Privacy Policy
How we collect, use, and protect your personal information
Effective Date: January 2025
Konfetti ("Konfetti", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "App").
By using Konfetti, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Personal Information You Provide
When you create an account and use Konfetti, we collect:
- Account Information: Name, email address, password (encrypted)
- Profile Information: Age, gender, bio, interests, photos, and prompt responses
- Optional Information: Instagram username
- Preferences: Age range preferences, gender preferences
Information Collected Automatically
- Device Information: Device tokens for push notifications, device type, operating system
- Usage Data: App interactions, features used, timestamps
- Event Participation: Events you join, matches made, messages sent
Location Information
We may collect location data only when necessary to verify event attendance. You can disable location services in your device settings, though some features may be limited.
2. How We Use Your Information
We use your information to:
- Create and manage your account
- Display your profile to other event attendees
- Enable matchmaking features and facilitate connections
- Send push notifications about matches, messages, and event updates
- Send email notifications (when enabled in your preferences)
- Improve and personalize your experience
- Ensure safety and enforce our Community Guidelines
- Respond to support requests
- Comply with legal obligations
3. How We Share Your Information
We do NOT sell your personal data.
We may share your information with:
- Other Event Attendees: Your profile information is visible to other guests at events you join. This includes your name, age, photos, bio, interests, and prompt responses.
- Event Hosts: Event creators can see basic attendee information for event management purposes.
- Service Providers: We use third-party services for:
- Email delivery (Resend)
- File storage (for photos)
- Push notifications (Apple Push Notification service)
- Authentication services
- Legal Requirements: We may disclose information if required by law or to protect the safety of our users.
4. Data Retention
- Active Accounts: Your data is stored while your account is active.
- Account Deletion: When you delete your account, we remove your personal data within 30 days. Some anonymized data may be retained for safety and analytics purposes.
- Event Data: Event participation data may be retained for the duration of the event plus a reasonable period for dispute resolution.
- Legal Holds: Data may be retained longer if required for legal proceedings or regulatory compliance.
5. Your Rights (GDPR & CCPA)
Depending on your location, you may have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a portable format
- Objection: Object to certain processing of your data
- Restriction: Request limited processing of your data
- Withdraw Consent: Withdraw consent where processing is based on consent
To exercise these rights, contact us at privacy@konfetti.app
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Secure authentication mechanisms
- Regular security assessments
- Access controls and employee training
However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
7. Cookies and Tracking
We use minimal cookies and similar technologies for session management and authentication. We do not use third-party advertising cookies or extensive tracking technologies.
8. Children's Privacy
Konfetti is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a minor, we will take steps to delete that information promptly.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Effective Date" above. Your continued use of Konfetti after changes constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related inquiries or to exercise your rights, contact us at:
- Email: privacy@konfetti.app
- General Support: support@konfetti.app
Data Controller:
Konfetti
Mexico