Privacy Policy
Last updated: October 18, 2026
Overview
Euda ("the App", "we", "our") is a social app that helps you discover local events and activities, check in with photos, and connect with friends. This policy explains what information we collect, how we use it, and the choices you have.
1. Information We Collect
Information you provide
- Account information: Email address, password, and a username you choose when you sign up.
- Profile information: Optional avatar photo and bio text.
- Phone number (optional): If you choose to add your phone number for friend discovery. We store it in normalized format and as a one-way hash (SHA-256). See Section 5 for details on contacts sync.
- Posts: Photos you take and optional captions when you check in at events or activities. Photos are stored in our cloud storage.
- Social interactions: RSVPs to events, friend requests, post reactions, and comments.
Information collected automatically
- Usage data: We record certain actions you take in the App (e.g., opening the Explore tab, starting a post, tapping on an event) to understand how people use Euda and improve the experience. These records contain your user ID, the action name, and a timestamp. They do not contain the content of your posts, messages, or personal details.
- Interaction preferences: When you view, RSVP to, share, or post about events and activities, we track which categories and types (events vs. activities) you engage with. This powers personalized recommendations in your Explore feed.
- Check-in location: Posting on Euda is a check-in, so the App confirms you are actually at the place before it lets you post. The coordinates it used to confirm that, and the time, are stored on our servers with the post — that is what makes a Euda post evidence of being somewhere rather than a claim about it. Those precise coordinates are not readable by other users. Database permissions withhold them from every copy of the App, including yours: the only location anyone else can see is the venue’s own published location, or — for a post you make away from a listed venue — your coordinate rounded to a grid of roughly 130 metres.
- Crash reports: If the App crashes, we send an error report to our crash reporting service (Sentry). These reports include technical information about the crash (stack traces, device model, OS version) but not your email, phone number, contacts, or authentication tokens. Only your anonymous user ID is attached.
Information we do NOT collect
- No background location, and no location history. The App reads your location only while you are using it — never in the background, never while it is closed — and we keep no trail of where you have been. The only coordinate we store is the one attached to a post you chose to make; see “Check-in location” above.
- No hardware identifiers. We do not collect your device’s UDID, IMEI, or hardware serial numbers. See “Advertising and measurement” below for the one advertising identifier that may be used, and only with your permission.
- No general analytics trackers. We do not use Google Analytics, Mixpanel, or similar services. We do use Meta’s SDK solely to measure our own advertising — see “Advertising and measurement” below.
- No audio or video. The App captures still photos only.
- No health or biometric data.
2. How We Use Your Information
| Purpose | Data used |
|---|
| Provide the App's core features (feed, explore, check-in) | Account info, posts (including the check-in coordinate), social interactions |
| Personalize your Explore feed | Interaction preferences (categories, tags) |
| Help you find friends from your contacts | Phone numbers from your contacts, hashed on our server (see Section 5) |
| Diagnose crashes and bugs | Crash reports (anonymized) |
| Understand usage patterns and improve the App | Aggregated usage data |
| Prevent abuse and enforce our Terms | Account info, usage data |
We do not sell your personal information. We do not use your content — your photos, captions, comments, location or contacts — to target advertising. We do measure how well our own advertising works; see “Advertising and measurement” below.
3. How We Share Your Information
With other Euda users
- Your username, avatar, bio, and posts are visible to other users of the App.
- Your RSVP status (going/not going) is visible on event detail pages.
- Your friend list is visible to your friends.
With service providers
| Service | Purpose | Data shared |
|---|
| Supabase (backend) | Database, authentication, file storage | All account and content data (they are our primary infrastructure provider) |
| Sentry (crash reporting) | Error monitoring | Crash data with anonymized user ID; PII is scrubbed before transmission |
| Apple / Google (app distribution) | App Store and Play Store | Standard distribution metadata |
With content enrichment services (server-side only)
To populate the Explore feed with local events and activities, our servers communicate with:
- Google Places API — to discover local businesses and activities
- Ticketmaster API — to discover local events
- AI language models (Anthropic Claude, OpenAI) — to generate event descriptions and tags
No user data is sent to these services. They receive only event/venue data for enrichment purposes, and these calls are made from our server, not from your device.
We do not share your data with
- Data brokers
- Government agencies (unless required by law)
- Advertisers — with one narrow exception, described immediately below
Advertising and measurement
We use Meta’s software development kit to measure how well our advertising works. When you
use Euda, we send Meta a small, fixed set of anonymous events: that the app was installed and
opened, that an account was created, and that a first post was published.
We do not send Meta your location, the places you visit, your photos or captions,
your contacts, or any information about other people. We do not send Meta your email address or
phone number, and we do not use Meta’s advanced matching features. The events carry no
additional details — only that they happened.
On iOS, Apple asks your permission before apps may link this activity with data collected by
other companies’ apps for advertising measurement. Euda asks at launch —
the request appears the first time you open the App, as soon as it is on screen. Apple requires the
request to come before any data that could be used for tracking is collected, which is why it comes
first rather than later in the app. If you decline, we still measure our advertising, but only in
aggregate — Meta receives no identifier that can single you out. You can change your choice at
any time in Settings → Privacy & Security → Tracking.
Declining has no effect on anything else in Euda. Every feature works the same
either way.
4. Device Permissions
| Permission | Why | When prompted |
|---|
| Camera | To take photos for check-in posts | When you first tap "Check In & Post" |
| Location (when in use) | To verify you are at an event's location before posting | When you first tap "Check In & Post" |
| Contacts (optional) | To find friends who also use Euda | When you tap "Find Friends from Contacts" in Settings |
You can revoke any permission at any time in your device's Settings app. The App will continue to work with reduced functionality.
5. Contacts Sync and Phone Number Hashing
If you choose to use the "Find Friends from Contacts" feature:
- The App reads phone numbers only from your device contacts. It does not read names, emails, addresses, or any other contact fields.
- The App puts those numbers into a standard international format and sends them to our server over an encrypted connection, in batches of up to 500.
- Our server hashes each number as it arrives (SHA-256 with a secret salt) and works only with the hashes from that point on. The hashing happens on the server, not on your device, because hashing on the device meant shipping the salt inside the App — and a salt anyone can read makes the hashes reversible by anyone willing to test numbers against them.
- Our server compares these hashes against the hashed phone numbers of other users who have voluntarily added their phone number to their profile.
- Matching profiles (username and avatar only) are returned to you.
- Neither the numbers you send nor the hashes made from them are stored. Only the result of the comparison — which Euda accounts to suggest to you — is saved.
You can add your own phone number to your profile in Settings to allow your contacts to find you. This is entirely optional.
6. Data Storage and Security
- Database and storage: Hosted on Supabase (built on AWS infrastructure).
- Authentication: Passwords are hashed by Supabase Auth (bcrypt). We never store or see plaintext passwords.
- Session tokens: Stored in your device's encrypted secure storage (iOS Keychain / Android Keystore). On web, tokens use browser local storage.
- Row-level security: Database access is restricted so users can only read and modify their own data, with limited exceptions for social features (viewing posts, friend profiles).
- Storage buckets: Post photos and avatars are stored in cloud buckets that are readable by authenticated users (necessary for the social feed).
7. Data Retention
- Account data: Retained as long as your account is active.
- Posts and photos: Retained until you delete them or delete your account.
- Interaction data: Retained as long as your account is active to power recommendations.
- Crash reports: Retained by Sentry per their retention policy (typically 90 days).
8. Your Rights and Choices
Delete your account
You can permanently delete your account from Settings > Delete Account. This will:
- Remove your profile, posts, photos, comments, reactions, friendships, RSVPs, interaction history, and analytics data
- Remove your photos from cloud storage
- This action is irreversible
Delete individual posts
You can delete any post you created from the feed.
Manage permissions
You can revoke camera, location, or contacts permissions at any time from your device Settings.
Export your data
Data export is not yet available in the App. Contact us at the email below to request a copy of your data.
9. Children's Privacy
Euda is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes through the App or via email. The "Last updated" date at the top reflects the most recent revision.
11. Contact Us
If you have questions about this policy or your data:
Email: support@euda.live