Privacy policy

The short version

• You can read everything without an account. We ask you to sign in only when you do something personal.
• We never sell your data, never show ads and never track you across other apps or websites.
• Photos you post are stripped of location and camera details on our servers before anyone else sees them.
• We only ever use your approximate location, and only to measure how far conventions are.
• You can download everything we hold about you, or delete your account, from the app at any time: You → Privacy.

Who we are

Convenux is responsible (the “controller”) for the personal data described here. Convenux is a trade name of a Dutch sole proprietorship (eenmanszaak) registered with the Netherlands Chamber of Commerce (KVK) under number 81481195 (VAT ID NL003567984B67), at Spuikreek 177, 3079 AG Rotterdam, the Netherlands. You can reach us at hello@convenux.com about anything in this policy.

What we collect, and why

When you use the app without an account

• Your city or approximate location, if you give it during setup. It stays on your phone and is sent with a request only to measure distances to conventions. We never ask for your precise location.
• The interests you pick, kept on your phone to choose what Home shows.
• Usage statistics (see below), under a random ID made on your phone.

Your account

You sign in with Apple, Google, Facebook or Discord, and the same account works in the app and on db.convenux.com. We receive your name, your email address where the provider shares it (Apple lets you hide it behind a relay address), your profile picture and username where the provider has them, and the provider’s ID for you. If you sign in with a second provider that confirms the same email address, it opens the same account. We use these to run your account and show your name to other people where you appear. We never receive or store your password.

What you add and do

• Your profile: display name, city, a short bio and your favourite categories.
• The conventions you save or attend (and whether you said you have a ticket), the sessions in your plan, the meetups you host or join, the people you follow and block, and your saved searches.
• Photos you post, with their captions, the convention and day or the meetup you post them to, likes and comments. We decode every photo on our servers and save new copies with no location, no camera details and no other metadata from your phone, then delete the file you uploaded.
• Badge scans: when someone scans your badge (to follow you, or to check you in to their meetup), we record who scanned whom.
• Reports you file, what the automatic check found in photos you post, and any decision about content you posted or about your account.
• On db.convenux.com: the corrections, additions and flags you send, and the API keys you create. When you delete your account, what you added to the database stays there without your name.
• When you are signed in, your city and approximate coordinates, search radius and timezone, so that “new cons nearby”, quiet hours and the times in notifications are right for you.

We use all of this to provide the features you use (the legal basis is our agreement with you, the terms), and reports and moderation records also to keep the community safe (our legitimate interest, and our obligations as a platform).

Notifications

If you allow notifications, we store a push token for your device and a list of the notifications we sent you, which is your in-app inbox. The reminders you choose for a convention or a session in your plan are saved with your account; session reminders then go off on your phone.

Usage statistics

The app records which screens and buttons are used, such as “opened a convention” or “joined a meetup”, under a random ID made on your phone. When you are signed in, our server links these events to your account, which is how we can tell whether people who planned a convention came back to the app during it. We use them only to understand and improve Convenux, and delete them after 90 days. You can switch them off in the app under You → Privacy → Share usage statistics.

On convenux.com and db.convenux.com we count page views without cookies and without storing anything on your device. There is nothing to consent to and no banner.

Crash reports and server logs

When the app crashes we may receive a crash report: the app version, your device model and operating system and what the app was doing. It does not contain your name or email. Our servers and our network provider keep technical logs, including IP addresses, for a short time to keep the service running and to stop abuse.

The waitlist

If you join the waitlist on convenux.com, we keep your email address to tell you when you can get in, and to send you your invitation. You can unsubscribe from any of those emails.

What other people can see

• Photos you post to a convention are public: anyone can see them in its gallery, even without an account, until you delete them. Anyone can also share one as a link: it opens a page on convenux.com with the photo, its caption and your name, which apps and sites may show as a link preview. A photo posted to a listed meetup can be seen by anyone who opens that meetup; one posted to a link-only meetup only by the people going to it. Either way it shows in the feed of the people going. A photo tied to neither shows in the feed of the people who follow you, and on your profile if it is public.
• Your name and picture appear wherever you do something visible: posts, comments, meetups you host. Your profile shows your city, bio and photos only if Public profile is on (it is off by default), and the conventions you are going to only if you also switch on Show my Conventions tab.
• Meetups you host are visible to everyone, unless you make one link-only. Other people see how many are going, not who. If someone follows you and you attend a convention, they see you only as part of a number (“3 people you follow are going”), never by name.
• People you block, and people who block you, do not see each other’s posts, comments or meetups.
• We never show your email address to anyone.

Convention guests

Listings name the guests a convention announces, as the organiser published them. For some guests we also show a photo and a one-line description from Wikidata and Wikimedia Commons, which publish them under open licences, with the photographer credited. We do this because it helps people see who is appearing (our legitimate interest), and keep it for as long as the listing. If you are a guest and want your photo or description removed or corrected, email us and we will do it.

Who helps us

We use a small number of service providers who process data on our behalf, under contracts that require them to protect it the way this policy does and to use it only for us:

• DigitalOcean runs our servers and databases, in Amsterdam, the Netherlands.
• Cloudflare delivers our websites and API, protects them from attacks, stores the photos people post (Cloudflare R2), and receives email sent to convenux.com addresses.
• Google (Gmail) holds the emails you send us.
• Expo delivers push notifications, through Apple’s and Google’s push services.
• Google Cloud Vision, when automated screening is switched on, checks each posted photo once for sexual or violent content before it is published.
• Sentry receives crash reports, and PostHog (in the EU) usage statistics, when we switch them on.
• Resend sends our emails, such as waitlist invitations.
• Apple, Google, Facebook (Meta) and Discord sign you in. What they know about you is governed by their own privacy policies.
• Apple Maps on iPhone and Google Maps on Android draw venue maps, and guest photos load straight from Wikimedia Commons. Like any website, they see your IP address when your phone or browser loads from them.

Some of these providers are based in, or reach data from, the United States. Where that happens, the transfer is covered by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

We do not sell personal data, share it with advertisers or data brokers, or use it for advertising.

How long we keep it

• Your account and everything attached to it: until you delete your account.
• A photo or comment: until you delete it, or your account. Deleting removes the images from storage at once.
• Photos you started uploading but never posted: deleted within a day.
• Usage statistics: 90 days. When you delete your account they stop being linked to you straight away.
• Content a moderator removes, or the automatic check rejects, is deleted from storage at that moment; we keep a record that it existed and why it was removed, to handle appeals and repeat abuse.
• Deleted data can remain in our encrypted backups until those are overwritten.

Your rights

Wherever you live, you can:

• Get a copy of your data: in the app, You → Privacy → Download my data gives you everything we hold about you as one file.
• Correct it: most of it is editable in the app, or email us.
• Delete your account: You → Privacy → Delete account, or follow these steps without the app.
• Object or withdraw consent: switch off notifications, location or usage statistics at any time in the app or in your phone’s settings, or email us to object to anything else.

If you are in the EU, the EEA or the UK, you also have the rights to restrict processing and to data portability, and you can complain to your data protection authority. We answer every request within a month.

Children

Convenux is not meant for children under 13, and we do not knowingly collect their data. In the EU, the EEA and the UK you need to be at least 16 to create an account, or the lower age your country sets for agreeing to this yourself. If you believe a child has an account, tell us and we will delete it.

Security

Everything travels over encrypted connections. Your sign-in is kept in your phone’s secure storage, and we never store passwords. No system is perfectly secure, but we limit what we collect so there is less to lose.

Changes

If we change this policy in a way that matters, we will tell you in the app before it takes effect. The date at the top says when it last changed.

Contact

Questions, requests or complaints: hello@convenux.com.