Privacy policy
In short. Evengo is for organising events among people who know each other. We collect what it takes to make that work, and nothing more. Your data is hosted in Switzerland. We do not sell it, we do not use it for advertising, and there are no advertising trackers in the app. You can delete your account at any time from within the app, and doing so genuinely erases your data.
1. Who is responsible for your data
The controller is Zacharie Seiler, Boulevard Arcangier 58, 1800 Vevey, Switzerland — contact@evengo.ch. Full details are in the legal notice.
This policy covers the Evengo app, on phone and in the browser, as well as the evengo.ch website.
2. What data we handle
Everything below comes from you: either you enter it, or it follows directly from your use of the app. We buy no data and collect none from third parties.
| Category | What it covers | Why |
|---|---|---|
| Account | Email address, password (never stored in the clear) | Identify you and secure access |
| Profile | Display name, unique handle, profile picture, bio, language | Make you recognisable to your friends. Everything is optional except the name and handle |
| Events | Title, date, time, duration, time zone, the location in words and its coordinates | Make the invitation work and show it on a map |
| Participation | Replies to invitations, departures, poll votes, items claimed on the bring list, questions and answers | Coordinate the people attending an event |
| Photos | Images uploaded to albums, and tags identifying the people in them | Share the memories of an event with those who were there |
| Connections | Friend requests and friend list | Let you invite people without re-entering their details |
| Notifications | Preferences, read status, a technical identifier for your device | Tell you what has changed, according to your settings |
| Templates | Saved event templates and their usual guests | Save you re-entering everything each time |
| Technical | Connection logs kept by our hosts (IP address, timestamp, device type) | Security, abuse detection, fault diagnosis |
3. On what legal basis
The Swiss Federal Act on Data Protection (FADP) applies. We also set out the bases under the European GDPR, since this policy is written to comply with it in advance:
- Performance of the contract between us — the terms of service — for everything that makes the service work: account, events, invitations, albums, friends.
- Your consent for what is optional and that you switch on yourself: push notifications, access to your photos, access to your location. You can withdraw it at any time, in the app or in your phone's settings.
- Our legitimate interest in keeping the service safe: technical logs, abuse prevention, backups.
- Our legal obligations, where a competent authority requires us to retain or disclose information.
4. Who sees what
This is the most important part of this policy, because Evengo is a group app: most of what you write in it is meant to be seen by others.
- Your profile — name, handle, picture, bio — is visible to people who search for your handle, to your friends, and to those attending events you share.
- An event and everything in it — location, timing, replies, votes, bring list, questions — is visible to the people attending it, and to no one else.
- Poll votes are not anonymous: participants can see who voted for what.
- A photo album is available to those attending the matching event, under the opening rules described in the terms of service.
- Your friends are not publicly exposed: nobody can browse your friend list.
None of this is reachable by search engines, and there are no public profiles on Evengo.
5. Photos and the people in them
A party photo almost always has people in it. Some of them have no Evengo account and have therefore agreed to nothing with us. Three consequences follow:
- Whoever uploads a photo undertakes, by accepting the terms of service, to have the agreement of the recognisable people in it.
- You can delete your own photos at any time, along with any tag identifying you.
- Even without an Evengo account, anyone can ask for a photo they appear in to be taken down, by writing to contact@evengo.ch. We handle those requests as a priority and without requiring a justification.
We carry out no facial recognition. Tagging people in a photo is entirely manual and done by the participants themselves.
6. Location
Evengo records an event's address and its geographic coordinates, so it can be shown on a map and a route offered. These are the coordinates of the event's venue, not yours.
The app only accesses your device's position if you explicitly ask it to, in order to centre a map or suggest a nearby address. That position is neither stored nor passed on to anyone. You can revoke the permission in your phone's settings without losing access to the rest of the app.
When you type an address, your query is sent to the autocomplete service described in section 7 to obtain suggestions.
7. Who your data is shared with
We sell no data and disclose none to anyone for commercial purposes. Only the technical providers strictly required to run the service are involved, each bound by a contract that forbids them from using your data for their own ends.
| Provider | Role | Location |
|---|---|---|
| Supabase, Inc. | Database, authentication, photo storage | Zurich, Switzerland |
| Infomaniak Network SA | Hosting for evengo.ch | Switzerland |
| Google LLC — Firebase Cloud Messaging | Delivering push notifications | United States |
| Komoot GmbH — Photon service | Address suggestions while typing | Germany |
| OpenFreeMap | Map tiles | European Union |
| Google Ireland Ltd — Google Fonts | Typefaces on the evengo.ch website | European Union |
When you view a map or search for an address, your IP address is necessarily passed to the provider concerned, as with any resource loaded from another server. No account data goes with it.
We may also disclose data to a competent Swiss authority that legally requires us to.
8. Transfers abroad
The core of your data — accounts, events, photos — never leaves Switzerland.
Two narrow exceptions: push notifications are routed through Google in the United States, a transfer covered by the Swiss–U.S. Data Privacy Framework to which Google adheres; and address suggestions and map tiles are served from the European Union, which Switzerland recognises as providing adequate protection.
9. How long we keep it
- Your account and profile: for as long as the account exists. Deleting it from the app is immediate and final.
- Events and their contents: for as long as the event exists. If you delete your account while organising events, those events are detached from your identity but stay available to the people attending them — erasing them would take other people's own memories and ongoing plans away from them.
- Photos: for as long as their album exists, or until you or the organiser deletes them.
- Your device identifier: until you sign out, uninstall the app, or the operating system invalidates the token.
- Notifications already sent: purged automatically after 90 days.
- Technical logs: kept for at most 30 days by our hosts.
- Backups: may hold deleted data for at most 30 days, until they rotate.
10. Your rights
At any time you may:
- request access to the data we hold about you;
- have it corrected — most of it can be edited directly in the app;
- request its erasure, or delete your account yourself from the Profile tab;
- request a copy of your data in a machine-readable format;
- object to a processing activity, or ask for it to be restricted;
- withdraw your consent for notifications, photos or location.
Write to contact@evengo.ch. We reply within 30 days, free of charge. We may need to verify your identity before releasing personal data.
If our answer does not satisfy you, you can refer the matter to the Federal Data Protection and Information Commissioner (FDPIC) in Bern.
11. Security
Traffic is encrypted end to end with TLS. Passwords are hashed and readable by nobody, including us. Data access is partitioned in the database itself: every query is filtered by rules that check you are entitled to see what you are asking for. Photos are served from private storage, never from a guessable public address.
No system is perfectly secure. Should a data breach present a high risk to you, we will inform the FDPIC and the people affected as soon as possible.
12. Cookies and local storage
Evengo uses no advertising cookies and no trackers. We do not measure your behaviour and install no analytics tooling.
The app keeps your sign-in session and your language choice in your browser's local storage. Both are strictly necessary to run the service and therefore need no consent. You can clear them by removing the site's data in your browser.
13. Minimum age
Evengo is for people aged 16 and over. We do not knowingly collect data about anyone younger. If you find an account created by a child under 16, write to us and we will delete it.
14. Changes to this policy
We may update this policy, particularly as new features appear. The date it was last updated is at the top of the page. For any significant change — a new kind of data, a new recipient — we will tell you in the app before it takes effect.
15. Contact us
For any question about this policy or your data: contact@evengo.ch.