeting in person with someone you met online carries risks CupMeet cannot eliminate. We recommend: choosing a public, well-populated place for a first meeting; telling a friend or family member where you're going and who you're meeting; never sharing financial details, identity documents, or credentials with another person within the Service; and trusting your instincts and leaving any meeting that makes you uncomfortable. CupMeet does not run background or criminal-record checks and does not verify users' real identities, and makes no guarantee whatsoever about the safety of a meetup arranged on the platform.
7. User-generated content
You keep ownership of any photo, text, video, or other content you upload to CupMeet ("User Content"). By uploading it, you grant us a non-exclusive, royalty-free, worldwide license, for as long as the content stays on the Service, to host, store, and display it to other users according to the visibility settings you chose. This license ends when you delete the content or your account, except for copies already shared with other users before deletion, or content we must retain for legal reasons.
You represent that you hold all rights necessary in the User Content you upload, and that it doesn't infringe the rights of others or violate the rules in section 5.
CupMeet does not systematically pre-moderate every piece of content before it's published: with respect to user-uploaded content, it acts as a hosting service provider under applicable digital services law, including Regulation (EU) 2022/2065 (the "Digital Services Act") — it is not the publisher or author of that content, and is not liable for it unless it becomes aware of its unlawful nature and fails to act promptly to remove or disable access to it once informed.
8. Limitation of liability
The Service is provided "as is" and "as available," without warranties of any kind, express or implied, including — for example — warranties of uninterrupted operation, error-free performance, fitness for a particular purpose, or accuracy of the content shown.
To the maximum extent permitted by applicable law, CupMeet, its founders, contributors, and employees are not liable for indirect, incidental, consequential, or punitive damages, or for loss of profits, data, or opportunities, arising from use or inability to use the Service, from the conduct of other users (online or during an in-person meetup), or from content posted by third parties — even if CupMeet had been advised of the possibility of such damages.
Nothing in this document excludes or limits liability that cannot be excluded or limited by law, including liability for willful misconduct or gross negligence, or the mandatory rights granted to consumers under European Union law.
9. Indemnification
You agree to indemnify and hold harmless CupMeet, its founders, and contributors from any claim, demand, damage, loss, or expense (including reasonable legal fees) arising from: your breach of this document; User Content you uploaded; your conduct while using the Service or during a meetup arranged through the Service; or your infringement of the rights of others.
10. Governing law, jurisdiction, changes
This document is governed by Italian law. Any dispute is subject to the exclusive jurisdiction of the courts of Naples (Napoli), unless the user qualifies as a consumer under the Italian Consumer Code (Codice del Consumo), in which case the consumer's statutory forum applies instead.
We may update this document over time. If we make material changes, we'll notify you through the app or at the email address linked to your account before the changes take effect; continuing to use the Service after that date means you accept them.
11. What data we collect
We process the following categories of personal data:
Registration data: name, email address, date of birth, password (stored in encrypted form).
Profile data: city of residence, city of birth (optional), bio, profile photos and videos, languages spoken, interests.
Location data: the city and, where provided, coordinates of events you create or attend. We do not collect real-time GPS location.
Content you create: events, messages, diary entries, uploaded photos and videos, personal notes, reactions, and comments.
Technical data: IP address, device and browser type, push notification identifiers, access logs, interface language.
Analytics data, only if you accept analytics cookies: the pages you visit and how you move around the app, approximate location (city) and device information, collected through Google Analytics. Some of it, such as the address of a page, can contain identifiers. See section 14.
12. Why we process your data
We process your data on the following legal bases (GDPR art. 6):
Performance of a contract: to provide the Service you signed up for — showing you compatible events, letting you message other users, managing your profile.
Consent: for push notifications, analytics cookies and any communications not strictly necessary for the Service, which you can withdraw at any time from settings.
Legitimate interest: for platform security, fraud and abuse prevention, and improving the Service, always balanced against your fundamental rights and freedoms.
Legal obligation: when the law requires us to process or retain certain data, or to disclose it to the competent authorities.
13. Who we share data with
We don't sell your personal data to third parties. We share it only with providers who process it on our behalf, as data processors, to the extent necessary to run the Service:
Supabase — database, authentication, and file storage;
Cloudflare — anti-bot verification at registration and login (Turnstile);
Stripe — payment processing, only when you buy a Pro subscription or an Event Pro upgrade (the payment page is Stripe's own);
Google — web analytics (Google Analytics 4), only if you accept analytics cookies (see section 14);
OpenFreeMap and OpenStreetMap (Nominatim) — map tiles and city search, only when you use those features: they receive your IP address and the text you search for.
Some of these providers may process data on servers located outside the European Economic Area. Where that happens, the transfer relies on Standard Contractual Clauses approved by the European Commission or another safeguard adequate under the GDPR.
We share data with public authorities or law enforcement only when required by law, or when we believe in good faith it's necessary to protect the safety of a user or the public.
14. Cookies and similar technologies
A cookie is a small text file a website stores on your device. CupMeet also uses your browser's local storage (localStorage, sessionStorage and IndexedDB), which serves the same purposes, so everything below applies to both. The rules come from the EU ePrivacy Directive (in Italy, art. 122 of the Privacy Code) and the guidelines of the Italian Data Protection Authority (Garante).
Essential — always on, no consent needed. These make the Service work. You can't switch them off in CupMeet; you can block them in your browser, but the app will stop working properly.
Login session (Supabase, a cookie named like sb-…-auth-token): keeps you signed in. It lasts until you log out; if you untick "Remember me" it ends when you close the browser, otherwise it can last up to 400 days.
NEXT_LOCALE: remembers the language of the interface. It lasts until you close the browser.
cupmeet_consent: remembers the cookie choice you make here, so we don't ask again on every page. It holds only your choice and its date, and lasts 6 months.
Browser storage for features you use, kept on your device: your "Remember me" choice, calendar filters, notification and sound settings, the events you follow, notices you have dismissed (app install, notifications, surveys), and the offline queue and settings that let notifications reach the app when it is closed.
Cloudflare Turnstile, only on the sign-up and login pages: a bot check that loads a script from Cloudflare to protect the Service from abuse. Cloudflare may use its own technical identifiers for that purpose; see Cloudflare's documentation.
Analytics — only if you accept. If, and only if, you accept analytics, we load Google Analytics 4, provided by Google Ireland Limited (with Google LLC in the United States, certified under the EU–US Data Privacy Framework). It sets the cookies _ga and _ga_<ID> (up to 13 months) and helps us count visits and see which pages are used and how people move around the app, so we can improve it.
What we send ourselves: at every page change, the page you are on with identifiers and search terms removed (for example /events/[id], never the actual event) and the interface language. The app's own code never sends Google your name, your email or a user id.
What Google's script also collects on its own: our Google Analytics account has Google's "enhanced measurement" and "granular location and device data" features switched on. So, in addition to the above, Google records automatically things such as: the address of each page as it appears in your browser, which can contain the identifier of an event, a profile or a reminder; an extra page view at each page change; how far you scroll; clicks on links to other websites, with the address of the link (which may have been written by another user); file downloads; searches on the site; video plays and form interactions. It also records your approximate location down to the city, and details of your device (model, browser, operating system version), derived from your IP address and the data your browser sends. Google Analytics 4 does not store IP addresses. We cannot filter these automatic records: an address or a link can contain whatever is written in it, including identifiers and text typed by a user, such as a name in a link. If you don't want them recorded, reject analytics.
How we configured it: in our code we switch Google Signals and ad personalization off for this site, and we never give Google permission to use the data for advertising. Event data is kept for 2 months and user data (such as the identifier stored in the _ga cookie) for 14 months; aggregated reports that don't describe individuals may be kept longer.
Until you accept, nothing is loaded and no request is made to Google.
Choosing, and changing your mind. The first time you visit, a notice asks you to accept or reject optional cookies. Rejecting is as easy as accepting and the Service works the same. Scrolling or continuing to browse is not consent. You can change your choice at any time with the button below, from Settings, or from the footer of the home page. We ask again after 6 months, or sooner if we start using something new.
Other services you may contact without cookies. Some features load content from other providers, which receive your IP address and the technical details a browser always sends: map tiles from OpenFreeMap and OpenStreetMap when you open a map, and city search through Nominatim (OpenStreetMap) with the text you type. They are needed to provide the feature you asked for. The fonts and the app's own images are served by CupMeet itself; the photos and videos that people upload are served from our storage provider, Supabase (see section 13).
15. How long we keep data
We keep your data for as long as your account stays active. If you delete your account, we delete or anonymize the associated data within a reasonable period, except for what we must retain longer for legal, accounting, or ongoing-dispute reasons.
16. Your rights
Regarding your personal data, you have the right to:
access the data we process about you;
request its correction if it's inaccurate or incomplete;
request its deletion, except where we must retain it for a legal obligation;
restrict or object to processing in certain circumstances;
receive your data in a structured format and transfer it to another service (portability);
withdraw any consent you've given, at any time, without affecting the lawfulness of processing carried out before the withdrawal;
lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.gpdp.it) or the supervisory authority of your EU country of residence.
We use reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration — including password encryption and row-level access controls on the database (Row Level Security). No system is 100% secure, though, and we cannot guarantee absolute security.
18. Minors
The Service is restricted to people 18 or older. We do not knowingly collect data from minors. If you become aware that a minor has created a CupMeet account, please report it to support@cupmeet.com: we will take steps to remove it.
