Privacy.

This covers the AIE.F Europe app and aie.foundation. AIE.F Europe is run by Yavor Belakov, Sofia, Bulgaria, who is responsible for your data. Questions or requests: support@aie.foundation.

What we collect

• From Luma, when you register for an event: your name, email, and, if the event asks, your company and job title. We also keep whether you're going, waitlisted or declined.
• What you add in the app: your name, and if you like your photo, role, company, a short line about you, interest tags, your LinkedIn and website. Photos you add to an event gallery.
• A photo from Gravatar: if you haven't added a photo, we ask Gravatar (gravatar.com) once whether your email has one, by sending it a one-way hash of your email, and use that photo until you add your own. You can change or remove it any time.
• Events you were checked in to, when you or someone you met scanned a passport QR during the event.
• People you save and your notes on them. Only you can see these. The person you save is not told.
• Your phone's push token, if you allow notifications, and the app version.
• Sign-in records: one-time codes and links (stored only as hashes), and when your session was last used.

We don't use analytics or advertising trackers in the app, and we don't sell or rent your data.

Who sees what

• Once you add a photo, other members going to the same event see your name, photo, role, company and tags; without one, only your name. To be hidden from every list, write to support@aie.foundation.
• Photos you add to an event gallery are public at aie.foundation/photos and may be used on AIE.F channels and social media. Other members in the app see your name next to them, unless you're hidden from attendee lists. The public website never shows who added a photo. The app strips location and camera data before uploading.
• Your passport QR opens your name, photo, role, company, a short line about you and your LinkedIn for whoever scans it, also on the web if they don't have the app. Scanning someone saves them to your people. During an event, a scan checks you both in.
• If you join the app through someone's passport QR or invite link, we keep who invited you, and you both get points. They get a notification when you join and see how many people joined through them.
• Badges you earn, worked out from your check-ins, the people you meet, invites and photos, show on your passport to other members and earn points.
• Check-ins and photos earn points on a leaderboard other members see. Being hidden from attendee lists takes you off it too. Each photo has a Hide from website option that keeps it in the app only.
• Members going to an event see the names of everyone registered for it on Luma, including people who haven't joined the app yet. Only the name, nothing else.
• Your email is never shown to other members.
• Organizers can see member profiles, emails and who is going, to run the events.

Why we use it

To run the community: sign you in, show who's coming, let you keep track of people you met, and remind you about events you registered for. Our legal basis is our legitimate interest in running the community you joined, and your consent for push notifications, which you can withdraw in your phone's settings.

Where it lives

• Vercel hosts the app's server, in Frankfurt.
• Neon stores the database, in Frankfurt.
• Vercel Blob stores profile and event photos.
• Resend sends sign-in and welcome emails, from Ireland.
• Luma handles event registration under its own policy.
• Expo delivers push notifications to Apple and Google.

How long we keep it

As long as you have an account. Delete your account in the app under Me, Delete my account: your profile, photo, event photos you added, check-ins, saved people, notes, tags and sign-in data are removed straight away. Your Luma registrations stay on Luma. Copies can stay in our database provider's automatic backups for up to 7 days, after which they are gone for good.

Your rights

You can ask for a copy of your data, correct it, delete it, or object to how we use it, by writing to support@aie.foundation. You can also complain to your data protection authority. In Bulgaria that's the Commission for Personal Data Protection.