Come Together Privacy Policy

Come Together is operated by Fullstack Dev KZ, Almaty, Kazakhstan. Privacy questions may be sent to info@fullstackdev.kz.

Account and authentication data

• Name and email address
• Hashed password and authentication or session information
• Account creation, sign-in, role, and account-status information

Club and event data

• Club name, description, city, country, time zone, and currency
• Event title, description, venue, schedule, capacity, displayed price, and status
• Club and event images uploaded by organizers through the connected web service

Booking and attendance data

• Guest name and email address
• Booking, confirmation, waitlist, cancellation, and attendance status
• Event-level attendance and returning-guest information used for organizer insights

Device and notification data

• Expo push token and notification permission status when notifications are enabled
• Selected app language and device locale used to format the interface and dates
• App version, operating system, request time, IP address, and limited diagnostic or security logs

Authentication credentials are stored on the device using protected app storage. Come Together does not collect precise location, contacts, photos, microphone data, advertising identifiers, or payment-card details through the Android companion.

• Create and authenticate organizer and guest accounts
• Publish club and event pages and show local schedules
• Manage bookings, capacity, waitlists, cancellations, and attendance
• Synchronize organizer data between the website and Android companion
• Send booking confirmations, reminders, event changes, and operational push notifications
• Calculate attendance and repeat-booking insights for organizers
• Provide support, prevent abuse, secure the service, and diagnose failures

Come Together does not sell personal information and does not use account, booking, or attendance information for third-party advertising.

Information may be processed by providers that help operate Come Together:

• Vercel for website hosting, server functions, and public image delivery
• Neon for managed PostgreSQL database hosting
• Resend for transactional email and website request delivery
• Expo and Firebase infrastructure for Android push notifications
• Google Play for app distribution and platform services
• RevenueCat for entitlement management if paid mobile features are activated

Providers may process data in countries other than the user's country. We may also disclose information when required by law, to protect users or the service, or during a business transfer subject to appropriate safeguards.

Account, club, event, booking, waitlist, attendance, and notification data are retained while the account or pilot is active and as needed to provide event history, support, security, and legal compliance.

After a verified organizer-account deletion request, we delete the account and associated clubs, events, images, bookings, waitlists, attendance records, and registered push tokens from active systems, except where limited retention is legally or operationally required. A verified guest-account request deletes the account and removes or anonymizes associated booking and attendance records where appropriate.

We aim to complete verified requests within 30 days. Residual copies may remain in encrypted or access-controlled backups for up to 90 days before routine deletion. Limited records may be retained longer for legal obligations, fraud prevention, security, accounting, or dispute resolution.

Users may disable Android notifications in device settings and can change the app language in the companion. Depending on applicable law, users may request access, correction, deletion, restriction, or objection regarding their personal information. We may need to verify identity before acting.

Come Together uses HTTPS in transit, hashed passwords, protected device credential storage, restricted service access, and managed infrastructure. No internet service can guarantee absolute security. Users should protect their passwords and lock devices that can access organizer data.

Come Together is not directed to children under 16. Organizers are responsible for obtaining any permissions required for activities involving minors and for collecting only information reasonably needed to run those activities.

We may update this policy when the app, connected service, or data practices change. The current version will remain available at this URL with a revised date.

Send privacy questions to info@fullstackdev.kz, or use the Come Together deletion-request page.