Privacy Policy

Dumo LLC (“we”, “us”, “our”) operates Crwdn — the Crwdn web application at crwdn.org and the Crwdn mobile applications on iOS and Android (together, the “Service”). This Privacy Policy explains what information we collect about you, how we use it, who we share it with, and the choices you have.

When this policy refers to “you”, we mean the person using the Service — whether you’ve created an account (a Member) or are browsing without one (a Visitor). This Privacy Policy applies to both.

You can reach us any time at support@articlecast.ai.

Information you provide

• Account information. When you sign up via Google or phone number, we receive a unique identifier from Firebase Authentication and your phone number or Google profile (name, email, photo). You then choose a Crwdn username and confirm your email address.
• Profile. A profile picture you upload, the topical tags (“interests”) you pick during onboarding, and any later updates to those fields.
• Events you host. Event name, dates and times, venue address, geographic coordinates, virtual platform details, description, ticket link, tags, flyer images, and the privacy setting you choose for the event.
• Stories (mobile only).Photos or videos you share, the event they’re associated with, the time you posted, and the username they were posted under.
• Interactions. Events you mark interested in, accounts you subscribe to, and other social actions.
• Communications. When you contact us by email or through in-app feedback, we keep your messages and the contact details you used.

Information we collect automatically

• Device. Browser type and version, operating system, device model and identifiers (on mobile), language, and time zone.
• Usage. Pages and screens you view, features you use, search queries you run, timestamps of activity, and crash logs.
• Location. On the web we resolve a coarse, city-level location from your IP address (via ipstack) the first time you visit, so we can show events near you. The detected city, latitude, and longitude are cached as cookies on your device. On mobile, if you grant the While Using the App location permission, we may use device location for more precise event discovery — you can revoke this in your device settings at any time.
• Cookies and similar technologies. First-party cookies for session management, authentication, and location caching. See § Cookies and tracking.
• Logs. Standard request logs from our hosting and backend platforms (timestamps, IP addresses, request paths, response codes) retained for security and operational purposes.

Information from third parties

When you sign in with Google, Google shares your name, email, profile photo, and Google user ID with us. We never see your Google password. When you sign in with phone, Google handles SMS verification and shares only your verified phone number with us.

We rely on the following processors to operate the Service. Each has its own privacy practices, which we encourage you to review.

We do not sell, rent, or trade your personal information.

We use the information we collect to:

• Provide the Service. Create and maintain your account, show events near you, let you host events, deliver notifications when someone marks interest in your event, render maps and search results.
• Personalize your experience. Tailor your home feed to your detected location, surface events matching your interests, populate the city ticker on the landing page from aggregate signals.
• Communicate with you.Send account-related emails (verification, security alerts), push notifications you’ve opted into, and replies to support requests.
• Improve the Service. Understand how features are used in aggregateso we can fix bugs and prioritize new features. We use Vercel Analytics for this and don’t associate the data with individual accounts.
• Maintain safety and integrity. Detect and prevent fraud, spam, harassment, account takeover, and other harm to our community.
• Comply with law. Respond to legal requests, enforce our Terms, and protect the rights, property, and safety of our users and the public.

With other users

Crwdn is a social events platform. By design, certain information is visible to other users:

• Your profile (username, profile picture, selected tags, subscriber count) is publicly visible.
• Events you host are publicly listed unless you mark them Private.
• When you mark interest in an event, the host can see that you’re interested (this is the point of the feature). Other users may also see your name in the “Who’s interested” list on the event page.
• Subscriptions (who follows whom) are visible.
• Stories you post are visible to anyone who can see the associated event.

If you set an event to Private it won’t appear in public feeds, search results, or our programmatic-SEO landing pages — but anyone with the direct link can still view it.

With event hosts

When you mark interest in an event, our backend sends a push notification to the host that includes your username and the event you’re interested in. This is intended behavior so hosts can prepare and engage with their attendees.

With service providers

The processors listed in § Service providers handle data on our behalf so we can operate the Service. They are contractually limited to processing data only as needed to provide their services.

For legal reasons

We may disclose information if we believe in good faith that it’s necessary to comply with law, enforce our Terms, prevent fraud or security issues, or protect the rights and safety of Crwdn, our users, or the public.

In a business transfer

If Crwdn is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We’ll notify you before your information becomes subject to a different privacy policy.

Because Crwdn is built around finding events near you, location is core to the Service. We want to be specific about it.

What we collect

• A coarse, city-level location resolved from your IP address on the web (via ipstack)
• The latitude and longitude associated with that city
• On mobile, if you grant location permission, the device’s reported location
• The latitude and longitude of any venue you select when hosting an event

What we don’t collect

• We do not track your location in the background
• We do not collect your location when the Service isn’t in use
• We do not share precise device location with advertisers or data brokers — we don’t have either

Your controls

• Change your detected location any time via the location picker in the header
• Clear your location cookies (currentCity, lat, long) in your browser settings — we’ll re-detect on your next visit
• Revoke location permission on mobile through your device’s privacy settings
• The location you save with an event you host is public — choose your venue accordingly

When you mark interest in an event, the host receives a push notification. Conversely, you may receive push notifications about events you’re interested in, accounts you follow, or other activity.

• You can opt out of push notifications in your device settings (mobile) or browser settings (web, where applicable).
• Disabling notifications doesn’t delete your account or interests — it only stops the alerts.

The Service is not intended for children under 13(or the equivalent minimum age in your jurisdiction, which may be higher — for example, 16 in parts of the EU). We don’t knowingly collect personal information from anyone under that age.

If you believe a child has provided us with personal information, please contact us at support@articlecast.aiand we’ll delete it.

We use the following types of cookies and browser storage on the web:

We do not use advertising cookies or third-party tracking pixels. You can clear cookies in your browser settings. Clearing them will sign you out and reset your location detection.

Regardless of where you live, you have the following choices on Crwdn:

• Access. See your profile information by visiting your profile page. Request a copy of all your data by emailing support@articlecast.ai.
• Correction. Edit your username, email, profile picture, and interests in Settings.
• Deletion.Delete your account from the Settings page. We’ll remove your profile, hosted events, stories, and interaction records. Some logs may persist for security and legal compliance — see § Data retention.
• Push notifications. Disable in your device or browser settings.
• Location. Revoke location permission or clear your cached city anytime.
• Marketing emails.We don’t currently send marketing emails. If we ever do, every one will include an unsubscribe link.

European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

If you are in the EU, UK, or Switzerland, you have these additional rights:

• Right of access — receive a copy of the personal data we hold about you
• Right to rectification — correct inaccurate personal data
• Right to erasure (“right to be forgotten”) — request deletion
• Right to restriction of processing — ask us to stop or limit how we process your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to certain processing
• Right not to be subject to automated decision-making — we don’t make automated decisions about you that produce legal effects

The legal bases on which we process your data are:

• Contract — to provide the Service you signed up for
• Legitimate interests — to keep the Service safe, secure, and improving
• Consent — for optional features you’ve opted into (push notifications, precise mobile location)
• Legal obligation — when we have to comply with applicable law

To exercise any of these rights, email support@articlecast.ai. You also have the right to lodge a complaint with your local data protection authority.

California (CCPA / CPRA)

If you are a California resident, you have these additional rights:

• Right to know what categories of personal information we collect, the sources, the purposes, and the third parties we share it with
• Right to delete your personal information
• Right to correct inaccurate personal information
• Right to opt out of sale or sharing— we do not sell or share personal information for cross-context behavioral advertising; this right does not apply because we don’t engage in those activities
• Right to limit use of sensitive personal information— likewise, we do not use sensitive personal information beyond what’s necessary to provide the Service
• Right not to be discriminated against for exercising your rights

To exercise your California rights, email support@articlecast.ai with “California Privacy Request” in the subject line.

We retain your personal information for as long as your account is active. When you delete your account, we delete your profile, hosted events, stories, and interaction records within 30 days. Backup snapshots may take up to an additional 90 days to fully purge.

Logs and aggregate analytics may be retained longer, but in a form that does not identify individual users. If you are inactive for an extended period (24+ months), we may delete or anonymize your data and email you in advance where reasonable.

The Service is operated from the United States. If you access Crwdn from outside the United States, your data will be transferred to, stored, and processed in the United States and other countries where our service providers operate.

We use appropriate safeguards (such as Standard Contractual Clauses) when transferring personal data of EU/UK residents to the United States.

We use industry-standard safeguards to protect your data:

• Encryption in transit (HTTPS/TLS) for all web and mobile traffic
• Encrypted storage of credentials and authentication tokens
• Access controls limiting who on our team can read user data
• Regular review of our infrastructure providers’ security practices

No system is perfectly secure. If you suspect your account has been compromised, re-sign in with Google or update your phone, and contact us at support@articlecast.ai.

The Service contains links to third-party websites — ticketing platforms, virtual event platforms (Zoom, Twitch, YouTube, etc.), and maps. When you click those links, the third party’s privacy policy applies. We have no control over and are not responsible for the privacy practices of those sites.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (for account holders) and post a banner on the Service before the changes take effect. The Last updated date at the top of this policy indicates when it was last revised.

Your continued use of the Service after an update means you accept the revised policy.

If you have questions about this Privacy Policy or want to exercise your rights:

• Email: support@articlecast.ai
• Mail: Dumo LLC, Attn: Privacy, [physical address to be added]

For urgent security or account-takeover concerns, please put “SECURITY” in the subject line so we can route your message faster.