KUPIKUPI Privacy Policy
KUPI is a nightlife discovery app for Harare. This policy explains what information the KUPI app and its website tools collect, why, who it is shared with, and the choices you have. KUPI is for people aged 18 and over.
What we collect
- Account details: your phone number (you sign in with it), a username, your date of birth (used only to check that you are 18 or older and to match age filters; it is never shown to other people), gender, and an optional profile photo or avatar. Gender is used to build the combined crowd split shown on events.
- Terms: the version of the Terms of Use you accepted, and when, so that we can ask again if the terms change.
- Verification: a selfie, used only to confirm you are a real person. It is viewed by KUPI staff for review. KUPI does not currently ask for an ID document. If that changes we will tell you in the app first.
- Activity: events you upHEAT, comments you write, photos you post, your KUPS balance, level and history, referrals, and your place on the leaderboard (shown by username, level and KUPS only).
- Squads: if you start or join a Squad (a small group for an event), we keep the group you joined, the nickname you were given, the messages and photos you send in its chat, and who let you in. Other members see your nickname and your level, not your name, phone number or account. In a Blind Date your username is shown to the group only once everyone is at the venue.
- Location, only while the app is open: used to show where you are on the heat map, and attached to a photo you post at a venue, and used when you tap I'm here to check that you are at the venue (taken from your phone's location at that moment; the photo's own embedded location data is removed before upload). KUPI does not track your location in the background. The map only ever shows combined areas where several people are present, never an individual.
- Notifications: a push token for your device, if you allow notifications. You can switch off events and heat notifications and people notifications separately, or all of them, in your profile. Apart from messages about your own account, you receive at most 3 a day.
- Subscriptions and payments: Premium Access and Black Badge Plus are billed by Apple or Google; we receive your subscription status, not your card details. Hosts who advertise pay through Paynow on the web portal.
- Hosts: a venue that signs up as a host gives its name and a phone number. The KUPI team phones that number to check the venue before it is approved. We keep the version of the Host and Venue Agreement that was accepted, and when.
- Assistant messages: text you send to the KUPI assistant, used to find events and kept for 30 days for quality and cost review.
How we use it
- To run the app: sign in, show and rank events, show crowd signal, award and redeem KUPS.
- To keep the community safe: review photos and verification, handle reports, and act on abuse.
- To send the notifications you allow, such as an event starting or the result of a review.
- To protect the service against fraud and misuse, for example duplicate sign ups made to farm rewards.
Who we share it with
We do not sell your personal information. We use service providers who process data on our behalf:
- Twilio, to send sign in codes by SMS or WhatsApp, and Meta, which runs WhatsApp, when you choose WhatsApp.
- Apple, Google and RevenueCat, to manage VIP subscriptions.
- Expo, to deliver push notifications.
- Mapbox, to display map tiles.
- OpenAI, to power the assistant (only the text of your assistant messages and public event details).
- Cloudflare, for hosting files such as photos.
- Paynow, to process advertiser payments.
Other users can see your display name on your comments and the photos you post, and your avatar, level and badge. In a Squad they see only your nickname and level. They cannot see your phone number, email, verification selfie, date of birth or exact location.
Legal requests
We give information about an account, a chat or a post to the police or another authority only when we receive a valid court order or another lawful request, when the law requires it, or when it is needed to protect someone from serious harm. Records that are needed for this may be kept for longer than the usual times below.
How long we keep it
- Posted photos are visible for 24 hours after approval, and the image files are deleted from storage 7 days after they expire.
- Assistant conversations are deleted after 30 days.
- A Squad chat, with its photos, is deleted 24 hours after the event ends. A message that has been reported is kept for up to 30 days after that so the KUPI team can review it, then deleted.
- Your verification selfie is kept while your account exists and removed when you delete it.
- Financial and ledger records may be kept longer where the law or fraud prevention requires it.
Your choices
- Delete your account: open Profile, then Delete account. This erases your personal details and what you posted. A KUPI subscription bought through the App Store or Google Play must also be cancelled there.
- Notifications and location: change them in your profile and your phone settings at any time.
- Block and report: every comment, photo and Squad message has a report and block option.
- Questions or requests: email info@kupiapp.com.
Security
Connections are encrypted. Access to personal data is limited to the staff who need it, and decisions that affect access or money are enforced on our servers rather than in the app.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.