Privacy Policy

Effective [date of launch] · Version 1.0

1. Who we are

Event Core is an app for discovering events, buying tickets and organising events in Ghana. It is operated by Steve Wells, SCC, Weija, Ghana ("Event Core", "we", "us").

For personal data we collect to run Event Core, we are the data controller under Ghana's Data Protection Act, 2012 (Act 843). We are registered with the Data Protection Commission under registration number [DPC registration number].

2. What we collect

Your account

• Name and email address, and a password if you sign up with email. Passwords are handled by Google Firebase Authentication; we never see them.
• If you sign in with Google or Apple, we receive your name, email address and, for Google, your profile photo. If you use Apple's "Hide My Email", we only receive the relay address Apple gives us.
• Phone number, if you add one.
• Profile photo, if you add one.

If you organise events

• Payout details: your mobile money number and network, or your bank name, account number and account name. We use these only to pay you.
• Organiser details you choose to show on your event page: name or brand, phone, email, logo, social media handles and website.
• Event content: titles, descriptions, venues, dates, photos, videos and ticket types. Public events are visible to everyone.

When you get tickets

• Booking details: your name, email, phone number, the tickets you chose, the amount paid, and whether you have checked in.
• Booking without an account: you can buy tickets on our website without signing up. We collect the same booking details and use your email to send your ticket. The link to your ticket page contains your booking ID, so treat it like the ticket itself.
• Payment information: payments are processed by Paystack. We receive a payment reference, the amount and Paystack's fee. We never see or store your card number or mobile money PIN.
• Answers to an organiser's form, if the organiser asks attendees questions at booking or at the door. See What organisers see.

From your device

• Location (optional): if you allow it, your approximate location is used on your phone to show your city and sort events by distance. It is not sent to or stored by us.
• Camera and photos (optional): used only when you choose to take or pick a photo, or when an organiser scans tickets at the door.
• Calendar (optional): used only when you tap "Add to calendar". We only add the event; we don't read your calendar.
• App usage and diagnostics: which screens and features are used, crash reports and app performance (Firebase Analytics, Crashlytics and Performance Monitoring). These are linked to a random account ID, never to your name, email or phone. They include your device model, operating system version and app version.

We do not collect advertising identifiers, contacts, messages, precise location history, or health or biometric data.

3. How and why we use it

We don't use your data for advertising, we don't build marketing profiles, and we don't make automated decisions that have legal or similarly significant effects on you.

4. What organisers see

When you book or register for an event, the organiser of that event can see your name, email address, phone number, the tickets you bought and whether you've checked in. They need this to run the event, check tickets at the door and contact attendees about the event.

If an organiser asks extra questions (for example at a check-in kiosk), they decide what to ask and are responsible for how they use the answers. Organisers agree in our Terms to use attendee data only for their event and to follow data protection law.

Organisers can send updates about their event to people who booked it. Every such email has an unsubscribe link (see Emails).

5. Who we share it with

We never sell your personal data. We share it only with the organisers described above, and with these service providers who process it for us under contract:

We may also disclose data if the law requires it, to protect people from harm or fraud, or if Event Core is sold or reorganised (in which case this policy continues to apply).

6. Where your data is stored

Our database and files are hosted by Google Cloud in London, United Kingdom (europe-west2), and our service providers may process data in other countries, including the United States. Where data leaves Ghana, we rely on providers that offer appropriate safeguards, such as contractual data protection terms, as required by Act 843.

7. How long we keep it

• Account and profile: until you delete your account.
• Bookings, payments and payouts: for [6] years, because tax and financial law requires us to keep transaction records. When you delete your account we remove your name, phone and email from these records where the law allows, and keep only what's required.
• Crash reports: 90 days. Analytics: up to 14 months.
• Events: public events stay visible after they end so attendees can see their history. Organisers can ask us to remove them.
• Support emails: up to 2 years after the conversation ends.

8. Your rights

Under Act 843 you can:

• Access the personal data we hold about you.
• Correct it if it's wrong. You can edit most details in the app under Profile.
• Delete it. You can delete your account in the app (Profile → Delete account) or request deletion here. If you booked on our website without an account, email us from the address you booked with.
• Object to us using it, or ask us to stop.
• Withdraw consent, for example by turning off location, camera or calendar access in your phone's settings.

Email us at privacy@eventcoreapp.com and we'll respond within 21 days. You can also complain to the Data Protection Commission of Ghana (dataprotection.org.gh).

9. Children

You must be at least 13 years old to use Event Core. We don't knowingly collect data from children under 13. If we learn we have, we delete it.

Users aged 13 to 17 may use Event Core, but must have a parent's or guardian's permission to buy paid tickets, and we ask them to confirm this at checkout. If you're a parent or guardian and believe your child has given us data without your permission, contact us and we'll delete it.

10. Emails

We send emails you need: ticket confirmations, invites to events, check-in confirmations, and payout notices for organisers. These are part of the service.

Organisers can send updates about events you've booked. Every update has an unsubscribe link that stops further updates from that event. We don't send marketing emails without asking you first.

11. Security

Data is encrypted in transit and at rest. Access is controlled by security rules so that people only see data they're allowed to: your bookings are visible to you and the event's organiser, and payout details only to you and our payout process. Payments are handled by Paystack, which is PCI DSS certified. No system is perfectly secure; if a breach affects you, we'll tell you and the Data Protection Commission as the law requires.

12. Changes to this policy

If we make important changes, we'll tell you in the app or by email before they take effect. The date at the top shows when this policy last changed.

13. Contact us

Steve Wells
SCC, Weija
Privacy: privacy@eventcoreapp.com
Support: support@eventcoreapp.com