Operated by [COMPANY LEGAL NAME], a [STATE] limited liability company ("RaveRank", "we").
RaveRank helps you plan which sets to see at a festival, sync plans with your Fam, and hear about schedule changes. This policy explains what we collect, why, who can see it, and the choices you have.
1. The short version
- We collect what the app needs to work: your sign-in, your picks, and what you share with your Fam.
- We do not track your location, sell your data, or show ads.
- Your Fam sees your display name, avatar and pronouns (if you set them), your check-ins and meeting points, and your picks and owned gear (you can turn picks sharing off per Fam).
- RaveRank is for people 18 and older.
2. What we collect
| Data | Why | Who can see it |
|---|---|---|
| Email address (you sign in with a one-time code or link we email you) | To sign you in and keep your account | Only us |
| Display name (you choose it) | So your Fam knows who you are | You and your Fam members |
| "I'm 18 or older" confirmation (yes/no only — we never ask for or store ID) | Age requirement | Only us |
| Pronouns (optional) and your avatar / character (look, class, gear you equip) | Personalising your profile | You; your display name, avatar and pronouns are also visible to people in your Fams |
| Picks (Must / Maybe / Skip), festivals you say you're going to, and alerts you turn on | Your plan, clash warnings, calendar export, notifications | You; picks and owned gear also your Fam members unless you turn sharing off for that Fam |
| Fams you create or join, meeting points, check-ins ("I'm good", "Need help", "I'm lost") with their time, and the things you add in a Fam: nudges, outfit votes and cards (with an optional note), packing list items and shared costs | Staying together with your Fam | Members of that Fam |
| Push notification subscription (an address from your browser's push service, encryption keys, browser type) and a record of notifications we sent | Delivering schedule-change alerts, respecting your daily limit | Only us |
| Reports you send ("this time is wrong") and any link you include | Fixing schedule errors | Only us |
| Waitlist email, festival and beta interest (if you join the waitlist) | Launch updates and beta invites | Only us |
| Your acceptance of our legal documents: which document and version, the time, your browser type and a scrambled (hashed) form of your IP address, not the address itself | Proving you agreed | Only us |
| Reports you send through the public report form: type, location, description and the contact email you give | Handling legal and abuse reports | Only us |
| Kandi items, trades, in-person scan records and your "met in person" list [ATTORNEY REVIEW] | The Kandi trading feature | You; a trade is visible to both people in it |
| Gear, XP and badges you earn | Your character | You (owned gear is also visible to Fam members when picks sharing is on) |
| Reports you send about a Fam name, meeting point or Fam member: the reason, an optional note, and a copy of the reported text. If a captain removes someone from a Fam, a record of that so the captain can allow them back [ATTORNEY REVIEW: how long to keep reports] | Keeping Fams safe and enforcing our Terms | Only our admins (a removal record: that Fam's captain). The person reported is never told who reported them |
| The sets you tap "I was there" on, and the time you tapped (this shows which stage you were at, and when) [ATTORNEY REVIEW: location-revealing data; retention; notice or consent] | Counting how many times you've seen each artist (the trophy tier on artist cards). Not shared with your Fam. Never used for rewards | Only you (and us) |
| Your festival class and the habits you tap as done (which habit, which day) [ATTORNEY REVIEW: health-adjacent self-reported data] | Growing your character's stats. Not shared with your Fam. Never used for rewards | Only us |
| Your account email and which plan/term you reserve interest in, if you tap "Reserve my Founding spot" (nothing is charged — reserving isn't a purchase), plus a promoter code if you used one [ATTORNEY REVIEW: promoter-code attribution] | Emailing you before anything is ever billed; crediting the promoter who referred you once paid plans open | Only us |
| Basic technical data our providers log (IP address, device/browser type, timestamps) | Security, abuse prevention, keeping the service running | Us and our hosting providers |
We don't collect: your location (check-ins have no location), contacts, photos, payment details, or government ID.
3. Stored on your device
So your plan is saved on your phone and waits to send when you have signal. Your phone keeps a copy of the lineup, your picks, your Fam's meeting points and check-ins, and any changes waiting to sync. It also remembers small preferences (like Demo/Live mode) and, for up to 60 days, a promoter code from a link you opened. Clearing site data or uninstalling removes them. Your sign-in session is kept in your browser's local storage. We don't use advertising or tracking cookies or analytics. Cloudflare and Turnstile may set their own cookies [confirm]. [If analytics are added later, update this section.]
4. Who we share it with
We don't sell or rent personal information, and we don't share it for advertising. We use service providers who process data for us under contract:
- Supabase — database, sign-in and server functions [confirm hosting region].
- Cloudflare — website hosting and delivery.
- Cloudflare Turnstile — a "are you human?" check on the sign-in form; it receives normal browser request data.
- Sentry — crash reports, only if switched on [confirm]; no account details are sent.
- Push services run by your browser or phone maker (e.g. Apple, Google, Mozilla) — they carry notifications to your device; the contents are encrypted end to end.
- Resend — sends the sign-in email (your email address and the code or link).
Festival schedule data comes from public festival sources and is facts only; it contains no information about you. We may disclose information if required by law or to protect someone's safety.
5. How long we keep it
We keep your account data while your account exists. [Set retention periods — e.g. check-ins deleted N days after the festival; notification history N days; server logs per provider defaults.] When you delete your account, your profile, picks, Fam memberships, check-ins, meeting points, push subscriptions and notification history are deleted. Fams you created stay for their other members.
6. Your choices and rights
- Change your display name, pronouns, avatar, notification limit and quiet hours in the app.
- Turn off picks sharing for any Fam, or leave a Fam, at any time.
- Turn push notifications off for any device in Account or in your browser/phone settings.
- Ask for a copy of your data, a correction, or account deletion: [email protected]. We'll respond within [30] days.
[Attorney: add any state-specific rights/notices that apply (e.g. California, Colorado, Virginia) and whether GDPR applies to non-US users.]
7. Age
RaveRank is only for people 18 and older, matching the festivals it covers. We don't knowingly collect information from anyone under 18; if we learn we have, we'll delete it. Contact us if you believe this has happened.
8. Security
Access to data is enforced in the database itself (row-level security), so Fam data is only readable by Fam members and personal data only by you. Connections are encrypted. No system is perfectly secure; we'll notify you if a breach affects your data, as the law requires.
9. Changes
If we change this policy in a meaningful way, we'll tell you in the app before it takes effect.
10. Contact
[COMPANY LEGAL NAME] · RaveRank LLC, [MAILING ADDRESS — attorney to supply] · [email protected]