Evntt

Privacy policy

Evntt is an app for organizing an event with other people, so nearly everything it holds is something you or your co-members typed in. This page says exactly what that is, who else ever sees it, and what you can do about it.

Last updated August 17, 2026

In short

We ask for what the app needs in order to work, and nothing else. We make no money from any of it. Four commitments, none of them carrying a footnote.

  • No advertising, and no advertising identifier.
  • We never sell, rent or trade your personal information.
  • No analytics library, no third-party tracker, no profiling of what you do in the app.
  • Nothing you or your group writes is used to train an AI model.

Who is responsible

Evntt is operated by Evntt inc., Toulouse, France, responsible for the personal information described here. This policy covers the mobile app on iOS and Android, this website, and the servers behind both.

Write to support@evntt.app about anything on this page, a request concerning your own information included. That address also reaches the person in charge of protecting personal information.

What we collect

Five categories, and nothing outside them.

Your account
You sign in with a code sent to your email address, with Google or with Apple. We receive the email address of that identity, and the name and picture it exposes when it exposes any. You choose a username and may upload an avatar. You can also join an event as a guest, without an account, and then the only thing that exists is the nickname you typed.
What your group writes
Events with their dates and their places, the program, expenses and who paid them, polls and votes, the days each member declares themselves free, shared lists, messages with their edits, their likes and their read receipts, and proposals with their comments.
Photos and files
The covers and avatars you upload, kept with the event or the profile they belong to.
Your device
Which platform it runs, the language it is set to, the version of the app, and a notification token once you allow notifications. No advertising identifier, and nothing identifying the hardware itself.
Technical logs
Our servers record the requests they answer, with an IP address and a timestamp, so that the service can be kept up and abuse can be spotted.

What the app asks permission for

Each one is asked for at the moment it is needed, can be refused, and can be taken back later in your device settings. Refusing one switches off what it was for, and nothing more.

Photos
To pick a cover or an avatar. Only the image you pick leaves your device.
Calendar
Write only, to add an event to your own calendar. The app cannot read what is already in it.
Location
To center the map on where you are while you look for a place. Your position is used on the device and never stored by us.
Notifications
To tell you what happened in your events. Refusing keeps every notification inside the app, minus the alert on your screen.

Why we hold it

The GDPR asks for a legal basis behind each purpose. Here are ours, which are also the reasons the app would not work without them.

Running the service
Your account, what your group writes, the files you upload. An event nobody can read is not an event. Legal basis: performance of a contract.
Keeping it up and safe
Technical logs, spotting abuse, and understanding what broke when something breaks. Legal basis: legitimate interest.
What you switch on
Notifications, and access to your photos, your calendar and your location. Legal basis: consent, which you can take back at any time.
Obligations
Where a law requires us to keep something, or to hand it to an authority entitled to ask for it. Legal basis: legal obligation.

Who sees what

An event is visible to its members and to nobody else. Inside it, the other members see your nickname, your avatar and what you contribute — a message, an expense, a vote, an item you ticked off. That is the point of the app, and it is the whole extent of it: nothing you put into an event is public, indexed by a search engine, or carried over into another event.

The invite link is the one exception, and it is yours to hand out. Whoever holds it sees the event’s name, its description and its cover before joining, which is exactly what makes the link worth sending. Treat it the way you treat the address of the party.

The services behind the app

We do not run every server ourselves. These providers process personal information on our behalf, under contract, and only for what is described here.

InstantDB
The database, the sign-in and the file storage. Everything you and your group write lives there.
Supabase
The server functions for what a phone cannot do on its own — attaching a second sign-in method, leaving an event, deleting an account, sending a notification.
Expo, Apple and Google
Notification delivery, through Expo’s service and then Apple’s or Google’s, and app updates. A notification carries only what you would read on your lock screen.
Google and Apple
Sign-in. They tell us which identity signed in and confirm its email address. We never see your password.
Google Maps and Google Places
Maps and place search. What you type into a place search reaches Google.
Anthropic
When you paste a link into a proposal, the public content of that web page is sent to a language model so the form opens already filled in. The page, not your event. Nothing goes out unless you paste a link, and the provider is named right here if it ever changes.
Vercel
Hosting for this website, the page you are reading included.

Where it is kept

The providers above operate in several countries, the United States among them, so your information may be processed outside the one you live in. When it leaves, it travels under the safeguards the applicable law requires — for readers in the European Union and the United Kingdom, the European Commission’s standard contractual clauses.

How long we keep it

Your account and its content stay for as long as your account does. You delete it yourself from the app, in the account settings, and the app tells you first what becomes of every event you belong to: the ones you own pass to another member, and the ones nobody left can inherit are destroyed along with everything in them. Your profile, your avatar, your sign-in identities and your devices’ notification tokens go with it.

One thing survives on purpose. In the events that carry on without you, what you wrote — a message, an expense, a vote — keeps the nickname you had there and stops pointing at any account, because deleting it would rewrite a shared history and leave the group’s expenses wrong. Technical logs are kept for thirty days at most.

Your rights

These hold wherever you live. Most of them are a tap away in the app. For the others, write to support@evntt.app and we answer within thirty days.

Access
A copy of what we hold about you.
Correction
Have what is inaccurate corrected. Your profile and each of your nicknames are editable in the app.
Deletion
Delete your account from the app at any time, without going through us.
Portability
Receive your information in a structured, readable format you can take elsewhere.
Withdrawal
Turn notifications off, or any permission you granted, at any time, in your device settings.
Complaint
Should our answer not satisfy you, take it to your supervisory authority — in Quebec the Commission d’accès à l’information, elsewhere in Canada the Office of the Privacy Commissioner, and in the European Union the authority of the country you live in.

How it is protected

Everything travelling between the app and our providers is encrypted. Sign-in tokens sit in your device’s secure storage. What keeps an event’s content to its members is a set of permission rules checked on the server on every single read, rather than a screen the app declines to show — the difference matters, because the second kind can be worked around and the first cannot. Access to production data is limited to the people who need it. No system is impossible to breach, and if one ever affected you we would tell you, and the authorities the law names.

Age and children

Evntt is not built for children. The App Store rates its content 4+, which says there is nothing objectionable in it rather than that it is an app for young children — those are two different questions, and the second one is answered here. Holding an account requires being at least 13, at least 16 where local law sets that age, and in Quebec the consent of whoever holds parental authority below 14. We do not knowingly collect anything about a child under those ages — write to support@evntt.app if you believe we have, and it will be deleted.

Changes to this policy

When this text changes, the date at the top changes with it and the new version replaces this one on this page. A change that materially affects you is announced in the app before it takes effect, rather than slipped in.

Contact

support@evntt.app, for a question about this policy, a request concerning your own information, or anything else about the app.