Kavakare

1. Who We Are

Kavakare is an event discovery app for Vilnius, Lithuania. We cover underground clubs, DJ nights, small venues, and events that the big platforms ignore.

Contact: info@kavakare.com

2. What Data We Collect

a) Event submission data — when you submit an event through the app, you voluntarily provide:

• Event title, dates, time, venue, address
• Description, category, price
• Organizer name and Instagram handle
• Event URL and source link
• Contact email address
• Optional event poster image
• Optional note about why the event should be featured

This information is stored in our database and used solely to review and potentially publish your event. Your contact email is used only to follow up on your submission — it is never shown publicly.

b) Anonymous session identifier — the app generates a random UUID and stores it locally on your device. This identifier has no connection to your name, email, or any other personal information. It is used to remember which events you marked as “going”, to send day-of reminders for those events (if you enable notifications), to attribute community map notes you post so you can delete your own, and to apply basic rate limits. It is cleared when you uninstall the app or clear the app’s local data.

c) Push notification token — if you enable notifications, we store an anonymous push token (issued by your device’s push service via Expo) together with your session identifier, so we can send event reminders, a daily digest, and occasional announcements. You can turn notifications off at any time in the app’s settings.

d) Community map notes — when you post a note on the map, we store the text, an optional photo, and the coordinates of the pin (taken from your device’s location at the moment you post). Map notes are public, visible to other users, and are automatically deleted 72 hours after posting. The map uses your device location only while the app is open — to centre the map on you and to place a note you choose to post. We do not track your location in the background.

3. What We Do Not Collect

• We do not require account registration
• We do not collect your name or phone number
• We do not access your location in the background or track your movements over time
• We do not use advertising SDKs or sell data to third parties
• We do not track your behaviour across other apps or websites

4. Third-Party Services

We use Supabase to store event submissions and anonymous attendance data. Supabase is GDPR-compliant and our data is hosted in the EU.

Event images you upload are stored in Supabase Storage and may be publicly accessible via a signed URL if your event is published.

If you enable push notifications, we use Expo and your device’s platform push service (Apple or Google) to deliver them. Only the anonymous push token and message content needed to send the notification are processed.

Photos attached to community map notes are automatically screened by Sightengine for explicit content before they are shown publicly. The image is sent to Sightengine solely for this check; photos that fail are rejected and deleted, and are never displayed.

In the mobile app we use PostHog (hosted in the EU) for anonymous product analytics — which screens are viewed and which features are used, tied only to the anonymous session identifier above. It collects no personal data and does not track you across other apps. You can opt out at any time in the app’s Profile screen.

We use Vercel Analytics and Vercel Speed Insights to measure page views and performance. These services do not use cookies, do not collect personally identifiable information, and are compliant with GDPR. Aggregated, anonymous data only is collected.

We also use Umami Analytics, a privacy-focused analytics tool that does not use cookies and does not collect personal data.

5. Legal Basis (GDPR)

For users in the EU and EEA, we process the personal data you voluntarily provide — your contact email from an event submission, and any community map note, photo, or pin location you choose to post — on the basis of consent. Push notifications and the associated token are likewise processed on consent, which you give by enabling them and can withdraw by disabling them. The anonymous session identifier is processed on the basis of our legitimate interest in providing basic app functionality without requiring account creation.

6. Data Retention

• Event submissions: retained as long as necessary to review and publish events. Rejected submissions are deleted periodically.
• Published events: contact emails are retained while the event is listed.
• Community map notes: automatically deleted 72 hours after posting. Photos rejected by moderation are deleted immediately, and notes you delete are removed right away.
• Push notification token: retained until you disable notifications or uninstall the app.
• Anonymous session data: retained for as long as the app is in use. Cleared when you uninstall the app.

7. Your Rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at info@kavakare.com. We will respond within 30 days.

8. Children

Kavakare is not directed at children under 16. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this policy occasionally. The date at the bottom of this page will reflect any changes. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

Questions or requests regarding this policy: info@kavakare.com