Operated by RaveRank LLC, a Florida limited liability company ("RaveRank", "we").
RaveRank helps you plan which sets to see at a festival, sync plans with your Fam, and hear about schedule changes. This policy explains what we collect, why, who can see it, and the choices you have.
1. At a glance
What RaveRank does. It is a festival planner for EDC Orlando: lineup picks, your schedule, Fam groups, meeting points, "I'm good" check-ins, and character and kandi trades. Not affiliated with or endorsed by Insomniac or EDC.
What RaveRank never does.
- No location tracking.
- No selling your data.
- No ad tracking.
- No access to your contacts or photos.
- Not an emergency service. In an emergency, call 911 or find festival staff.
- We collect what the app needs to work: your sign-in, your picks, and what you share with your Fam.
- Your Fam sees your display name, avatar and pronouns (if you set them), your check-ins and meeting points, and your picks and owned gear (you can turn picks sharing off per Fam).
- RaveRank is for people 18 and older.
2. What we collect
"Our database" means Supabase, our database and sign-in provider (hosting region: East US [ATTORNEY / Tony: confirm the region; the repo can't show it]). "Until you delete your account" means the data is removed when you delete your account in Me › Account (section 6 lists what stays).
| What | Why | Where it's stored | How long | Who can see it |
|---|---|---|---|---|
| Email address (you sign in with a one-time code or link we email you) | To sign you in and keep your account | Our database | Until you delete your account | Only us |
| Display name (you choose it) | So your Fam knows who you are | Our database | Until you delete your account | You and your Fam members |
| "I'm 18 or older" confirmation (yes or no only; we never ask for or store ID or your date of birth) | Age requirement | Our database | Until you delete your account | Only us |
| Terms and Privacy acceptance record: the versions you agreed to, the time, your browser type and a scrambled (hashed) form of your IP address, never the address itself | Proving you agreed | Our database | Until you delete your account [ATTORNEY: n days, or keep as proof of consent?] | Only us |
| The music genres you pick, and the time you last opened the app | Tailoring suggestions; counting who is an active member of a Fam | Our database | Until you delete your account | Only us (not shown to your Fam) |
| Pronouns (optional) and your character look: avatar, class and the gear you equip | Personalising your profile | Our database; a copy stays on your device | Until you delete your account | You; your display name, avatar and pronouns are also visible to people in your Fams |
| Lineup picks (Must / Maybe / Skip), festivals you say you're going to, and alerts you turn on | Your plan, clash warnings, calendar export, notifications | Our database; a copy on your device | Until you delete your account | You; picks and owned gear also your Fam members unless you turn sharing off for that Fam |
| Fam membership: the Fams you create or join, and the things you add in a Fam (nudges, outfit votes and cards with an optional note, packing list items, shared costs) | Staying together with your Fam | Our database | Until you delete your account; Fams you created stay for their other members | Members of that Fam |
| Meeting points (text you type; no map location is read from your phone) | Finding your Fam | Our database; a copy on your device | Until you delete your account [ATTORNEY: n days after the festival?] | Members of that Fam |
| Check-ins ("I'm good", "Need help", "I'm lost", and "At the meeting point" or "Overdue" if you use those) with their time. A check-in carries no location. | Letting your Fam see how you are doing | Our database | Until you delete your account [ATTORNEY: n days after the festival?] | Members of that Fam |
| Habit logs: your festival class and the habits you tap as done (which habit, which day) [ATTORNEY REVIEW: health-adjacent self-reported data] | Growing your character's stats. Never shared with your Fam, never used for rewards | Our database | Until you delete your account | Only you (and us) |
| "I was there" taps: the set and the time you tapped (this shows which stage you were at, and when) [ATTORNEY REVIEW: location-revealing data; retention; notice or consent] | Counting how many times you've seen each artist. Not shared with your Fam | Our database | Until you delete your account | Only you (and us) |
| Kandi: items, trades, in-person scan records and your "met in person" list, and the gear, XP and badges you earn [ATTORNEY REVIEW] | The kandi trading feature and your character | Our database | Until you delete your account; records of trades between other people stay with your identity removed | You; a trade is visible to both people in it (owned gear is also visible to Fam members when picks sharing is on). If you send a one-time kandi link, whoever opens it (signed in, 18+) sees your display name and that bracelet, and can trade with you once, without being in your Fam [ATTORNEY REVIEW: new, Oct 16] |
| Push notification subscription (an address from your browser's push service, encryption keys, browser type) and a record of notifications we sent | Delivering schedule-change alerts, respecting your daily limit | Our database | Until you delete your account or turn notifications off | Only us |
| Reports you send ("this time is wrong") and any link you include | Fixing schedule errors | Our database | [ATTORNEY: n days] | Only us |
| Reports you send about a Fam name, meeting point or Fam member: the reason, an optional note, and a copy of the reported text. If a captain removes someone from a Fam, a record of that so the captain can allow them back | Keeping Fams safe and enforcing our Terms | Our database | [ATTORNEY: n days] | Only our admins (a removal record: that Fam's captain). The person reported is never told who reported them |
| Public report form: type, location, description and the contact email you give | Handling legal and abuse reports | Our database | [ATTORNEY: n days] | Only us |
| Waitlist email, festival and beta interest (if you join the waitlist) | Launch updates and beta invites | Our database | Until you ask us to remove it ([email protected]) | Only us |
| Reserve interest: your account email, which plan and term you reserve, and a promoter code if you used one (nothing is charged; reserving isn't a purchase) [ATTORNEY REVIEW: promoter-code attribution] | Emailing you before anything is ever billed | Our database | Until you delete your account | Only us |
| Sign-in bot check: Cloudflare Turnstile ("are you human?") on the sign-in form. It receives normal browser request data and returns a pass or fail | Keeping bots out of sign-in | Cloudflare | Cloudflare's own retention [ATTORNEY: n days] | Cloudflare and us |
| Sign-in emails: your email address and the code or link, sent through Resend | Delivering your sign-in code | Resend | Resend's own retention [ATTORNEY: n days] | Resend and us |
| Technical data our hosting providers log (IP address, device and browser type, timestamps) | Security, abuse prevention, keeping the service running | Supabase and Cloudflare (hosting and delivery) | Provider default [ATTORNEY: n days] | Us and those providers |
3. What we don't collect
- Your precise location (check-ins have no location, and the app never asks your phone for it).
- Your contacts.
- Your photos or camera roll.
- Payment details (no payments are live).
- Your date of birth.
- Government ID.
- Biometrics.
- Advertising or analytics trackers.
4. Stored on your device
Your phone keeps a copy of the lineup, your picks, your Fam's meeting points and check-ins so the app opens quickly. It can also hold changes that haven't reached us yet. We can't promise a change arrives, so don't rely on this at a festival. The app also remembers small preferences (like Demo/Live mode) and, for up to 60 days, a promoter code from a link you opened. Clearing site data or uninstalling removes them. Your sign-in session is kept in your browser's local storage. We don't use advertising or tracking cookies or analytics. Cloudflare and Turnstile may set their own cookies [ATTORNEY / Tony: confirm].
5. Who we share it with
We don't sell or rent personal information, and we don't share it for advertising. We use service providers who process data for us under contract:
- Supabase — database, sign-in and server functions (East US [ATTORNEY / Tony: confirm the region]).
- Cloudflare — website hosting and delivery.
- Cloudflare Turnstile — a "are you human?" check on the sign-in form; it receives normal browser request data.
- Push services run by your browser or phone maker (e.g. Apple, Google, Mozilla) — they carry notifications to your device; the contents are encrypted end to end.
- Resend — sends the sign-in email (your email address and the code or link).
Festival schedule data comes from public festival sources and is facts only; it contains no information about you. We may disclose information if required by law or to protect someone's safety.
6. How long we keep it
We keep your account data until you delete your account. Nothing is deleted automatically on a timer, except records of wrong invite-code tries, which are removed after a day. [ATTORNEY: n days — retention periods for check-ins after a festival, notification history and reports are not decided.]
When you delete your account (Me › Account), these are deleted: your profile, picks, Fam memberships, check-ins, meeting points you added, push subscriptions, notification history, "I was there" taps, Kandi items and your consent records.
What stays:
- Fams you created stay for their other members.
- Reports about a person or content, and the copy of the reported text, are kept. If you sent a report, it stays without your account attached.
- Reports sent through the public report form, including the contact email you gave, are kept.
- The waitlist is not linked to your account, so your waitlist email stays until you ask us to remove it ([email protected]).
- Records of Kandi trades between other people stay, with your identity removed.
- Our database provider keeps backups for a while [ATTORNEY: n days].
7. Your choices and rights
- Change your display name, pronouns, avatar, notification limit and quiet hours in the app.
- Turn off picks sharing for any Fam, or leave a Fam, at any time.
- Turn push notifications off for any device in Me › Settings, or in your browser/phone settings.
- Ask for a copy of your data, a correction, or account deletion: [email protected]. We'll respond within [ATTORNEY: n] days.
8. Which laws apply
[ATTORNEY: this section is for your review.]
RaveRank LLC is a Florida company, and this policy is written under Florida law and U.S. federal law. Based on our size and what we collect, we don't believe the comprehensive privacy laws of other states (such as California's CCPA) currently apply to us. [ATTORNEY: confirm.] If the law where you live gives you a privacy right, email [email protected] and we will honour it where the law requires. If there is a data breach affecting your information, we will notify you as the law requires.
Do Not Track. We don't track you across other sites, so browser Do Not Track signals don't change anything we do.
9. Age
RaveRank is only for people 18 and older, matching the festivals it covers. We don't knowingly collect information from anyone under 18; if we learn we have, we'll delete it. Contact us if you believe this has happened.
10. Security
Access to data is enforced in the database itself (row-level security), so Fam data is only readable by Fam members and personal data only by you, apart from what our admins need to run the service (for example reviewing reports). Connections are encrypted. No system is perfectly secure; we'll notify you if a breach affects your data, as the law requires.
11. Changes
If we change this policy in a meaningful way, we'll tell you in the app before it takes effect.
12. Contact
RaveRank LLC · [MAILING ADDRESS — attorney to supply] · [email protected]