Palin is designed to use as little personal data as reasonably possible while still providing its core features.
We do not sell personal data to advertisers, we do not use behavioral advertising tracking, and we aim to minimize unnecessary data collection while still providing features such as accounts, events, messaging, and location-based discovery.
Where personal data is needed, we aim to be clear about why it is used, who can see it, and what choices you have.
Makss Golubs
c/o VAYU community
Blauenstrasse 61
4054 Basel
Switzerland
Email: hello@palin.app
For the purposes of applicable data protection law, Makss Golubs is the controller of the personal data described in this Privacy Policy.
This Privacy Policy explains how Palin processes personal data when you use the Palin website, app, and related services.
§3 Public and private content
Some parts of Palin are intended to be visible to other users or to the public.
User profiles are public. Public profile information, including your display name, handle, public profile content, and public events you post, may be visible to anyone, including people without a Palin account.
If you choose to store your real name in your account settings, it is not displayed publicly on your profile unless a specific feature states otherwise.
Events are public by default unless set to private where that option is available.
For public events, event information may be visible to anyone, including people without a Palin account. Depending on the organizer’s settings, the exact event location may either be publicly visible or shared only with confirmed attendees.
Private events are only visible to invited user accounts.
Images and other content uploaded to Palin are visible according to the visibility of the relevant profile, event, or organization.
Organization profiles are public. Public organization information and the fact that certain users are members of an organization may be visible to others.
§4 Personal data we collect
We collect personal data you provide directly, data generated through your use of the service, and technical data needed to operate and secure Palin.
•
username, handle, or account identifier
•
password hash and authentication-related data
•
account settings and preferences
•
optional profile information you choose to provide
•
real name, if you choose to provide it in your account settings
§4.2 Event and attendance data
•
events you create, manage, join, or interact with
•
attendance or RSVP status
•
attendance requests and organizer responses
•
invitations and invitation responses
•
event descriptions, images, and related event content
•
sender and recipient identifiers
•
timestamps and related metadata
•
actions taken in connection with organization administration or organization-managed events
•
device location, if you choose to allow location access
•
manually selected location information, such as a pin or search area
•
location search queries submitted when creating or searching for events
§4.6 Notification and communication data
•
communication preferences
§4.7 Technical and security data
•
device, browser, operating system, and app metadata
•
request, diagnostic, crash, and error data
•
abuse-prevention and anti-bot signals
•
moderation-related results for uploaded images and event descriptions
§4.8 Purchase and transaction data
If you buy a ticket or take out a supporter subscription, we may receive limited data needed to confirm and administer it, such as:
•
ticket or subscription status
•
purchase or renewal timestamps
•
payment or platform reference identifiers
We do not store full payment card details.
Palin requires users to be at least 16 years old. At account creation, we record confirmation that you meet this requirement, the method used (Apple Declared Age Range, Google Play Age Signals, or self-declaration), and a timestamp.
Where Apple or Google age signals are used, we only receive whether you meet the age threshold. We do not receive, store, or log your birthdate or age range.
For age-restricted events, you may additionally be asked to confirm that you meet the applicable age threshold.
§5 Sources of personal data
We collect personal data directly from you, automatically when you use Palin, and, where relevant, from Mollie to confirm purchase or transaction status. Where you allow it, we also receive age-threshold signals from Apple or Google, used solely to confirm the minimum age as described in §4.9.
We do not allow non-users to participate in events through organizer-entered attendee records.
§6 How we use personal data
•
create and manage accounts
•
confirm the minimum age at account creation
•
authenticate users and maintain account security
•
provide messaging, event, attendance, guest-list, and organization features
•
display public profiles, public events, and public organization pages
•
process attendance requests, invitations, confirmations, cancellations, and related event interactions
•
provide location-based event discovery when location features are used
•
send service messages, notifications, reminders, invitations, confirmations, cancellations, and product communications in line with your settings
•
manage notification and communication preferences
•
process ticket purchases and supporter subscriptions
•
detect spam, fraud, abuse, harmful content, and unauthorized use
•
moderate content and enforce platform rules
•
maintain the security, availability, and reliability of the service
•
comply with legal obligations
•
establish, exercise, or defend legal claims
§7 Legal bases for processing
Where GDPR or similar laws apply, we rely on the following legal bases.
§7.1 Performance of a contract
We process personal data as necessary to provide Palin and its core features, including account management, messaging, event functionality, attendance handling, organization functionality, and the administration of ticket purchases and supporter subscriptions.
§7.2 Legitimate interests
We process personal data where necessary for legitimate interests, including service security, abuse prevention, age gating, moderation, diagnostics, service improvement, legal defense, and essential service communications.
We rely on consent where required, including for device location access, sharing of age-range signals through platform APIs, and any non-essential cookies or similar technologies, where applicable. You can withdraw consent for future processing through your device or account settings.
We may process personal data where necessary to comply with applicable law, regulatory requirements, tax and accounting obligations, lawful requests, or other legal obligations.
§8 Required and optional data
Some data is required for certain features. For example, account and authentication data are required to create and use an account, age confirmation is required at account creation, event information is required to create an event, and certain attendance-related information may be required to request or confirm participation.
Other data is optional, such as device location, real name, optional profile fields, and many notification and communication settings.
If you do not provide data required for a specific feature, that feature may not work properly or may not be available.
Messages are encrypted in transit and at rest, but they are not end-to-end encrypted.
This means Palin can technically access message content where necessary to provide the service, investigate abuse reports, address security or technical issues, enforce platform rules, or comply with legal obligations, subject to appropriate access controls.
§10 Organizers and organizations
When you request, confirm, attend, or otherwise interact with an event, Palin discloses the attendance-related data needed to operate that event to the relevant organizer.
Depending on the event and your interaction, this may include:
•
your display name or account identity
•
ticket purchase and supporter-subscription status relating to that organizer’s events or supporter offerings, where relevant
•
your real name, if you provided it and it is used in the attendance process
Email addresses are not disclosed to organizers through the app.
Because your purchase contract for tickets and supporter subscriptions is with the organizer, Mollie may also share transaction-related data with the organizer directly as part of their merchant relationship.
If an event is managed through an organization, authorized organization managers may also access relevant event and attendee information for that event.
Where organizers or organization managers use attendee data outside Palin for their own purposes, they may act as independent controllers of that data and are responsible for their own compliance with applicable data protection law.
§11 Notifications and communications
Palin may send push notifications, emails, and other communications about account and security matters, event and attendance activity, messages, reminders, updates, purchases, transactions, and other communications you choose to receive.
Some communications are essential to the service and may still be sent where necessary to operate the service, protect your account, confirm transactions, or comply with legal obligations.
If you allow location access, Palin may use your device location to help show events near you.
If you do not want to share device location, you can manually set a pin or search area instead.
We do not use device location for continuous background tracking.
§13 Moderation, abuse prevention, and restrictions
To help keep Palin safe, we use automated systems and server-side protections to detect harmful content, spam, abusive activity, suspicious behavior, and automated misuse.
This may include scanning uploaded images and event descriptions.
These systems may temporarily limit uploads, messaging, attendance-related actions, account activity, or other use of the platform, and may also lead to content removal. Depending on the case, actions may be taken automatically, may involve admin review, or both.
If you believe content or account restrictions were applied in error, you may contact us to request review.
§14 Payments: tickets and supporter subscriptions
Paid offerings on Palin are tickets to real-world events and supporter subscriptions to organizers. Your purchase contract is with the organizer; Palin facilitates the transaction and charges organizers a service fee.
All payments are processed by Mollie, with the organizer as the merchant. Palin does not use Apple or Google in-app purchase systems, as no digital goods or services are sold.
We do not store full payment card details.
Mollie processes payment-related personal data under its own terms and policies. Palin may receive limited information from Mollie that is necessary to confirm access, administer purchases and subscriptions, calculate service fees, provide support, prevent fraud, handle disputes, or comply with legal obligations.
§15 Service providers and recipients
We use service providers to operate Palin. Depending on the service involved, these providers may process personal data on our behalf.
•
Scaleway for infrastructure, databases, storage, and backend operations
•
TomTom for geocoding and map-related services
•
bunny.net for content delivery
•
Sightengine for automated moderation of uploaded images and event descriptions
•
Mollie for payment processing
Depending on the feature involved, these providers may process data such as stored content, technical metadata, crash and error data, geocoding requests, uploaded images, event descriptions, and transaction-related data.
We may also disclose personal data where necessary to:
•
organizers and organization managers, as described in this Privacy Policy
•
comply with legal obligations
•
protect rights, safety, and security
•
establish, exercise, or defend legal claims
§16 International transfers
Palin is intentionally designed to minimize transfers of personal data outside Switzerland and the EEA.
Personal data may be processed in Switzerland, the EEA, and, in limited cases, other countries depending on the location of our service providers and their subprocessors.
Where personal data is transferred to a country that is not recognized as providing an adequate level of protection under applicable law, Palin relies on an appropriate safeguard or other lawful transfer mechanism, such as contractual safeguards, where required.
You may contact us if you would like more information about the safeguards relevant to a specific transfer.
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide the service, maintain service continuity and platform integrity, comply with legal obligations, and handle disputes or legal claims.
Account data and related user content are generally retained while your account remains active.
If an account is inactive for 24 months, Palin may treat it as inactive and may delete the account and associated personal data after prior notice, unless longer retention is required for legal reasons.
Account deletion requires that you first cancel or delete your future events and delete or transfer any organizations you administer.
When you then request account deletion, your account is marked as pending deletion. During the following 7 days, deletion may be cancelled by you. If not cancelled, deletion is then completed automatically.
After deletion is completed:
•
the user profile is deleted
•
past events created by the user are deleted
•
attendance requests and support history linked to the user are deleted
•
messages you have sent are retained but anonymized: your name and account identity are removed, including for the other participant, who can no longer see who sent them
•
payment and transaction records are retained but anonymized in the same way, and limited records may additionally be retained where required under §17.5
Anonymized data is no longer linked to you.
Logs, crash data, and technical metrics are generally retained for up to 7 days, unless longer retention is needed for a specific security incident, abuse investigation, legal claim, or legal obligation.
§17.5 Payment, accounting, and legal records
Where payment, accounting, tax, or legal requirements apply, limited records may be retained for as long as required by law.
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
These measures may include access controls, authentication measures, encryption in transit, encryption at rest where appropriate, logging, monitoring, and other security safeguards appropriate to the service and related risks.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Depending on the law that applies to you, you may have rights including:
•
the right to access your personal data
•
the right to correct inaccurate personal data
•
the right to request deletion of personal data
•
the right to request restriction of processing
•
the right to object to certain processing
•
the right to receive a portable copy of certain personal data
•
the right to withdraw consent where processing is based on consent
•
the right to lodge a complaint with a competent data protection authority
§20 How to exercise your rights
You can exercise your rights by contacting hello@palin.app or by using in-app settings where available.
We may ask for reasonable information to verify your identity before responding to your request.
If you believe your personal data has been processed unlawfully, you may have the right to lodge a complaint with a competent data protection authority.
For Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC).
If EEA data protection law applies, you may also have the right to complain to the supervisory authority in your place of residence, place of work, or the place of the alleged infringement.
§22 Cookies and similar technologies
Palin does not intentionally use advertising cookies or cross-service tracking technologies for behavioral advertising.
We may use strictly necessary cookies or similar technologies required to operate, secure, and maintain core website or app functionality, such as authentication, session management, security, or essential settings.
We also collect limited crash reports and technical error logs through the app and backend to detect and fix failures.
If we introduce non-essential cookies or similar technologies in the future, we will request consent where required by applicable law.
§23 Sensitive personal data
Palin does not require users to provide special categories of personal data.
However, users may choose to include sensitive personal data in profiles, messages, event content, or uploads. For that reason, users should avoid sharing sensitive personal data unless it is necessary.
If users choose to submit such data, Palin may process it as part of providing, securing, moderating, or supporting the service, subject to the applicable legal basis and appropriate safeguards.
§24 Children and age-restricted events
Palin is intended for users aged 16 and older. We do not knowingly offer the service to children under 16, and we confirm the minimum age at account creation as described in §4.9.
For age-restricted events, users may be asked to confirm that they meet the required age threshold.
§25 Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
If we make material changes, we will provide notice through the app, website, email, or another appropriate method where required.
If you have questions about this Privacy Policy or how personal data is processed, contact:
Makss Golubs
c/o VAYU community
Blauenstrasse 61
4054 Basel
Switzerland
Email: hello@palin.app
