Privacy Policy

The Services are intended for users who are at least 18 years old. When you set up an account, we ask for your date of birth to confirm that you are at least 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us and we will take appropriate steps to delete it.

Account and profile. When you create an account, we collect identifiers and profile details you provide or that are created for your account: your user ID, email address (for email sign-in), phone number (for phone sign-in), date of birth (used to confirm you are 18 or older and not shown to other users), username, display name, profile biography, profile and cover photos, your home city, the music tastes you pick, a pinned song, links to your Instagram or Spotify profile if you add them, and account preferences (for example whether your profile is private and whether read receipts are on).

Authentication. Depending on the sign-in method you choose, authentication data is processed by our backend authentication provider. Supported methods in the app include email address (one-time code at registration; password at sign-in), verified mobile phone number (SMS one-time code), Sign in with Apple, and Sign in with Google. Each provider receives the data necessary to complete that sign-in flow. You can link more than one sign-in method to the same account in Settings.

Messages and social features. When you follow people, join groups, or send direct and group messages, we store the content you send (text, photos, videos, voice messages, GIFs, links, reactions, polls, and pinned messages), who took part, and when, as needed to operate the feature. This also covers follow requests, invites, blocks, mutes, read receipts, in-app notifications, and reports you file.

Groups and plans. A group you create or join holds its name, cover image, linked event, member list and roles, the details members add (for example an address, a link, or a note), rides (who is driving, how many seats, and who is riding), a venue map image with meetup pins, polls, and a shared photo album.

Kandi. We store the kandi you design, hold, trade, and gift; who each exchange was with, when, and at which event when we can tell; the memories you attach to an exchange (photos, notes, and reactions, each marked public or private by you); comments and likes on memories; event check-ins; invite codes and gift links you create or claim; and the kandi points (KP), rank, leaderboard standing, and profile cosmetics that result. So that you can trade without a connection, the app creates a signing key on your device and stores only its public half on our servers.

Photos, video, and audio you upload. If you add a profile or cover photo, a group cover image, photos or videos in a group album or a chat, a voice message, a venue map image, a photo on a memory, or a screenshot on a bug report, we store those files and related metadata (such as captions and which group they belong to) so they can be shown to you and, where you choose, to other users according to product rules and your settings.

Schedules and events. We store the events you save, the sets you pick in a festival schedule, and your reminder preferences for those sets.

Home city. You can search for your city or use your device location to find it. We store the city you choose and its approximate coordinates to show you events nearby.

Device location (optional). If you grant location permission, the app takes a one-time reading of your device's location while you are using it. It does not track your location continuously and never reads it in the background. The app uses a reading to: find your home city when you ask it to; center the Nearby map on you; check, when you open the app, whether you are at an event venue so it can offer you a check-in and that event's kandi; and tag a kandi trade or gift with the event where it happened. For check-ins and trades, the coordinates are sent to our servers and compared with event venues; we keep the matched event and the time, not the coordinates. You can turn location access off at any time in your device settings, and the rest of the app keeps working.

Schedule-inferred presence. Certain features show which group members have saved sets at the same stage or time slot as you. This is derived from schedule selections you make in the app, not from your device's location. Members of a group can see the sets you saved for that group's event.

Usage and diagnostics. Released versions of the app record events for key actions (for example finishing sign-up, completing a trade, joining a group, or sending a message, but never the content of a message), app open and close events, and errors you run into. These are linked to your user ID, username, and display name so we can understand how features are used and fix problems. If you send us a bug report or suggestion, we store what you wrote along with your app version and device model.

Device and technical data. Like most online services, our servers and providers automatically receive technical information when you use the Services, such as IP address, approximate region derived from IP, browser or app version and build, device model, operating system version, language setting, an app-specific device identifier (on iPhone, Apple's identifier for vendor), dates and times of requests, and diagnostic logs needed to keep the Services secure and reliable.

Website contact form and waitlist. If you send us a message through the form on our website, we collect the email address and message you submit so we can reply. If you joined our email waitlist before launch, we keep the email address you gave us so we can recognize you in the app.

Local data on your device. The app caches data on your device to improve performance and support offline use. This includes festival schedules, your set selections, messages, group data, and your kandi. Messages, reactions, trades, and other actions you take while offline are queued on your device and sent automatically when connectivity is restored. Cached data, queued actions, and the signing key are removed from the device when you sign out or delete the app.

Push notifications (optional). If you grant permission, the app may send you push notifications about activity relevant to your account (for example new messages, group invitations, kandi trades and gifts, and event reminders). We store a device push token provided by Apple solely to deliver these notifications. You can mute an individual group or conversation in the app, choose which kinds of notifications you receive in the app's Settings where your version offers it, or withdraw permission entirely in your device settings under Notifications. A group message that mentions you or is sent to @everyone still notifies you when that group is muted or group chat notifications are switched off; withdrawing permission in your device settings stops those too.

Camera (optional). The app accesses the device camera only when you start a flow that needs it: scanning a QR code to trade kandi or join a group, or taking a photo or video to send or post. We do not use the camera for other purposes without your action.

Microphone (optional). The app accesses the microphone only while you record a voice message or record a video with sound.

Photo library (optional). If you choose photos or videos from your library (for example for your profile, a chat, or a group album), the app accesses only the items you select, in line with iOS photo-picker behavior. If you save a photo or video from the app, it asks for permission to add that item to your library.

• Create and secure your account and sessions.
• Provide core product features: profiles, search, events, groups, schedules, realtime messaging, photos, invites, notifications, and kandi.
• Show you events near your home city and recognize when you are at an event so you can check in.
• Maintain persistent realtime connections for live messaging and activity updates while the app is in the foreground.
• Send transactional messages needed for authentication (for example email or SMS codes) and important service notices.
• Reply to messages you send us and recognize people who joined our waitlist before launch.
• Understand how features are used so we can improve the product.
• Monitor for abuse, fraud, and security issues; debug and improve stability and performance.
• Review reports and enforce our Community Guidelines.
• Comply with law and enforce our Terms of Service.

If you sign in by phone number, we collect your phone number and use it solely to send one-time passcodes (OTPs) for authentication and account security. SMS messages from kndi are transactional and are not used for marketing.

Phone numbers and SMS opt-in data and consent are not shared with third parties or affiliates for marketing purposes, and we do not sell this information. We share phone numbers only with the SMS delivery vendor configured by our authentication provider, strictly to deliver the OTP you requested.

You can opt out of SMS at any time by replying STOP to any kndi message; reply HELP for support. Phone numbers are retained while your account is active and deleted when you delete your account, except where retention is required by law.

Where GDPR or similar laws apply, we rely on one or more of the following:

• Contract: processing necessary to provide the Services you request (for example hosting your profile and group content).
• Consent: where required, for example marketing emails beyond strictly transactional notices, or optional permissions such as location, camera, microphone, photo, or notification access when the operating system requires consent.
• Legitimate interests: for example securing the Services, understanding usage to improve the product, and preventing abuse, balanced against your rights.
• Legal obligation: where we must retain or disclose information to comply with the law.

We use service providers to operate kndi. They include:

• Supabase: hosted database, authentication, file storage (for example avatars, chat media, and group photos), application APIs, and realtime subscriptions that power live messaging, notifications, and presence features. The app maintains a persistent connection to Supabase Realtime while in use.
• PostHog: product analytics for the usage and error events described above, hosted in the United States. We use it to understand and improve the product, not for advertising.
• Apple: if you use Sign in with Apple or install the app from the App Store, Apple processes data under its own policies. Apple also delivers our push notifications, provides the maps shown in the app, and answers the song searches behind pinned-song previews.
• Google: if you choose Sign in with Google, Google processes data as described in Google’s policies for that sign-in flow.
• Spotify: song searches and artist links are looked up through our servers. We do not connect to your Spotify account.
• GIPHY: when you search for a GIF, your search terms go to GIPHY, and GIPHY is told when a GIF is viewed or sent.
• Photon by Komoot (OpenStreetMap data): city and place search. The text you type is sent to this service, and so are your coordinates when you use your device location to find your city.
• Expo: delivers app updates. The app checks Expo's update service for a newer version when it starts.
• Cloudflare: hosts our websites.
• SMS and email delivery: phone and email one-time codes are delivered through infrastructure configured with our authentication provider (which may use telecommunications or email delivery vendors).
• Links people share: when a message or a group detail contains a link, the app loads a preview from that website, which receives your device's IP address like any site you visit. Opening a link, a map, or a music app from kndi takes you to a service with its own policies.
• Public event and music sources: we integrate and store metadata about concerts, festivals, and artists from third-party sources (including EDMTrain, Clashfinder, Spotify, Apple Music, Last.fm, MusicBrainz, and Discogs) so you can search and attach events to groups. That information is catalog data, not your private messages, and we do not send your personal information to those sources.

We do not sell your personal information as “sale” is defined under the CCPA/CPRA. We do not show ads and do not use advertising SDKs in the product today. If we add advertising tools or new analytics providers in the future, we will update this policy and any required disclosures (including platform data disclosures) before they go live.

We share information with service providers who process it on our instructions to host and operate the Services. We may disclose information if required by law, legal process, or to protect the rights, safety, and security of users, us, or others. If we are involved in a merger, acquisition, or asset sale, your information may transfer as part of that transaction, subject to standard protections.

Parts of the Services are social by design. What other users can see depends on the feature and your settings:

• Your profile. Unless you turn on Private Account, your profile (including your name, photo, biography, home city, kandi, and public memories) is visible to other kndi users. With a private account, only your name and photo are visible to people who do not follow you.
• KP, rank, and leaderboards. Your kandi points, rank, and event check-ins feed leaderboards that other users can see.
• Groups. Messages, photos, plans, rides, and map pins in a group are visible to that group's members. Anyone with a group's invite link, code, or QR can see a preview of the group before joining.
• Memories. A memory marked public appears on the profile of the person you exchanged kandi with. A memory marked private stays between the two of you.
• Blocks. When you block someone, they can no longer find your profile or message you.

We may process and store information in the United States and other countries where we or our providers operate. Those countries may have different data protection laws than your own. Where required, we use appropriate safeguards (such as contractual clauses) for international transfers.

We keep information for as long as your account is active and as needed to provide the Services. You can delete your account at any time in the app under Settings. Deleting your account permanently removes your profile, messages, trades, the kandi you hold, and the other records tied to your account from our live database. Kandi you traded or gifted stay with the people who hold them, and groups you created remain for their members, without your name attached.

Copies of photos, videos, and voice messages you uploaded, and usage events already recorded, can remain in our storage and analytics systems after your account is deleted, until we remove them. Email [email protected] to have them removed and we will do so. We may retain certain records after you close your account where required by law or for legitimate purposes such as security backups, dispute resolution, and enforcing our agreements. Technical logs are typically retained for a limited period.

We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or export personal information we hold about you, and to object to or restrict certain processing. You may also have the right to withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

In the app. You can edit your profile, make your account private, turn read receipts off, manage notifications, block other users, and delete your account from Settings. Location, camera, microphone, photo, and notification permissions can be changed at any time in your device settings.

California residents (CCPA/CPRA). You have the right to know categories and specific pieces of personal information we collect, the right to delete personal information subject to exceptions, and the right to correct inaccurate information. We do not sell or share personal information for cross-context behavioral advertising as defined by CPRA. You may designate an authorized agent where permitted by law.

Washington residents (My Health MY Data Act). Washington's My Health MY Data Act (MHMD) provides additional protections for consumer health data. To the extent MHMD applies to information we collect, such as location data (your home city and the device location used for event check-ins) or schedule and event attendance patterns that may reflect health-relevant inferences, you have the right to confirm whether we collect such data, access it, withdraw consent to its collection, and request deletion. We do not sell consumer health data. To exercise these rights or for a copy of our MHMD consumer health data policy, contact [email protected].

To exercise rights, contact [email protected]. We may need to verify your request. You may also have the right to lodge a complaint with a supervisory authority in your country.

kndi uses a third-party SMS provider (currently Twilio) to send one-time verification codes (OTP) via text message when you sign in or create an account using a phone number. These messages are transactional. They are sent only in direct response to your request to authenticate and are not marketing messages.

• Program: kndi account verification.
• Message frequency: One message per verification request.
• Message and data rates may apply.
• To opt out: Reply STOP to any verification message. You can also sign in with another method you have linked to your account.
• For help: Reply HELP or contact [email protected].

We do not share or sell mobile opt-in data, including your phone number and SMS consent status, with third parties, affiliates, or lead generators for marketing or promotional purposes. Phone numbers collected for SMS verification are used solely to deliver authentication codes and are not transferred to any party for advertising.

How you opt in, step by step, is described on our SMS Verification page.

Our public website does not set analytics or advertising cookies. Our hosting provider may set strictly necessary cookies that keep the site secure and working, and these cannot be disabled without breaking the site. The app does not use cookies; it keeps your session and cached data in storage on your device, as described above.

You can manage or block cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Services from functioning. We do not use cookies for cross-site advertising or behavioral tracking.

We do not track you across apps and websites owned by other companies, and we do not share your information with data brokers. Because of that, the app does not show an App Tracking Transparency prompt. The analytics described above are used only to understand and improve kndi. If that changes, we will update the app and this Policy accordingly.

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date at the top. If changes are material, we will provide additional notice as appropriate (for example, an in-app notice or email where we have your address).