Your data
stays yours.
Always.

Account information: Your name, email address and, if you sign in with Google or Apple, the basic profile details those providers share with us (name, email, profile photo). If you sign up with email, we store a securely hashed password. We also collect your date of birth to confirm you meet our minimum age.

Profile and content: Your profile photo, bio, and any events you create, RSVP to, or are invited to. Photos are stripped of embedded location metadata (EXIF GPS data) before we store them.

Location data: See the Location data section below.

Social graph: The friend connections you make in the app, and invites you send or receive.

Usage and device data: How you interact with the app, crash logs, device model, OS version, app version, and IP address (used for approximate location and security).

Communications: Messages you send us for support, and any feedback you submit.

• Show you public events happening near you and power map-based discovery
• Let you coordinate with friends on private and invite-only events
• Send notifications about invites, RSVPs, event updates and friend activity
• Personalise recommendations based on your interests and past activity
• Maintain trust and safety: detect fraud, abuse and spam, and enforce our community guidelines
• Fix bugs, monitor performance and improve the app using aggregated, de-identified analytics
• Respond to support requests and send important service communications
• Meet legal and regulatory obligations

We do not use your data to train third-party advertising models, and we do not run third-party ad networks inside the app.

When you enable location permissions, we use your device's precise location only while the app is open (foreground use) to find events near you and calculate distance. We do not track your location in the background, and we do not build a location history tied to your identity.

If you don't grant location permission, you can still use Venu by searching for a city or neighbourhood. You'll just lose the "near me" experience.

When you create or RSVP to an event, that event's location is shared according to the event's own visibility setting (public, request to join or invite-only), not your live personal location.

We never sell your location data, and we never share it with advertisers or data brokers. You can revoke location access at any time in your device's settings.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

• Other users: your profile and activity are visible to other people according to your privacy settings. For example, your RSVP to a public event may be visible to its other attendees, and a private profile is only visible to people you approve.
• Service providers: companies that help us run Venu under contract, including our database and authentication provider (Supabase), our map provider, push notification services (Apple and Google), crash reporting and support tools. They can only use your data to provide these services to us.
• Legal and safety: when required by law, subpoena or court order, or when we believe it's necessary to protect the rights, property or safety of Venu, our users or the public.
• Business transfers: if Venu is involved in a merger, acquisition or asset sale, your information may be transferred as part of that deal, subject to this policy.

Any other sharing only happens with your explicit consent.

• Access, update or export your account information from within the app
• Delete your account and associated data at any time, with no waiting period and no need to contact support
• Control who sees your profile, RSVPs and location through your privacy settings
• Manage location, photo and notification permissions in your device's settings
• Opt out of marketing emails with the unsubscribe link (service and security messages will still be sent)

If you're in the EEA, UK or Switzerland, you have rights under the GDPR / UK GDPR to access, correct, delete, restrict or port your data, and to object to certain processing. You can also lodge a complaint with your local data protection authority.

If you're a California resident, you have rights under the CCPA/CPRA to know what personal information we collect, request its deletion or correction, and opt out of the "sale" or "sharing" of personal information. Venu does not sell or share your data as those terms are defined by the law, and we do not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us at privacy@venu.app.

We keep your account information for as long as your account is active. When you delete your account, we remove your personal data from production systems, generally within 30 days, except where we're required to keep it longer for legal, security or fraud-prevention reasons (in which case it's isolated and access-restricted).

Location data used for "near me" results is processed in real time and is not kept as a historical log tied to your identity.

• Data is encrypted in transit (TLS) and at rest
• Row-level security on every database record, so records are only reachable by the users allowed to see them
• Uploaded photos are stripped of embedded location and device metadata before storage
• Internal access to production data is limited to the people who need it to run the service

No method of transmission or storage is 100% secure, but we protect your information using industry-standard practices and will notify affected users as required by law if a breach occurs.

Venu is not directed at children and is not intended for anyone under 16. We do not knowingly collect personal information from children under 16, and in the United States we do not knowingly collect information from anyone under 13 in a manner regulated by COPPA. If we learn that we've collected information from a child under these ages, we will delete it promptly. If you believe a child is using Venu, contact us at privacy@venu.app.

We may update this policy as Venu evolves or as laws change. If we make material changes, we'll notify you in the app or by email before they take effect. The "last updated" date at the top of this policy always reflects the latest version.