Privacy Policy

1. What we collect

Information you give us:

• Account details: email address, and your name if you sign in with Google or Apple. If you use "Hide my email" on Apple, we receive the relay address Apple gives us.
• Profile: display name, username, bio, phone number (optional), profile photo, interests (categories) and how far from home you want to see events.
• Location you choose: your home city, state and country, saved with the coordinates of that place. You set it by allowing the app to detect where you are, or by searching for a city.
• Events you create: name, description, dates, place, cover image, categories, and whether the event is private or needs approval.
• Activity: events you join or are invited to, your follows and followers, your notifications, and the list of people you have blocked.
• Messages: direct messages and event group chats, including text, photos, replies and read status.

2. What we collect automatically

• Device notification token, device type (iOS or Android) and when the device was last active, so we can send you push notifications.
• Your device location, only while you are using the app and only if you allow it, when you ask us to find your city or place an event where you are. We do not track your location in the background.
• Technical data our servers and hosting handle for every request, such as IP address, request time and error logs, used to keep Loki secure and running.

3. The lokisocial.com website

Browsing lokisocial.com needs no account. Two things on it involve your data:

• Early access list: if you join, we collect your email address and country so we can email you when Loki opens near you. We keep them until we have invited everyone on the list, or until you ask us to remove yours by emailing hello@loki.events. We store them with Amazon Web Services in the United States and do not share them.
• Analytics (only if you accept): the first time you visit, a banner asks whether we may use Google Analytics. If you say no, nothing from Google is loaded and no analytics cookies are set. If you say yes, Google Analytics sets cookies and receives your visit data: pages viewed, approximate location, device and browser, and how you arrived, along with an event when you join the early access list (which country you chose, never your email). Google processes it under its own privacy policy. You can change your answer at any time with "Analytics preferences" in the site footer, and choosing no removes the analytics cookies.

4. Permissions the app asks for

• Location (while using the app): to detect your city during setup and to place events on the map.
• Photos: only when you choose to set a profile photo or add an image. We receive the pictures you pick, not your whole library.
• Notifications: to alert you about invites, approvals, messages and event updates. You can turn them off in the app (Profile > Settings > Notifications) or in your device settings.

5. How we use it

• To run Loki: sign you in, show events near you, let you create and join events, follow people, and deliver messages.
• To send notifications you have not turned off, such as invites, join approvals and chat messages.
• To keep people safe and the service secure: prevent abuse, investigate reports, and enforce our Terms.
• To improve Loki, using the information we hold rather than third-party trackers in the app, and, only if you accept analytics on lokisocial.com, statistics about how the website is used.
• To follow the law and respond to valid legal requests.

6. Who can see what

• Other Loki users can see your username, display name, profile photo and bio, and the events you organize or join, subject to each event's privacy setting. Attendees of an event can see who else is going.
• Your messages are visible to the people in that conversation or event chat. Anyone in a conversation can copy or screenshot what you send.
• Your email address, phone number, exact coordinates and notification token are not shown on your profile. They are used by Loki to operate the service.
• Who you have blocked is visible only to you. We never tell someone they have been blocked.
• Events you make public can be seen by any Loki user, including their place and time. Think before you post a private address in a public event.

7. Who we share it with

We share data only with the providers that run Loki for us, and only as far as needed to do so:

• Google Firebase: authentication (including Google sign-in) and push notification delivery.
• Google Analytics on lokisocial.com, only if you accept analytics there. Not used in the app.
• Apple: Sign in with Apple and iOS push delivery.
• Amazon Web Services: hosting for our servers and database, and storage for profile and event images. Our servers are in the United States (us-east-1).
• Your device's map provider (Apple Maps on iOS, Google Maps on Android) when you view the map. That provider receives what the map needs to draw the area you are viewing and is covered by its own privacy policy.
• Authorities or other parties when the law requires it, or to protect the safety of people or Loki.
• A successor company, if Loki is ever merged or acquired, with the same protections for your data.

8. How long we keep it

We keep your data while your account is active. You can delete your account at any time from Profile > Settings > Delete Account, and it takes effect immediately.

Deleting erases your profile details, photos, saved location, interests, follows, RSVPs and notification tokens, and removes your sign-in. Any events you were organizing are cancelled, and everyone going to them is notified.

Messages you sent stay in the conversations you sent them to, shown as coming from "Deleted user", so the people you were talking to keep a readable thread. Your name, handle, photo and contact details are gone from them.

Copies in backups and logs are overwritten on their normal schedule, and we may keep limited records where the law or a safety investigation requires it.

9. Your choices and rights

• Edit your profile, location, interests and photo in the app at any time.
• Turn notifications off in the app or in your device settings.
• Withdraw location or photo access in your device settings.
• Delete your account from Profile > Settings > Delete Account. This cannot be undone.
• Ask us for a copy of your data or to correct it by emailing hello@loki.events from the address on your account. We will reply within 30 days.
• Depending on where you live (for example the EU, UK or California), you may have additional rights such as objecting to processing or complaining to your data protection authority. We honor these regardless of where you live.

10. Security

Sign-in is handled by Firebase Authentication and access to our systems is restricted. No system is perfectly secure, so please use a strong, unique password and tell us right away if you think your account was accessed by someone else.

11. Where your data is processed

Loki is operated from the United States. If you use it from elsewhere, your information is transferred to and processed in the United States, where data protection laws may differ from those in your country.

12. Children

Loki is for people 18 and over. We do not knowingly collect data from anyone younger. If you believe someone under 18 has an account, email hello@loki.events and we will remove it.

13. Changes to this policy

If we change how we handle your data, we will update this page and the date above, and tell you in the app or by email when the change is material.

14. Contact

Privacy questions or requests: hello@loki.events.