Privacy Policy.

Keggo Ltd is a company registered in England & Wales (company number 17280515). Our registered office is 7 Glenmore Close, Addlestone, KT15 2TP. For any privacy questions or to exercise your rights, contact us at privacy@keggo.app.

• Account details — your name and email address, and the account type (punter, venue or admin).
• Venue content — if you run a venue: your pub profile, address, opening hours, services, photos and menu files you upload.
• Event content — the events you post, including details and images.
• Your activity — events you add to your calendar, pubs you follow, your notification settings, whether you made it to an event you added, events you share, and listings you report (with the reason and any note you add).
• Device ID — if you use Keggo without signing in, your activity is linked to a random ID stored on your device instead of to you. It contains nothing about who you are.
• Notification token — if you turn on notifications, an identifier for your device so we can send them.
• Location — if you use "near me" features, your device location or a place you search. We use it on your device to show distances and nearby events. We don't store your location on our servers or keep a history of your movements.
• Technical data — basic information your browser sends (such as IP address and device type) needed to run the service securely.
• Waitlist — if you join the waitlist on our website: your email address and whether you're a punter or a venue. We also keep a one-way scrambled (hashed) form of your IP address, only to stop the form being abused.
• Sign-in data — if you sign in with Google or Apple, we receive your name and email address from them to create your account.

• To provide the service — create your account, show events, let venues manage listings (performance of a contract).
• To keep it safe and working — security, moderation, approving venues and the basic technical data needed to operate and protect the service (legitimate interests).
• To contact you — essential emails like confirming your email or resetting your password (performance of a contract).
• The waitlist — a confirmation email when you join, and an email when Keggo has fully launched. Nothing else (consent, which you can withdraw any time by emailing us).
• Location features — only when you choose to use them (consent, which you can withdraw any time in your phone or browser settings).
• Notifications — to tell you when a pub you follow posts a new event, only if you turn them on (consent, which you can withdraw any time in your account settings or your phone's settings).
• To improve Keggo — counting how often events are viewed, shared, added to calendars and attended, so we can see what's working, and counting visits to our website (which pages are viewed, which site sent the visitor, device type and country). We look at these as totals, not to profile you (legitimate interests).

We use essential cookies only — set by our authentication provider to keep you signed in and secure — and keep a few settings on your device (such as your device ID and the events you've added to your calendar) so the app works without an account. The device ID also lets us count how often events are viewed, shared and added to calendars, as totals rather than to profile you. Our website counts visits with Vercel Web Analytics, which sets no cookies and doesn't identify you; the Keggo apps don't use it. We do not use advertising or analytics cookies. Google Maps, which powers our maps and place search, may receive basic technical data and set its own cookies. If our cookie use changes, we'll update this policy and ask for your consent where required.

We don't sell your data. We use a small number of trusted providers to run Keggo, who process data on our behalf:

• Supabase — authentication, database and file storage.
• Resend — sending account emails, such as confirming your email or resetting your password, and waitlist emails.
• Vercel — website hosting, and counting visits to our website without cookies (not used in the Keggo apps).
• Google — maps, place search and location lookups, "Continue with Google" sign-in, the fonts our pages load, and Google Drive, where we keep encrypted weekly backups of our database.
• Apple — "Continue with Apple" sign-in, and the Apple Push Notification service, which delivers notifications to iPhones and iPads.
• Google Firebase — sending notifications to the Keggo app on your phone.

Some of these providers are based outside the UK, including in the USA. Where data is transferred internationally, it's protected by appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses; you can request a copy of these safeguards using the contact details above. Venue profiles and events you publish are, by their nature, shown publicly on Keggo.

We keep your data for as long as your account is active. If you delete your account, we remove your personal data and associated content within 6 months, except where we need to keep limited records to meet legal obligations. Our encrypted backups are kept for 12 weeks, so deleted data disappears from them within that time. Waitlist sign-ups are deleted within 6 months of our full launch, or sooner if you ask.

We use appropriate technical and organisational measures — including encryption in transit, access controls and trusted infrastructure providers — to protect your personal data against unauthorised access, loss or misuse.

Under UK GDPR you have the right to access, correct, delete or restrict use of your data, to object to certain processing, and to data portability. To exercise any of these, email privacy@keggo.app. You can also delete your account yourself from your account page in the app or at keggo.app/account.

Keggo lists pub and bar events, some of which are for over-18s only. Keggo is not intended for children under 18, and we don't knowingly collect their data.

We may update this policy from time to time; the date above shows the latest version. If you have concerns about how we handle your data, please contact us first — and you also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.