Operated by RaveRank LLC, a Florida limited liability company ("RaveRank", "we").
RaveRank helps you plan which sets to see at a festival, sync plans with your Fam, and hear about schedule changes. This policy explains what we collect, why, who can see it, and the choices you have.
1. At a glance
What RaveRank does. It is a festival planner for EDC Orlando: lineup picks, your schedule, Fam groups, meeting points, "I'm good" check-ins, and character and kandi trades. Not affiliated with or endorsed by Insomniac or EDC.
What RaveRank never does.
- No location tracking.
- No selling your data.
- No ad tracking.
- No access to your contacts or photos.
- Not an emergency service. In an emergency, call 911 or find festival staff.
- We collect what the app needs to work: your sign-in, your picks, and what you share with your Fam.
- Your Fam sees your display name, avatar and pronouns (if you set them), your check-ins and meeting points, and your picks and owned gear (you can turn picks sharing off per Fam).
- RaveRank is for people 18 and older.
2. What we collect
"Our database" means Supabase, our database and sign-in provider. "Until you delete your account" means the data is removed when you delete your account in Me › Account (section 6 lists what stays).
| What | Why | Where it's stored | How long | Who can see it |
|---|---|---|---|---|
| Email address (you sign in with a one-time code or link we email you) | To sign you in and keep your account | Our database | Until you delete your account | Only us |
| Display name (you choose it) | So your Fam knows who you are | Our database | Until you delete your account | You and your Fam members |
| "I'm 18 or older" confirmation (yes or no only; we never ask for or store ID or your date of birth) | Age requirement | Our database | Until you delete your account | Only us |
| Terms and Privacy acceptance record: the versions you agreed to, the time, your browser type and a scrambled (hashed) form of your IP address, never the address itself | Proving you agreed | Our database | Until you delete your account. After that, we keep only which versions you accepted and when, how you accepted and the scrambled form of your IP address, linked to a scrambled form of your email (not your name or email itself), for 5 years, to show you agreed | Only us |
| The music genres you pick | Tailoring suggestions | Our database | Until you delete your account | Only us (not shown to your Fam) |
| Last time you opened the app | Used only to count active Fam members | Our database | Until you delete your account | Only us (not shown to your Fam) |
| Pronouns (optional) and your character look: avatar, class, the gear you equip, and when you last changed the look | Personalising your profile, and showing the same character on every device you sign in on | Our database; a copy stays on your device | Until you delete your account | You; your display name, avatar and pronouns are also visible to people in your Fams |
| Lineup picks (Must / Maybe / Skip), festivals you say you're going to, and alerts you turn on | Your plan, clash warnings, calendar export, notifications | Our database; a copy on your device | Until you delete your account | You; picks and owned gear also your Fam members unless you turn sharing off for that Fam |
| Fam membership: the Fams you create or join, and the things you add in a Fam (nudges, outfit votes and cards with an optional note, packing list items, shared costs) | Staying together with your Fam | Our database | Until you delete your account; Fams you created stay for their other members | Members of that Fam |
| Meeting points (text you type; no map location is read from your phone) | Finding your Fam | Our database; a copy on your device | Until you delete your account | Members of that Fam |
| Check-ins ("I'm good", "Need help", "I'm lost", and "At the meeting point" or "Overdue" if you use those) with their time. A check-in carries no location. | Letting your Fam see how you are doing | Our database | Until you delete your account | Members of that Fam |
| Habit logs: your festival class and the habits you tap as done (which habit, which day) | Growing your character's stats. Never shared with your Fam, never used for rewards | Our database | Until you delete your account | Only you (and us) |
| "I was there" taps: the set and the time you tapped (this shows which stage you were at, and when) | Counting how many times you've seen each artist. Not shared with your Fam | Our database | Until you delete your account | Only you (and us) |
| Kandi: items, trades, in-person scan records and your "met in person" list, the gear, XP and badges you earn, and the app colour themes you unlock with Kandi | The kandi trading feature and your character | Our database | Until you delete your account; records of trades between other people stay with your identity removed | You; a trade is visible to both people in it (owned gear is also visible to Fam members when picks sharing is on). If you send a one-time kandi link, whoever opens it (signed in, 18+) sees your display name and that bracelet, and can trade with you once, without being in your Fam |
| People you block (who and when) | So they can't send you kandi or ask to join your Fams, and so the app stops showing them to you | Our database | Until you unblock them or delete your account | Only you; the person you block isn't told |
| Push notification subscription (an address from your browser's push service, encryption keys, browser type) and a record of notifications we sent | Delivering schedule-change alerts, respecting your daily limit | Our database | Until you delete your account or turn notifications off | Only us |
| Reports you send ("this time is wrong") and any link you include | Fixing schedule errors | Our database | Kept after account deletion for safety reasons; reviewed and deleted after 2 years | Only us |
| Reports you send about a Fam name, meeting point or Fam member: the reason, an optional note, and a copy of the reported text. If a captain removes someone from a Fam, a record of that so the captain can allow them back | Handling Fam reports and enforcing our Terms | Our database | Kept after account deletion for safety reasons; reviewed and deleted after 2 years | Only our admins (a removal record: that Fam's captain). The person reported is never told who reported them |
| Public report form: type, location, description and the contact email you give | Handling legal and abuse reports | Our database | Kept after account deletion for safety reasons; reviewed and deleted after 2 years | Only us |
| Waitlist email, optional first name, festival, beta interest and a yes to "I'm 18 or older" (if you join the waitlist) | Launch updates and beta invites, and checking you are 18 or older | Our database | Until you unsubscribe or ask us to remove it ([email protected]), or 12 months after public launch, whichever is first | Only us |
| Beta access: whether your account is let in to the private beta, how (it existed before the beta code, you used the beta code, or your email was on our invite list) and when. The code you type is checked on our server and is not stored; we keep only a time stamp of wrong tries, not what you typed | Keeping the beta to invited people | Our database | Until you delete your account; wrong tries: 1 day | Only us |
| Reserve interest: your account email, which plan and term you reserve, and a promoter code if you used one (nothing is charged; reserving isn't a purchase) | Emailing you before anything is ever billed | Our database | Until you delete your account | Only us |
| Sign-in bot check: Cloudflare Turnstile ("are you human?") on the sign-in form. It receives normal browser request data and returns a pass or fail | Keeping bots out of sign-in | Cloudflare | As long as Cloudflare's own policy keeps it; we don't control or see it | Cloudflare and us |
| Sign-in emails: your email address and the code or link, sent through Resend | Delivering your sign-in code | Resend | As long as Resend's own policy keeps it; we don't control it | Resend and us |
| Technical data our hosting providers log (IP address, device and browser type, timestamps) | Security, abuse prevention, keeping the service running | Supabase and Cloudflare (hosting and delivery) | As long as each provider's own policy keeps it; we don't control it | Us and those providers |
3. What we don't collect
- Your precise location (check-ins have no location, and the app never asks your phone for it).
- Your contacts.
- Your photos or camera roll.
- Payment details (no payments are live).
- Your date of birth.
- Government ID.
- Biometrics.
- Advertising or analytics trackers.
4. Stored on your device
Your phone keeps a copy of the lineup, your picks, your Fam's meeting points and check-ins so the app opens quickly. It can also hold changes that haven't reached us yet. If you pick sets before signing in, those picks stay only on your phone; when you sign in, they are copied to your account (a set your account already has a pick for keeps that pick) and removed from the phone's separate list. We can't promise a change arrives, so don't rely on this at a festival. The app also remembers small preferences (like Demo/Live mode) and, for up to 60 days, a promoter code from a link you opened. Clearing site data or uninstalling removes them. Signing out removes your account's data and your character from the phone. Plans that exist only on your phone (outfit plans, checklist ticks, set check-ins, your map pins) stay on the phone, kept for your account only: they show again when you sign back in, never to anyone else who signs in on that phone, and are deleted if you delete your account. Anything you plan while signed out is added to the next account that signs in on that phone. Demo mode keeps its own sample data on the phone, apart from yours, and deletes it when you exit the demo. Your sign-in session is kept in your browser's local storage. We don't use advertising or tracking cookies or analytics. Cloudflare and Turnstile may set their own cookies.
5. Who we share it with
We don't sell or rent personal information, and we don't share it for advertising. We use service providers who process data for us under contract:
- Supabase — database, sign-in and server functions.
- Cloudflare — website hosting and delivery.
- Cloudflare Turnstile — a "are you human?" check on the sign-in form; it receives normal browser request data.
- Push services run by your browser or phone maker (e.g. Apple, Google, Mozilla) — they carry notifications to your device; the contents are encrypted end to end.
- Resend — sends the sign-in email (your email address and the code or link).
Festival schedule data comes from public festival sources and is facts only; it contains no information about you. We may disclose information if required by law or to protect someone's safety.
6. How long we keep it
- Account, profile, picks, Fam memberships, Kandi, check-ins and notification history: kept until you delete your account.
- Join attempts (wrong invite-code tries): 1 day.
- Waitlist emails: until you unsubscribe or ask us to remove you, or 12 months after public launch, whichever is first.
- Reports you send or that are about you, and account-suspension records: kept for safety reasons after you delete your account; reviewed and deleted after 2 years.
- Purchase records: as long as tax and accounting rules require, typically up to 7 years.
- Database backups: our provider keeps daily backups for about 7 days.
- Requests to see, correct or delete your data: we respond within 45 days.
When you delete your account (Me › Account), these are deleted: your profile, picks, Fam memberships, check-ins, meeting points you added, push subscriptions, notification history, "I was there" taps, Kandi items, unlocked themes, your block list and your consent records (except the anonymized acceptance record in the table above, kept 5 years).
What we keep after you delete your account:
- Fams you created stay for their other members, without your name.
- Reports stay with the reported text; if you sent one, the link to you is removed.
- Bracelets you made that other people hold stay with them, without your name.
- Admin review records stay, without names.
- Records of Kandi trades between other people stay, with your identity removed.
- Waitlist entries aren't linked to accounts, so deleting your account doesn't remove one: email [email protected] to remove it.
- Copies in backups stay until those backups expire.
7. Your choices and rights
- Change your display name, pronouns, avatar, notification limit and quiet hours in the app.
- Turn off picks sharing for any Fam, or leave a Fam, at any time.
- Turn push notifications off for any device in Me › Settings, or in your browser/phone settings.
- Ask for a copy of your data, a correction, or account deletion: [email protected]. We'll respond within 45 days.
8. Which laws apply
RaveRank LLC is a Florida company, and this policy is written under Florida law and U.S. federal law. Based on our size and what we collect, we don't believe the comprehensive privacy laws of other states (such as California's CCPA) currently apply to us. If the law where you live gives you a privacy right, email [email protected] and we will honour it where the law requires. If there is a data breach affecting your information, we will notify you as the law requires.
Do Not Track. We don't track you across other sites, so browser Do Not Track signals don't change anything we do.
9. Age
RaveRank is only for people 18 and older, matching the festivals it covers. We don't knowingly collect information from anyone under 18; if we learn we have, we'll delete it. Contact us if you believe this has happened.
10. Security
Access to data is enforced in the database itself (row-level security), so Fam data is only readable by Fam members and personal data only by you, apart from what our admins need to run the service (for example reviewing reports). Connections are encrypted. No system is perfectly secure; we'll notify you if a breach affects your data, as the law requires.
11. Changes
If we change this policy in a meaningful way, we'll tell you in the app before it takes effect.
12. Contact
RaveRank LLC · 650 N Alafaya Trl Ste 101 #780483, Orlando, FL 32878 · [email protected]