Your Privacy Matters

EvntShare is operated by Alex Stewart ("I", "me", "my"), the data controller responsible for your personal data. We are registered with the Information Commissioner's Office (ICO) under registration reference ZC163044. For any privacy-related queries, please contact me at: evntshare@gmail.com

We collect the following categories of personal data: • Account data — your name, email address, username, and password (stored as a hashed value) • Profile data — profile photo, bio, home location (optional) • Event data — events you create, attend, review, rate, and upload media for • Usage data — how you use the App, which features you interact with • Device data — device type, operating system, push notification token • Location data — only when you use the location filter in Discovery; your precise coordinates are used only for that search and are never stored on our servers • Communications — messages you send to other users via the in-app messaging feature • Preferences — your music genre and event type preferences set during onboarding We do not collect payment card details. We do not collect sensitive personal data as defined by UK GDPR.

We process your personal data on the following legal bases under UK GDPR: • Contract — processing necessary to provide the App and its features to you (e.g. account creation, event creation, messaging) • Legitimate interests — improving the App, preventing fraud, ensuring platform safety, sending review reminders for events you attended • Consent — sending push notifications (you can withdraw this at any time in your device settings or in the App settings) • Legal obligation — where we are required to process data to comply with the law Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms.

We use your personal data to: • Create and manage your account • Display your profile and events to other users (subject to your privacy settings) • Enable the Jammer collaboration feature • Send you push notifications about your events, reviews, and social activity • Send post-event review reminders • Personalise your Discovery feed based on your stated preferences • Monitor for and prevent abuse, fraud, and violations of our Terms of Service • Comply with legal obligations • Improve and develop the App

We share your personal data only with trusted third-party service providers who help us operate the App: • Expo (Expo Push Notification Service) — to deliver push notifications to your device. Expo is based in the United States; your push token is processed on their servers in order to deliver notifications. • Cloudflare R2 — to store photos and videos you upload. Cloudflare operates globally; your media files may be stored and served from servers outside the UK. We do not sell your personal data to any third party. We do not share your data for advertising purposes. We may disclose your data if required to do so by law or in response to a valid legal request from law enforcement.

If you set your profile to "Friends Only", your event posts, reviews, and media will only be visible to users who mutually follow each other with you. Your username, profile photo, and follower/following counts remain publicly visible regardless of your privacy setting, so other users can find and follow you. You can change your privacy setting at any time in the App Settings.

We retain your personal data for as long as your account is active, or as long as necessary to provide the service. If you delete your account: • Your profile, events, and media will be removed promptly • Messages in group conversations may remain visible to other participants in a redacted form • Anonymised, aggregated data may be retained as it can no longer identify you You can request deletion of your account and personal data at any time by contacting us at evntshare@gmail.com

We use Expo's push notification service to send you notifications about: • Likes and comments on your events • New followers • Jammer invitations and activity • Post-event review reminders • Messages from other users You can disable push notifications at any time in your device's notification settings, or by turning them off in the App under Settings → Notifications. Disabling push notifications does not delete your account or affect in-app notifications.

Under UK data protection law you have the following rights: • Right of access — you can request a copy of the personal data we hold about you • Right to rectification — you can ask us to correct inaccurate data • Right to erasure — you can ask us to delete your personal data ("right to be forgotten") • Right to restriction — you can ask us to restrict how we process your data in certain circumstances • Right to data portability — you can ask us to provide your data in a machine-readable format • Right to object — you can object to processing based on legitimate interests • Right to withdraw consent — where processing is based on consent, you can withdraw it at any time To exercise any of these rights, contact us at evntshare@gmail.com. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully.

Two of our service providers process data outside the United Kingdom: • Expo (United States) — your device's push notification token is sent to Expo's servers in order to deliver notifications to you • Cloudflare (global) — photos and videos you upload are stored on Cloudflare's R2 storage infrastructure, which operates across multiple regions worldwide Both providers maintain appropriate data protection standards. We only use these services because they are necessary to operate core features of the App.

We take the security of your personal data seriously. We implement appropriate technical and organisational measures including: • Passwords stored as one-way hashes (never in plain text) • HTTPS encryption for all data in transit • Authentication tokens with expiry • Account suspension functionality to respond to security incidents • Access controls limiting who can access user data If you believe your account has been compromised, contact us immediately at evntshare@gmail.com

EvntShare is available to users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us at evntshare@gmail.com and we will promptly delete the account and associated data. Users aged 13–17 should use the App with parental awareness and consent.

We may update this Privacy Policy from time to time. We will notify you of material changes via the App or by email at least 14 days before they take effect. The "last updated" date at the top of this policy indicates when it was last revised. Continued use of the App after the effective date of changes constitutes acceptance of the updated policy.

For any privacy-related questions, data subject requests, or concerns, please contact us: Email: evntshare@gmail.com If you are not satisfied with our response, you have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority. ICO website: ico.org.uk ICO telephone: 0303 123 1113 Our ICO registration reference: ZC163044