Tietosuojaseloste

This Privacy Policy explains what personal data the Eventipus mobile app and eventipus.com (together, the "Service") collect, why we collect it, and how you can exercise your rights. By using Eventipus you agree to this policy.

Data We Collect

Account information

You sign in with Sign in with Apple or Google. From your provider we receive:

• Your email address (if you choose "Hide My Email" on Apple, we receive Apple's relay address instead)
• Your name (only what your provider shares)

You can optionally save a phone number for guest management. The phone field is not required.

Event content

We store everything you put into the events you create: title, date, location, description, background photo and guest list (guest name, phone number, RSVP response). You choose and add the guests — from your contacts, by hand, or from an Excel file.

Guests' data

When someone is added to an event as a guest, we receive their name and phone number from the host who added them — not from the guest. We keep this data to run the Service: to stop the same person being added to an event twice, to create each guest's personal invitation link, to match an RSVP to the right guest, and to manage co-organizer invitations.

Eventipus does not send any message to guests. Hosts send invitations themselves, from their own phone and their own number.

If you do not want to be invited: open the invitation link you received and choose "Beni bir daha davet etmeyin" ("Don't invite me again"). This:

• Deletes your phone number from every event's guest list on Eventipus, from co-organizer invitations, and from "added by" records.
• Keeps only a one-way, keyed code derived from your number. Your number cannot be recovered from it; its only use is to block any host who tries to add your number again.
• Does not delete your name or your RSVP to that event, so the host's guest count and seating do not change without warning. You can still give or change your RSVP to that event.
• Cannot be undone. We have no way to verify who owns a phone number, so we cannot lift this later.

This option is available only from an invitation link. It does not affect a phone number saved to your own Eventipus account; to delete your account, see Erasure below.

Device permissions

The app accesses the following device data only with your explicit permission:

• Contacts: used to add guests; only the subset you select is sent to our servers.
• Photos: used to pick an event background and to upload photos to an event album; only the photos you select are uploaded. When you save an album photo to your phone, the app asks for add-only access to your photo library and cannot read your other photos.
• Location: used to suggest your current venue in the picker; we never track your location in the background.

Event albums

Both organizers (in the app) and guests (on the album page opened from their invitation link) can upload photos to an event's album. We store album photos as web-quality viewing copies and delete them 12 months after the event. Each photo records who uploaded it, and that is visible to everyone who has the invitation link.

Purchase data

In-app coin purchases are processed by Apple App Store / Google Play. Payment details such as card numbers or CVC are never sent to us. Through RevenueCat we record the product ID, transaction time and number of coins granted. We keep this for accounting and customer support.

Usage analytics

We use PostHog to understand which screens are used and which errors occur. The analytics we collect: screen view events, tap interactions, error logs and session replays. In session replays all text inputs are automatically masked; private fields (phone, name, email) cannot be read.

Who We Share Data With

Eventipus does not sell user data to any third party for advertising or marketing. To run the Service we work with the following processors:

• Google Firebase (Authentication, Cloud Functions) — identity and server infrastructure
• Amazon Web Services (AWS S3) — event photo storage
• PostHog — usage analytics and error monitoring (EU servers)
• RevenueCat — in-app purchase management
• Google Places / Maps — venue search and map preview

Guests' phone numbers are visible only to that event's host and co-organizers. We do not share them with any SMS or messaging provider or any other third party; they are stored only with the infrastructure providers that host our servers, to run the Service.

Retention

Your data is kept as long as your account is active. When you delete your account (see below) your profile, every event you created and every guest list under those events is permanently deleted. Album photos are deleted 12 months after the event even if the account is not. Purchase records may be retained for a limited period for accounting compliance, but they can no longer be linked to your personal data.

Your Rights

Under KVKK (Turkey) and GDPR (EU) you have the right to:

• Access and correction: view and edit your account info in app settings.
• Erasure: delete your account and all associated data instantly via Settings → Account → Danger Zone → Delete Account inside the app. This action is irreversible.
• Refuse to be invited: if you are a guest, have your number deleted from your invitation link, as described under Guests' data above.
• Objection and portability: contact us at the address below to submit a request.
• Lodge a complaint: file a complaint with KVK Kurumu (Turkey) or your local data protection authority (EU).

Children

Eventipus is not designed for users under the age of 13 and we do not knowingly collect data from that age group. If we discover we have inadvertently processed data of a child under 13, we will delete the account and all associated data.

Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via in-app notice or email. The date at the top of this page always reflects the latest version.

Contact

For questions about data processing or to exercise your rights, reach us at [email protected].