Privacy Policy

RaveKrew helps private groups coordinate festival trips. This policy explains what information RaveKrew collects, why it is needed, when it is shared, and the choices you have.

Information we collect

• Account and profile information: email address, sign-in provider identifier, display name, and an optional profile photo.
• Krew content: memberships, invitations, chat messages, photos and videos shared in chat, plans, schedules, tasks, shopping and meal lists, attachments, meeting points, travel and vehicle details, expense records, optional payment-app usernames, and SOS acknowledgements you choose to provide.
• Location: approximate or precise location only after you choose to share it. SOS activation shares precise location with your Krew for 30 minutes. Location shares follow their selected expiry or remain active until stopped. If you separately enable background sharing and grant device permission, RaveKrew also collects and shares location while your phone is locked or you use other apps. Background sharing stops when you disable it, switch Krews, sign out, or the share expires; operating-system restrictions or force-closing the app may stop updates sooner. Approximate sharing can remain active for longer periods. Temporary meeting points expire; permanent meeting points remain until deleted.
• Device and notification information: push-notification token, platform, notification preferences, app version, and limited operational logs used for delivery, reliability, fraud prevention, and security.
• Product usage: events such as opening Plan, Maps, Chat, or Shopping and successfully using Meet Here, Find Person, messaging, invitations, planning, or SOS. Limited analytics may also record public events you intentionally open or select for a Krew, ticket-provider links you follow, the associated provider and public event identifiers, and relevant feature interactions tied to a Krew or trip. These records may be linked to your account, Krew, trip, platform, app version, and an app session identifier to understand event interest, feature use, and referral performance.

What analytics never contains

Product analytics does not store raw event-search text, precise coordinates, location history, SOS location or incident details, chat contents, private notes, attachments, payment credentials, payment-app usernames, or ticket payment information. Operational location and message data remain separate from business analytics. We do not use precise location to prove event attendance or put precise location or location history in business analytics. An outbound ticket click is not a purchase; we do not infer a completed purchase unless an authorized ticketing or affiliate partner reports one through an approved integration.

How we use information

We use information to authenticate you; provide Krew planning, chat, maps, location, notifications, expenses, and safety features; protect accounts; prevent abuse; investigate content reports; troubleshoot problems; understand aggregate product use; and improve reliability. We do not use precise location for advertising, create advertising profiles, or sell personal or sensitive information.

Reports and blocking

You can report another member’s chat message and block that member from the message controls. Blocking hides that person’s chat messages from you and can be reversed in Settings. A report sends the reported message and basic account context to authorized RaveKrew moderators for review. We may remove content or restrict accounts that violate our Terms. Reports are retained for up to 24 months for safety, abuse prevention, appeals, and enforcement, then deleted unless a longer period is reasonably necessary.

Who can see or receive information

Krew content is available only to authenticated members of that Krew, subject to their role. Your location is off until you share it and is visible only to the relevant Krew while the share remains active. Payment-app usernames are visible to members of your Krews; RaveKrew never receives payment passwords, card numbers, bank credentials, or funds. RaveKrew may provide event organizers or commercial partners with aggregated or de-identified event engagement statistics. Those reports do not provide individual live location, private Krew messages, individual membership lists, or account contact information.

We use service providers to operate RaveKrew: Supabase for authentication, database, file storage, and server functions; Cloudflare for media storage and delivery; Expo for app builds, updates, and push notifications; Google, Apple, or Facebook for sign-in when selected; Apple Maps or Google Maps for mapping; and Ticketmaster and public event sources for event information. When you choose an external ticket link, the ticket provider handles its own checkout under its terms and privacy policy. Referral or affiliate information may be used to attribute the referral. RaveKrew does not receive payment-card details from that checkout. Opening an external map, payment, ticket, or other service is governed by that provider.

Retention

Account and Krew information is retained while needed to provide the service or until it is deleted. Location shares follow their configured expiry or explicit removal; approximate shares may remain active until stopped. Permanent meeting points remain until deleted. SOS location expires after 30 minutes. Raw product-usage events are retained for up to 13 months and then deleted. When an account is deleted, its account link is removed from retained analytics so historical aggregate counts can remain anonymous. Limited records may be retained where reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, or enforcement.

Deletion and your choices

You can stop location sharing, change notification preferences, revoke device permissions, update your profile, leave eligible Krews, and delete supported content in the app. You can permanently delete your account from Menu → Settings → Privacy and account. Our account deletion page explains the process and provides a request option if you cannot access the app. Shared expense amounts, shares, and confirmed payment records remain under an anonymous “Deleted member” identity to preserve other members’ balances; this identity has no name, photo, payment handles, or sign-in account. Pending payment requests involving the deleted account are rejected. Shared Krew ownership may transfer to another member, but your personal profile, content, and account link are removed unless limited retention is legally required. File removal may continue through a background cleanup process after account deletion. The app clears account-scoped offline data and pending uploads on the device used to delete the account. Copies saved to your photo library, other devices, or another member’s device are not remotely erased.

Security

We use encrypted HTTPS connections, authentication, access controls, and database row-level security designed to limit information to the appropriate Krew. No storage or transmission method is completely secure.

Children

RaveKrew is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information.

Changes and contact

We may update this policy as RaveKrew changes. We will post the revised policy here and update its effective date. Privacy, safety, and content-report questions can be sent to [email protected].