Privacy Policy

1. The short version

• Location sharing is off until you turn it on. When it is on, only the friends you choose see your position, it expires within 24 hours, and turning it off deletes it.
• You choose who sees your profile, your posts, your stories, and your nights. Nothing about where you go is ever public.
• We never sell information about you, your friends, or your location. We do create statistics from many people’s activity (for example, how busy a venue was by the hour), and we may sell or license those statistics, which never identify anyone.
• There are no ads in KOMOS, no advertising or analytics companies’ code in the app, and we do not track you across other apps or websites.
• Photos are stripped of hidden metadata, such as GPS location, on your phone before they upload.
• KOMOS is for adults 18 and older. You can delete your posts, your messages (until someone replies), and your whole account yourself, at any time. Deleting a message deletes its text, and deleting a post, story, or night also deletes its photos and videos from our storage, as section 15 describes.

2. Information you give us

• Your account: your email address; your display name, handle, birthdate, profile photo, bio, favorite places, home areas, and the language your app speaks; and, if you sign in with an email and password, your password, which our sign-in service stores only in protected (hashed) form. Your birthdate decides which age rules apply to you. We also keep a record of which version of our Terms you agreed to, and when.
• What you create: photos, videos, stories, captions, comments, likes, messages, plans, events, RSVPs, night notes, and the audience you choose for each.
• Your connections: your friends, friend requests, the people in your inner circle or other chosen lists, the plans and chats you are part of, and the people you block.
• Tickets: the events you get tickets for and, for paid tickets, the order details (the ticket, the amount, and whether the payment succeeded or was refunded). Your card details go directly to our payment processor, Stripe; KOMOS never receives your full card number.
• Answers about venues: when KOMOS asks a short question about a venue (like the cover or the line) and you answer, we keep your answer. Others see it only as one of “people’s answers,” never with your name. To catch abuse, KOMOS keeps private records of how reliable each person’s answers are.
• Other things you tell us: suggestions to add a venue or correct its information, places you tell KOMOS not to suggest, poll votes, the venues and artists you follow, and, for the business tools, your name and your confirmation that you are 18 or older.
• Reports and support: reports you file (with any note you add) and messages you send us.
• Moderation records: if we act on a report or a copyright notice about an account, we keep a record of what we did (a strike or a suspension, lifting it, or deciding an appeal), the reason, a short note, when, and which member of our team did it.
• Appeals: if your account is suspended and you appeal, we keep what you wrote, when you sent it, the suspension it answers, and our decision: granted or denied, when, a short note, and which member of our team decided. Only our team reads an appeal; the app shows you only whether it is being reviewed or was decided. We keep it to review your suspension and to show how our rules were applied, and it is deleted with your account.
• Business accounts: information about your business, what you tell us to verify a claim and your agreement to the business terms, the email addresses of team members you invite, your venue website’s content and pictures, your notification choices, and your payout setup, which you complete with Stripe (Stripe collects your identity and bank details; KOMOS receives the status of your account).
• On getkomos.com: if you join the waitlist, your email address, when you joined, and any note you write. If you send an inquiry through a venue website KOMOS hosts, what you type (usually your name, email address, an optional phone number, and your message), which we deliver to that venue.

3. Information collected as you use KOMOS

• Check-ins: the venue or the event and the time, never your coordinates, whether you are there right now, and when you left an event.
• Location: described in the next section.
• Your night’s leave times: when you have a plan for tonight, your phone works out when to leave for each stop (from the stop’s time, the travel time between the venues, and the cushion you set) and stores those times with your plan, so KOMOS can update the island on your lock screen while the app is closed. If you dismiss the island, that choice is stored with the plan too. The island’s “how close” line uses your position on your phone only; it is never sent anywhere.
• Usage signals: plain records of what happens in the app, tied to your account, such as a screen opened, a feature used, the name of a request the app made, an error, or how long something took, along with the time, your app version, and whether you use iOS or Android. Usage signals are built never to include the text of your messages, captions, or searches, the contents of your photos, your location, or your contact details; a report of an error includes the error’s own message. They are kept for 13 months. You can turn them off in Settings, under Privacy, and the app stops sending them.
• Permissions on your phone: KOMOS asks before it uses your location (section 4), your camera and microphone (to take photos and record short clips with sound), and your photo library (to choose photos and videos to post, and to save the ones you choose to keep). It asks for your calendar only to open your calendar’s own New Event sheet when you add a plan; KOMOS never reads your calendar or your reminders. KOMOS does not use motion data. You can change any permission in your phone’s settings.
• Device and app information: whether you use iOS or Android, which version of the app and which update you are running, and when the app last connected; a push notification token for each device where you allow notifications; and tokens that let KOMOS start and update Live Activities on that phone.
• Network information: like every website and app, our hosting and sign-in providers receive your IP address when your device connects, and keep it in their security logs for a limited time.
• On getkomos.com: the venue websites KOMOS hosts count visits without cookies or any identifier (see section 14).

4. Location

Your phone asks for your permission before KOMOS can use your location, and you can change that permission at any time in your phone’s settings. Here is everything KOMOS does with it.

• On your phone: your location centers the map, shows venues near you, and estimates walking times. The app downloads public venue information for the area around you (a kilometer or two across) and works out on your phone which venue you are at.
• Automatic check-ins: when you give KOMOS access to your location, it notices when you stay at a venue, asks whether you are there, and checks you in if you do not answer within about ten minutes; you can always say you are not there. At an event, the same access checks you in only when you have a reason to be there: at an event you host or work, it checks you in when you arrive without asking; at an event you have a ticket for or said you are going to, it asks first and checks you in if you do not answer within about ten minutes; at an event you were only invited to, it asks and never checks you in on its own, and answering that you are there also tells the host you are going. You can leave an event at any time, and if you are away from it for about 30 minutes, KOMOS checks you out (not for an event that moves, like a boat). If you grant “Always” access, this also works while the app is closed; if you have closed the app completely, a check-out may happen only the next time your phone wakes KOMOS. What is stored is the venue or the event and the time, never your coordinates.
• Recommendations and weather: when you look for places, the app may send your location, rounded to about one kilometer, so KOMOS can rank nearby venues; it is used for that answer and not stored. Weather for your area is requested with your location rounded to about one kilometer.
• The planner: when you ask the planner for places near you, the app sends KOMOS your location, rounded to about one kilometer, so KOMOS can rank the places near you; it is used for that answer, not stored, and never sent to our AI provider (section 11).
• Sharing with friends: location sharing is off until you turn it on. When it is on, the friends you choose (all of your friends, your inner circle, or a list you pick) see your precise position, as a pin on the map, for as long as sharing stays on. There is no public option, and someone you have blocked never sees you. A shared position expires on its own within 24 hours of its last update, and turning sharing off deletes it. Incognito hides you, and hides your friends’ positions from you, without turning sharing off; you still count, without your name, in a venue’s totals.
• Being seen at a venue: friends can see that you are at a venue if you let them in your settings or if you share your location with them. A check-in you keep to yourself stays private.
• Saved places for plans: If you save places for plans — your home, a friend’s place — they are kept only on your phone; KOMOS does not keep them on your account. On iPhone, saving one from where you are asks Apple for the street name, and typing an address asks Apple to find it. If you add a saved place as a stop in a plan, its address and location are shared with that plan’s members only, until the night ends; copying the plan does not copy it. Directions to a saved place open your phone’s maps app with that place as the destination.

From location, a venue team learns only counts of the people at its venue, never who they are (section 9 explains what a venue sees when you message it or go to its event). Your location appears in Live Activities and widgets only as a venue’s name, never as coordinates. We never sell your location, and we never share it with anyone outside the audience you chose, except the companies that store it for us under this policy.

5. Information from other people and companies

• Apple and Google: if you sign in with Apple or Google, we receive the name, email address, and picture they share with us (Apple may give us a private relay email instead of your real one). We keep the token Apple provides so that if you delete your account, we can ask Apple to revoke KOMOS’s access.
• Other people on KOMOS: friends can add you to plans, group chats, and events; hosts may check you in at the door; people may report content you posted.
• Stripe: whether a payment succeeded, was refunded, or was disputed, and for businesses that sell tickets, the status of their payout account.
• Public sources: information about venues (names, addresses, hours, and licenses) comes from public and licensed datasets listed under Data credits. It describes places, not people.

6. How we use information

• To run the Services: your account, the map, check-ins, posts, stories, messages, plans, events, tickets, and everything else you use.
• To show your information to the people you choose, and to apply your privacy settings and blocks everywhere.
• To recommend venues, events, and plans (section 7).
• To process tickets, refunds, and payouts, and to prevent payment fraud.
• To keep people safe: to review reports, filter objectionable language, prevent spam and abuse, limit how often things can be done, enforce our Terms (including recording strikes, suspending accounts, for example after a valid copyright notice, and reviewing appeals), and protect KOMOS and the people who use it.
• To communicate with you: sign-in emails, receipts, notifications you have turned on, replies to your messages, and, for businesses that turn it on, a weekly summary.
• To fix and improve KOMOS: to find what breaks and to understand which parts of a night people actually use.
• To create statistics from many people’s activity (section 10).
• To follow the law and respond to lawful requests.
• For anything else, only with your permission.

We do not use your information to show you advertising, we do not sell it, and we do not use it to make decisions that have legal or similarly significant effects on you.

7. Recommendations and your preferences

KOMOS suggests venues, events, and plans for you. To do that, it uses what is happening right now (including where your friends are going, where they let you see it), your own history on KOMOS (the venues you check in to, the photos and nights you like, the places you tell KOMOS not to suggest, your favorite places, and your home areas), your location when you are looking for somewhere nearby, and counts of what many people do. Other people’s activity only ever reaches your suggestions as counts, unless they are your friends and have let you see it.

From your activity, KOMOS may work out your preferences, such as the kinds of venues, music, and nights you like. For example, if you often go to disco nights, KOMOS may suggest more of them. These preferences are used only to make your suggestions better. They are not shown to other people or sold. We do not use the places you go to work out sensitive things about you, such as your sexual orientation, religion, or health.

8. What other people on KOMOS can see

• Your name, handle, and profile photo can appear to other signed-in people wherever you interact with them, such as in a chat, on a guest list, or beside a comment, even if your profile is private. In search, a Friends profile is found only by your friends, and a private profile by no one. A private profile does not appear in friend suggestions, and KOMOS does not use its friends list to suggest people or to count mutual friends.
• Your profile setting (Public, Friends, or Private) decides who can see your bio, favorites, badges, stats, and friends list. New profiles start as Public; you can change this at any time.
• Your nights (where you checked in and the photos you posted) are shown to your friends, or only to your inner circle if you choose, and never to the public, even if your profile is public; a Private profile hides them from friends too. Your night notes are visible only to you.
• Each post has its own audience: public (anyone signed in to KOMOS), friends, your inner circle, a list you choose, or only you. A post you make at an event has two more choices: “Friends + the guests” shows it to your friends and to the event’s guests (its hosts, the people who checked in, and the people who said they were going before it ended), and “Only the guests” shows it only to the event’s guests, on the event’s page. A post at a venue can also appear on that venue’s page, where its team can hide it; a post at an event appears on that event’s page to the people its audience includes, where the event’s hosts can hide it. When someone reposts your post, it still reaches only people inside the audience you chose, and it disappears if you delete or archive the original.
• Stories are shown to the audience you choose for 24 hours, then only to you, in your archive. You can see who liked your story. Nobody is told who viewed a story.
• Messages are seen by the people in the conversation; in an event’s chat, the event’s host team can also read and remove messages. You can delete a message you sent until someone replies to it, and deleting it deletes its words and any photo in it; deleting your own comment or caption deletes its words too. Clearing a conversation hides it only for you. If you leave a group, your earlier messages stay in it. When a host, a venue’s team, or KOMOS removes something you wrote, we keep its words as a record of that decision, shown to no one. Notifications can show a short preview of a message or comment sent to you; you can turn previews off in Settings.
• When you RSVP to an event, people who can see the event may see you on its guest list. On an invite-only event, the host decides whether the people they invite can see its guest list. You can hide yourself from an event’s guest list; its host always sees who is going. Anyone with an event’s share link, even without an account, can see its title, time, cover, and the host’s name or handle. Photos in an event’s own photo album are visible to the event’s audience until six hours after it starts (or until it ends, if later), and after that only to its hosts and the people who checked in or had said they were going.
• If you choose a photo as a plan’s cover, the plan’s members can see it: its owner and the people the plan is shared with. Only the plan’s owner and its editors can set or remove a cover.
• When KOMOS shows answers about a venue, such as the cover or the line, they never show who answered.
• Blocks are silent and work both ways: you and the person you block stop seeing each other’s profiles, posts, stories, nights, location, and activity everywhere on KOMOS and cannot message each other, and unblocking does not restore your friendship.
• If we suspend an account, it cannot be used to post, message, RSVP, or check in, its profile, name, and photo disappear from KOMOS for everyone, and its shared location and notification tokens are deleted, until the suspension ends. Posts it already made stay with their audiences, without its name, unless we remove them. The person can still delete the account, and can appeal the suspension once in the app.

9. What venues and event organizers can see

Venues and organizers use KOMOS’s business tools. What they see about you depends on what you do:

• Counts, never names: for example, how many people are at their venue now, check-ins by the hour, how many are new or returning, how often people come back, how many people planned a visit or RSVP’d and then came, and the age ranges of guests 21 and older, shown only when enough people are in a range. Counts can be small, but they never include names. Their weekly summary is counts only.
• If you message a venue on its line (you need to be checked in there), its team sees your name, handle, profile photo, and your messages.
• If you RSVP to or get a ticket for an event, its host team sees you on the guest list with your name, handle, and profile photo, and for tickets, the ticket type, what you paid and when, whether it was refunded or disputed, and whether you have been checked in. When they check you in at the door, they see who you are.
• If you send an inquiry through a venue’s website, the venue receives what you typed.
• Photos you post at a venue with a public audience can appear on the venue’s page.
• An event’s hosts see the posts made at their event whose audience includes them (for example, “Only the guests”), and can hide a post from the event’s page.

Our Terms require businesses to use what they see only to serve and host their guests, never to sell it or market to people without their consent, and never to try to identify the people behind their counts.

10. Statistics from many people (aggregated and de-identified information)

We combine information from many people into statistics that do not identify anyone, such as how busy a venue was by the hour, how nights move between neighborhoods, or how many people a kind of event draws. We use these statistics to run and improve KOMOS and to show venues their own numbers, and we may share, license, or sell them to venues and other businesses.

Any statistic we sell or license to another business is built from at least 50 people, so no one can be picked out of it, and it leaves out LGBTQ+ venues and other places tied to sensitive things such as health or religion. We keep and use these statistics only in de-identified form. We never sell or license information about you as an individual, your friends list, or your location. We do not try to re-identify anyone from these statistics, and we require anyone who receives them, by contract, not to try either, not to combine them with other data to identify people, and not to pass them on without the same terms. Because these statistics are not about you, we may keep and use them after the accounts they were built from are deleted.

11. Artificial intelligence

KOMOS uses AI models from Anthropic to help sort and describe venue listings. That work uses information about venues only, never information about you.

The planner uses AI to understand a request you type (for example, “an hour at each place, 3 places, 11 to 1, then home”) and turn it into changes to your plan; KOMOS then builds the plan from the venues on KOMOS. When you send a request, KOMOS sends our AI provider, Anthropic: what you typed; the plan’s date; its stops’ names, as the plan spells them (an event on the plan is sent only as “Event”, never its title), and their times; the names of your saved places; your Skip 21+ places setting; and the time on your phone. It never sends your friends list, anyone’s location, or where your saved places are. When you ask for places near you, your phone sends your location, rounded to about one kilometer, to KOMOS only, to rank the places near you; KOMOS does not store it and never sends it to Anthropic. For a request that turns on things only a lookup can answer (for example, ending near a station in time for a train, or starting where your friends are going), the planner may use a larger Anthropic model that looks things up on KOMOS while it plans. Those lookups run as you, so they never see more than the app already shows you, and what they pass to Anthropic is limited to places on the map (their names, neighborhoods, kinds, features and hours), travel time estimates between them, and what the app already shows you about them tonight (how busy a place is, how many of your friends are going, how many events are there): never who anyone is, an address, a location, or where your saved places are. Anthropic may use this only to provide that service to us, not to train its models. KOMOS keeps a daily count of your planner requests and their size and cost, never what you typed, and deletes it with your account. When the planner’s AI is switched off or past its daily limit, your phone reads the request itself and nothing goes to Anthropic. By default, a plan for anyone under 21 leaves out 21+ places. The planner has a switch to include them; each one then shows its age label and the same warning as a check-in. Entry is always up to the venue. Before an AI feature uses your information in a new way, we will update this policy.

If a business connects its own AI assistant to its KOMOS business account, that assistant works on the business’s behalf, under the business’s agreement with its provider.

12. Companies that help us run KOMOS

We share information with these service providers only so they can provide their service to KOMOS, under their agreements with us:

• Supabase stores our database, your files, and your sign-in, and runs our server functions, on servers in the United States.
• Cloudflare serves getkomos.com, share links, venue websites, website forms, and the activity layer on the app’s map (it sees which area of the map is loading).
• Apple provides Sign in with Apple; delivers push notifications and Live Activity updates (and sees their content on the way to your phone); draws the map in the app (your phone loads the area you are viewing from Apple); provides place search, map pictures, and travel times (asked with the coordinates of venues and event places, never your position, and with search areas rounded to about 11 kilometers); and provides weather (asked with locations rounded to about one kilometer).
• Google provides Google Sign-In.
• Expo relays push notifications to your phone (it receives each notification’s text, which can include a preview of a message sent to you unless you turn previews off; the IDs the app needs to open what the notification is about, such as a chat, a plan, a night, or the person who sent it; a code, not your account ID, that tells the app which account on your phone the notification is for; and your device’s push token, but no pictures), delivers app updates (it receives your phone’s operating system, the app version, a random ID for this installation, and your IP address), and hosts an older address of our website, getkomos.expo.app.
• Resend delivers our emails (it receives the address and the content of each email).
• Stripe processes ticket payments and refunds (it receives your email address and your order) and pays venues and organizers.
• Anthropic provides AI models (section 11).
• If you use a web version of KOMOS, its map is drawn with map tiles from CARTO, which receives your IP address and the area of the map you are viewing.

When you open directions, a ride, or transit, KOMOS opens Apple Maps, Google Maps, Uber, or Lyft with venue locations filled in (the destination, and for a step of a plan, the stop you are leaving from). Venue pages and websites may also link to a venue’s Instagram, Facebook, TikTok, or X profile. Once you open another company’s app or website, its privacy policy applies, not ours.

13. Other times we share information

• With the people and audiences you choose, as described above.
• With your permission, or when you ask us to.
• For legal reasons: when we believe the law requires it, such as a valid subpoena or court order, and to respond to lawful requests from authorities. Where we are allowed to, we will tell you before we share.
• For safety: when we believe in good faith that it is necessary to prevent death or serious harm, or to investigate fraud or abuse.
• If KOMOS is part of a merger, acquisition, financing, or sale of assets, your information may transfer to the new owner, who must keep honoring this policy for it.
• As statistics that do not identify anyone (section 10).

We do not sell personal information, we do not share it for targeted advertising, and we have not done either in the past 12 months.

14. Cookies, tracking, and advertising

There are no ads in KOMOS and no advertising, analytics, or tracking companies’ code in the app, and we do not track you across other companies’ apps or websites. That is why KOMOS never asks for Apple’s permission to track you.

getkomos.com does not use advertising or analytics cookies. It uses one cookie, only on password-protected previews of venue websites, to remember for 30 days that you entered the password. The business tools at getkomos.com keep your sign-in and your choices there (such as the venue you picked and unsaved drafts) in your browser’s storage, cleared when you sign out. Website forms, the visit counter and the publish refresh in the business tools use your IP address to prevent abuse. The address itself is never stored: we keep only a count per minute under a one-way code made from it with a secret key, which changes every minute and is never stored with what you send, and we delete those counts after about two days. The venue websites KOMOS hosts count visits without cookies or any identifier: each visit sends only which page was viewed, the website that linked to it, and whether the device is a phone, tablet, or computer, so a visit can never be linked to a person.

Because we do not sell personal information or share it for advertising, there is nothing for a “Do Not Track” or Global Privacy Control signal to switch off; we treat everyone as opted out.

15. How long we keep information

• Your account, profile, connections, check-ins, nights, posts, and other content: for as long as your account exists, or until you delete the item. When you delete a post, story, night, or event photo, it is removed from KOMOS, and the app deletes its photos and videos from our storage at the same time. If that does not go through (for example, you lose your connection), they are shown to no one, and the app tries again the next time you delete something; we may also remove them ourselves. A photo you also put somewhere else, such as one that became a venue’s main photo or an event’s cover, stays in our storage until your account is deleted. Deleting your account deletes every photo and video you stored. When a plan’s cover photo is changed or removed, or the plan is deleted, the old photo is shown to no one, but it can stay in our storage until the account of the person who added it is deleted.
• A shared location: at most 24 hours after its last update, and it is deleted as soon as you turn sharing off.
• Stories: shown for 24 hours, then kept in your archive until you delete them (or removed, if you turn off saving them to your archive).
• Messages: until you delete them (deleting one deletes its text), or until the sender’s account is deleted.
• Usage signals: 13 months, and they are deleted with your account.
• Friend requests: they expire after 30 days and are then cleared.
• Delivery records of push notifications: 30 days. The notifications in your in-app inbox: for as long as your account exists.
• Push notification tokens: until you sign out on that device or the token stops working.
• Ticket orders: seven years, as sales and tax records. If you delete your account, your account is removed from them once the event’s night has passed.
• Waitlist sign-ups: until you ask us to remove yours. They are separate from accounts and are not deleted with one.
• Website inquiries: one year after they arrive.
• An account on hold because its birthdate shows someone under 18: deleted, with everything entered into it, within 30 days.
• Appeals: for as long as the account exists; deleted with it.
• Moderation records (strikes, suspensions, and appeal decisions): kept to show how our rules were applied. When the account a record is about is deleted, the record stays but no longer names the account, and its note is deleted.
• Daily visit counts for venue websites: about 400 days.
• An organization or artist page whose last owner leaves: 30 days, then deleted.
• Statistics that do not identify anyone: as long as they are useful.

We may keep information longer when the law requires it, to resolve disputes, or to enforce our agreements, and copies can remain in our providers’ backups for a limited time before they are overwritten.

16. Deleting your account

You can delete your account yourself in Settings → Delete account. It happens immediately and permanently, and nothing can be restored.

Deleting your account removes your profile, friendships, check-ins and nights, posts, stories, photos and videos, the messages you sent (from every conversation), plans, the events you host, RSVPs, usage signals, notification tokens, and stored files. If you signed in with Apple, we also ask Apple to revoke KOMOS’s access.

Some things work differently:

• If you hold a paid ticket, deleting your account does not cancel it: we keep the order until the event’s night has passed. If you host a paid event that has not been settled, you cannot delete your account until it is.
• Records of ticket sales stay in the venue’s or organizer’s sales records, with your account removed from them.
• If you are a venue’s last owner, the venue returns to unclaimed. An organization or artist page you were the last owner of is held for 30 days and then deleted.
• Your waitlist sign-up, if you made one, is separate and can be removed by asking us.
• Messages, replies, and notes you wrote for a business on KOMOS stay with that business, without your name.
• Statistics that do not identify anyone are not affected.
• Records of strikes, suspensions, or appeal decisions about your account stay, without your account named in them and without their notes. Your appeals themselves, with what you wrote, are deleted.
• Information we must keep by law, and copies in backups, remain for a limited time.

17. Your choices

• Location: turn sharing on or off, choose who sees you, or go Incognito, in the app; change location permission in your phone’s settings.
• Who sees what: choose your profile’s visibility, the audience of each post and story, who can see your nights, and whether you appear on an event’s guest list.
• Usage signals: turn them off in Settings, under Privacy.
• Notifications: every kind of push notification falls under one of the switches in Settings, you can turn message previews off, and quiet hours silence push notifications from KOMOS, though not Live Activities or the “are you here?” prompt your phone shows when you arrive somewhere.
• Blocking: block anyone, at any time.
• Your content: delete posts, stories, and nights from your memories, and remove messages you sent (until someone replies).
• Business emails: the weekly summary for businesses is off unless you turn it on, and every summary has a link to turn it off.
• Your account: delete it in Settings → Delete account.

18. Your privacy rights

Wherever you live, you can ask us to:

• tell you what personal information we have about you and give you a copy of it in a portable format;
• correct information that is wrong;
• delete your information; and
• explain how we use and share it.

Many of these you can do yourself in the app. For anything else, email [email protected], or see getkomos.com/support. We will need to confirm that the request comes from you, usually from the email address or account it is about, and we answer within the time the law requires (usually 45 days). Someone you authorize can make a request for you, with proof that you authorized them. We will never treat you differently for using your rights.

If we decline your request, you can appeal by emailing [email protected] with the subject line “Privacy appeal.” We will answer in writing and explain our decision. If you are not satisfied, you can contact your state’s attorney general.

19. More for residents of California and other U.S. states

Privacy laws in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states give their residents specific rights, including the rights in section 18 and the right to opt out of the sale of personal information, targeted advertising, and certain profiling. KOMOS does not sell personal information, does not use it for targeted advertising, and does not use it for profiling that produces legal or similarly significant effects, so there is nothing to opt out of; we honor these rights for everyone.

In the past 12 months, we have collected these categories of personal information, from you, your device, other people on KOMOS, and the companies listed in section 5, for the purposes in section 6:

• Identifiers: name, handle, email address, account IDs, push tokens, and IP addresses (received by our providers).
• Customer records: name, email address, and, if you typed one in a website inquiry, a phone number.
• Characteristics: your age, from your birthdate.
• Commercial information: tickets you got or bought.
• Internet or other electronic network activity: usage signals and your interactions in the app.
• Geolocation: your precise location when you allow it, and your check-ins.
• Audio and visual information: your photos, videos (including their sound), and profile photo.
• Professional information: for business accounts, your business and your role in it.
• Inferences: the preferences we work out to make recommendations (section 7).
• Sensitive personal information: precise geolocation, your account login (email and password), and the contents of your private messages.

We disclose each of these categories for business purposes only to the service providers in section 12 that need it to provide their service. We have not sold or shared (for cross-context behavioral advertising) any personal information in the past 12 months, and we never sell or share the personal information of anyone under 18. We use sensitive personal information only for the purposes the law allows without a “limit” option: to provide the services you ask for, including your recommendations, and to keep them safe. We keep each category for the periods in section 15.

California’s “Shine the Light” law: we do not share personal information with other companies for their own direct marketing. Nevada residents: we do not sell covered information.

If we ever offer rewards in exchange for information, such as perks for answering questions about venues, we will explain the terms and ask you to opt in first, and you can withdraw at any time.

20. Children and young adults

KOMOS is for adults 18 and older. We do not knowingly collect information from anyone under 18. If a birthdate shows that someone is under 18, the account is put on hold: it cannot be used, and it is deleted, with everything entered into it, within 30 days. If you believe someone under 18 is using KOMOS, contact us at [email protected] and we will close the account.

People who are 18 to 20 can use KOMOS. Venues and events marked 21+ are labeled, and the app warns anyone under 21 before they check in or RSVP there. Paid tickets to them can be bought only by people old enough; a free ticket that comes with an RSVP carries the same warning, and the venue checks age at the door. Age ranges shown to venues include only guests 21 and older.

21. How we protect information

Who may see what is enforced on our servers, by rules built into our database, so the app on your phone is never what keeps your information private. Private photos, videos, and stories are served only through links that expire. Photos are re-encoded on your phone before upload, which strips hidden metadata such as GPS location. Videos are not re-encoded: the location your phone saved in a video is removed on your phone (or in your browser, in the business tools) before upload, and a video whose saved location cannot be removed is not uploaded; other details saved with a video, such as when it was recorded and the kind of phone that recorded it, stay in it. A video uploaded before October 14, 2026 may still carry the location saved with it. Card details never reach KOMOS. Passwords are stored only in protected (hashed) form. Our code is scanned for secrets before it is saved, and only a small number of KOMOS staff can see the information needed to review reports and run the Services.

No system is perfectly secure. If a security breach affects your personal information, we will notify you and the authorities as the law requires. Keep your sign-in details private, and tell us at [email protected] if you think your account has been compromised.

22. Where information is stored

KOMOS is run from the United States, and your information is stored in the United States (our database is in Oregon), though our providers may handle it elsewhere to deliver the Services, for example when Cloudflare serves our website from a location near you. If you use KOMOS from outside the United States, your information is transferred to and handled in the United States.

23. Changes to this policy

We will update this policy whenever what we collect or how we use it changes. When a change matters, such as new information collected or a new way of using it, we will tell you in the app before it takes effect. The date at the top shows when this policy last changed.

24. Contact us

KOMOS Industries LLC, New York. Questions or requests about your privacy or this policy: [email protected].