This Privacy Policy explains how Eventure collects, uses, shares, and protects your personal data when you use the Eventure app and services in Jordan. It applies to both Explorers and Hosts. By using Eventure you agree to the practices described here.
1. Who we are
Eventure ("we", "us") operates the Eventure event-discovery app. For questions about your data, or to exercise any of your rights, contact us at privacy@eventurejo.com. This mailbox also serves as our data-protection contact.
2. Data we collect
Account and profile: your email, a securely hashed password, full name, username, date of birth (used to confirm you meet the minimum age and to show your age band), gender, short bio, profile photo, preferred language, and your chosen interests.
Location: your city (Eventure currently serves Amman only). We do not collect your device location to personalise the app or to sort events by distance. If you are a Host, the venue picker can use your device location once, on your device, to centre the map; we store only the venue you choose for an event, as part of that event.
Activity: events you save, join, or reserve, your tickets and QR codes, reviews you write, and in-app behaviour signals (events shown to you, views, searches, saves, and joins) used to improve recommendations. We also keep the achievements you earn (worked out from your check-ins, reviews and questions) and your daily streak (how many days in a row you opened the app, by date only). Other people see the achievement tiers on your profile, never the counts behind them. If you get tickets for other people, we store the name you give each guest ticket and show it to you and to the event's Host. If you send a ticket to a friend, we keep a record of that offer (who sent it, who received it, and whether it was accepted).
Social: the people and Hosts you follow, your friend connections, and users you block.
University: if you add a university to your profile, we store which university and your student number. To confirm you study there, we send a one-time link to your university email address (your student number followed by the university's email domain, for example @htu.edu.jo). We use them only to give you access to that university's campus events, which its clubs publish for its students, and to show that you are a confirmed student. Once confirmed, a badge with the university's logo shows on your profile and next to your name, so other users can see which university you are at. A student number can be confirmed on one account at a time. You can change or remove it at any time in Edit profile, which also removes the badge.
Messages: if you use direct messages, we store the messages you send and receive, including any event, review, or Host you share. Messages are kept on our servers and encrypted in transit and at rest. They are not end-to-end encrypted: this means they can be reviewed by our automated safety systems, and by our team when a message is reported, so we can keep the community safe. Messaging is available between regular accounts only.
Hosts also provide business details (display name, logo and banner, contact email and phone, website and social links, categories, and event content).
Team accounts: if a Host invites you to their team, we store your name, photo, email, preferred language, your role and which events you can access, and a log of the actions you take on the Host's account (for example publishing an event or checking a guest in), which the Host can see.
Account security: for each sign-in we record the device model and operating system, the app version (or the browser, on the web), the IP address and an approximate location worked out from it (country and network provider only, never your exact location), and when the session started and was last used. We also keep an identifier for each device the app is installed on (on Android it stays the same when you reinstall the app, so one phone is listed once), stored only in a scrambled (hashed) form. We use this to show you where you are logged in, to alert you by email and notification about new logins and security changes, and to detect fraud and accounts that try to get around a ban.
3. Why we use your data and our legal basis
To provide the service and your account, and to process reservations and tickets (performance of our contract with you).
To personalise discovery and recommendations, keep the service safe, protect your account and alert you to suspicious activity, prevent fraud and abuse, and understand how features are used (our legitimate interests). We also use your interests to choose which featured events to show you. Featured events are placements Hosts pay for; they are always labelled Featured and are only shown to people whose interests match them. When the app crashes or hits an unexpected error, it sends a crash report so we can fix it: the error details, your device model, operating system and app version. Crash reports do not include your name, email, account ID or anything you post.
To send you optional updates and to collect optional usage analytics (your consent, which you can withdraw at any time in Settings under Data and consent).
To meet legal and regulatory obligations in Jordan (legal obligation).
4. Who we share it with
We do not sell your personal data. We share it only with:
Hosts (event organisers), when you join, reserve, or join the waitlist for one of their events. So the Host can run the event, check you in, and contact you about it, they can see: your full name, username, and profile photo; your age (worked out from your date of birth, which they do not see), gender, and city; your interests; your phone number and account email address (unless your sign-in provider hides your real address, for example Apple's Hide My Email); your ticket, its reference, your check-in status, and whether cash was paid; and your history with that Host, meaning which of their events you joined and checked in to, any reviews and ratings you left on their events, and whether you follow them. This is shared with the Host even if you set those fields to "Friends" or "No one" in your profile privacy settings, because those settings control what other users see on your profile, not what the organiser of an event you joined sees. Hosts cannot see your exact location, your date of birth, your friends list, your messages, your payment details, or the events you attend with other Hosts. If you added a university, its clubs (Hosts linked to that university) can also see your student number when you join, reserve, or join the waitlist for one of their events.
Hosts keep a list of everyone who has joined any of their events, with the information above, for as long as both accounts exist, and they can download that list as a spreadsheet. A downloaded copy is held by the Host outside Eventure, and the Host is responsible for it under our Terms. A Host may give members of its own team (team accounts it invites) access to this information, limited to what each member's role allows; they act for the Host, and the Host is responsible for them. Hosts may only use attendee information to run their events and to contact attendees about them, and must not sell it or share it with anyone else.
Service providers who process data on our behalf under contract: Supabase (secure hosting, database, authentication, and file storage) Google Maps (to display maps and places), Resend (to send account, booking, and security emails), Google Firebase (crash reports, push notifications, and usage analytics if you allow them), and IPinfo (to work out the approximate country and network of a sign-in IP address). These providers may process data on servers located outside Jordan.
Authorities, where we are legally required to do so, or to protect the rights and safety of users and the public.
5. International transfers
Because our hosting and mapping providers operate globally, your data may be stored or processed outside Jordan. Where this happens we rely on the providers' contractual and security safeguards to protect your data to a standard consistent with this policy.
6. How long we keep it
We keep your personal data for as long as your account is active. When you delete your account, your profile and personal data are erased (see section 8). We keep a minimal, de-identified record of the deletion (an account identifier and date, with no name or email) for up to 12 months to prevent fraud and abuse. Some records that are not personal to you, such as another user's review of an event, or anonymised and aggregated statistics, may be retained. Behavioural signals used for recommendations fade over time. Sign-in history and security alerts are kept for 180 days. A login that is not used for 90 days is ended, and a login saved on a device expires then too. A team's activity log is kept for as long as the Host's account exists.
7. Your choices and rights
You can access and update most of your information directly in the app (profile, interests, privacy settings, and blocked users). Subject to applicable law, you also have the right to request a copy of your data, correct it, delete it, object to or restrict certain uses, withdraw consent, and receive your data in a portable format. To make a request that you cannot complete in the app, email privacy@eventurejo.com. You may also lodge a complaint with the competent data-protection authority in Jordan.
8. Deleting your account
You can permanently delete your account at any time from Settings. Deletion removes your profile, saved events, reservations, tickets, reviews, connections, direct messages, and uploaded images. If you are a Host, your upcoming events are cancelled and attendees are notified. If you have active reservations when you delete your account, they are cancelled as part of the deletion. These cancellations are treated like any other cancellation and are subject to the Host's cancellation policy for each event, so a card booking cancelled close to the start time may not be refunded. Cash reservations simply release your place. Deletion is permanent and cannot be undone. Deletion also removes you from every Host's attendee list in Eventure. It cannot remove a copy a Host has already downloaded; to ask a Host to delete theirs, contact the Host directly, or email us and we will pass on your request.
9. Children
The minimum age to use Eventure is 18. We do not knowingly collect data from anyone under 18, and the app enforces this at sign-up. If you believe a child under 18 has created an account, contact privacy@eventurejo.com and we will remove it.
10. How we protect your data
Passwords are stored hashed, your session is kept in your device's secure storage, and data is encrypted in transit. Access to data is controlled by row-level security rules so users can only reach data they are permitted to see.
11. If there is a data breach
If a breach affects your personal data and is likely to create a risk to you, we will notify the competent authority and affected users without undue delay, and describe the steps we are taking in response.
12. Changes to this policy
We may update this policy. We will change the version date above and, for significant changes, ask for your consent again in the app. Continued use after an update means you accept the revised policy.
13. Contact
For any privacy question or request, email privacy@eventurejo.com.