Privacy Policy

Kelar AS (“Kelar”, “we”, “us”) respects your privacy and aims to collect only the personal information we need.

This Privacy Policy explains how we process personal data when you use the Kelar website, join the waitlist, create or use a Kelar account, use the Kelar mobile app, interact with events, or use organizer features. Together, we call these “Kelar”.

Kelar AS is the data controller for the personal data described in this policy.

Privacy questions can be sent to contact@kelar.app.

When you create and use a Kelar account, we process your account and profile information. This may include:

• your first and last name
• your email address
• your user ID
• your home city
• optional details you choose to add, such as a profile image, date of birth or gender

If you sign in with Google, we receive basic account information from Google, such as your name and email address, to create and sign you in to your Kelar account.

Kelar stores the things you do with events so the app works as you expect, for example:

• events you save
• events you mark “I’m in” for

We also keep our own first-party usage analytics, such as which events are viewed, how people engage with them, and when someone taps a button like a ticket or registration link. When you are signed in, this activity may be linked to your account. When you are not signed in, it is linked to a pseudonymous identifier instead of your name or email address.

We use this information to run and improve Kelar. We do not use it for third-party advertising, and Kelar does not use advertising identifiers to track you across apps and websites owned by other companies.

If you allow it, Kelar can use your device’s location to help show events near you. Your device asks for permission first, and you can change that choice at any time in your device settings.

You can deny location access and still use Kelar.

We use your device location when you use these features. We do not store your precise location as an ongoing history on your account or profile. To make location features work, coordinates may be sent to our maps provider, Mapbox, for example to look up a place or show a map.

Event venues

Organizers can choose to use their current location as the venue for an event. When they do, that location becomes part of the event and is published with it, like any other venue an organizer enters.

If you apply to become an organizer, manage an organizer, or are invited to one, we process information about you and the organizer you represent. This may include:

• organizer applications and the information you provide in them
• requests to join an existing organizer
• which organizers you are a member of
• your email address, if an organizer invites you to join their team

Organizer profiles and events may include:

• the organizer’s name and avatar
• public contact information
• website and social media links
• event titles and descriptions
• dates and times
• venues and locations
• event photos
• external ticket, registration or join links

Organizer profiles and published events are meant to be public. They are visible to people using Kelar, together with any contact details and links the organizer chooses to publish. Kelar may also feature published events and organizer profiles on its own channels, such as kelar.app, Kelar’s social media accounts and newsletters. Only add personal information to an organizer profile or event that you are happy to make public.

If you allow push notifications, we store a push notification token for your device and your notification preferences, so we can send the notifications you have chosen. You can change your preferences in the app or turn notifications off in your device settings.

We may send service emails needed to run Kelar, such as organizer invitations and messages about your account.

We use a combination of automated and human moderation to review organizer applications and event content, to help keep Kelar accurate and safe.

As part of automated moderation, we send the following to OpenAI for review:

• event text, such as titles and descriptions
• event images
• the text of organizer applications

OpenAI returns a moderation result to Kelar. Depending on the result, content or an application may be approved, rejected or passed to a person at Kelar for review. We send these requests with OpenAI’s response storage turned off, and OpenAI processes this content as our service provider.

If you believe a moderation decision about your content is wrong, contact contact@kelar.app.

We process personal data for the following purposes and on the following legal bases:

• Providing Kelar. Running your account, saves, “I’m in”, organizer features, event publishing and service emails is necessary to provide the service you ask for (performance of a contract).
• Device location and push notifications. We use these only if you allow them on your device (consent). You can withdraw that permission at any time in your device settings.
• Moderation, safety and security. Reviewing content and organizer applications, preventing abuse and protecting Kelar and its users is based on our legitimate interest in keeping the service safe and trustworthy.
• Usage analytics. Understanding how Kelar is used and improving it is based on our legitimate interest in developing a useful service.
• The waitlist. Sending launch and trial updates is based on your consent, as described below.
• Legal obligations. Where the law requires us to process or keep information, we do so to comply with that obligation.

If you join the Kelar waitlist, we collect your email address so we can contact you when Kelar trials or wider access become available.

Joining the waitlist does not create a Kelar account and does not affect your ability to create an account, use Kelar, become an organizer or apply for organizer access.

We currently store:

• your email address
• the status of your waitlist signup
• when you joined
• where you joined (currently always this website)
• the version of the consent you agreed to
• relevant timestamps if you are later invited, converted or unsubscribed

We do not store your name, home address, IP address, device information or location as part of the waitlist record.

Our legal basis for sending launch and trial updates is your consent. You can withdraw that consent at any time by contacting contact@kelar.app. Withdrawing consent does not affect the lawfulness of processing that took place before withdrawal.

Emails and unsubscribing

If we send launch or trial emails, each message will include a practical way to stop receiving further launch or trial communication.

You can also contact contact@kelar.app at any time to unsubscribe or to have your email removed from the waitlist.

We use Cloudflare Turnstile to protect the waitlist form from automated abuse. Turnstile is loaded only when you scroll near the waitlist form.

Turnstile processes technical signals needed to distinguish legitimate visitors from automated traffic. This may include information such as IP address, user-agent information, TLS/browser signals, the Turnstile site key and website origin.

Kelar does not add these technical signals to your waitlist record.

We use this processing to protect the security and reliability of the website and waitlist. Our legal basis is our legitimate interest in doing so.

Kelar uses third-party service providers to operate the website, the waitlist and the Kelar app. We share personal data with them only as needed for the purposes described in this policy. Like most online services, they may also process technical information, such as IP addresses and device or browser details, as part of delivering and securing their service.

Supabase

Supabase provides authentication, database, file storage and backend infrastructure for Kelar, including the waitlist. Kelar’s Supabase projects are configured in an EU region.

Mapbox

Mapbox provides maps, place search and geocoding. When you use these features, Mapbox may receive search terms and coordinates needed to return results.

OpenAI

OpenAI provides automated content moderation for event text, event images and organizer applications, as described in Moderation and safety.

Google

Google provides Google Sign-In, if you choose to use it.

Push notification services

Push notifications are delivered through Expo’s push service and the Apple and Google push notification services for your device.

Resend

Resend delivers Kelar’s transactional and service emails, such as organizer invitations.

Cloudflare

Kelar’s website is served through Cloudflare, which provides hosting, content delivery, security and related web infrastructure. Cloudflare also provides Turnstile, which protects the waitlist form against automated abuse. Turnstile may process information through Cloudflare’s global infrastructure.

International transfers

Some service providers or their subprocessors may process information outside Norway or the EEA. Where required, appropriate safeguards are used for international transfers.

We do not sell your personal information.

Kelar does not show third-party advertising, and we do not share your personal information with advertisers or data brokers.

We disclose personal information only where necessary to operate Kelar as described in this policy (including through the service providers above), comply with legal obligations, protect the rights, safety or security of Kelar, its users or others, or where you have otherwise authorized us to do so. Information that organizers publish on Kelar is public by design.

We keep personal data only for as long as we need it for the purposes described in this policy.

Account and activity

We keep your account, profile, saves, “I’m in” and notification settings for as long as you have a Kelar account. Usage analytics are kept for as long as they are useful for running and improving Kelar.

When you delete your account

When you delete your Kelar account, we delete or anonymize the personal data associated with it, including your profile, saves, “I’m in” and notification settings.

If you are a member of an organizer that has other members, your membership is removed, and the organizer and its events remain with the organizer.

If you are the last remaining member of an organizer, the organizer and its events are unpublished and archived. Personal contact and creator information in those records is removed or anonymized where practical.

We keep a minimal record only where it is genuinely necessary for legal, security, fraud-prevention, dispute-resolution or safety purposes, and only for as long as that purpose requires.

Organizers, events and moderation

Organizer profiles and events are kept for as long as they are needed to provide Kelar. Organizer applications and moderation records are kept for as long as needed to operate moderation, handle questions and disputes, and keep Kelar safe.

Waitlist

Waitlist information is retained until the purpose of the waitlist has been fulfilled, and no longer than 12 months after Kelar becomes generally available, unless you unsubscribe or request deletion earlier.

If you unsubscribe, we may retain the minimum information necessary to record that choice and avoid contacting you again.

You can delete your Kelar account from within the Kelar app. What happens to your information when you do is described in How long we keep information.

If you can’t access the app, you can ask us to delete your account by contacting contact@kelar.app from the email address linked to your account.

Depending on the circumstances, you may have the right to:

• receive information about how we process your personal data
• request access to your personal data
• request correction of your personal data
• request deletion of your personal data
• request restriction of certain processing
• receive personal data you have provided to us in a portable format
• withdraw your consent, where processing is based on consent
• object to certain processing, where applicable
• lodge a complaint with a data protection authority

In Norway, the relevant supervisory authority is Datatilsynet.

To make a request, contact contact@kelar.app.

We use reasonable technical and organizational measures to protect the information we hold. No method of storing or transmitting information is completely secure, but we work to keep the risk low. For example:

• access to Kelar’s databases is restricted
• the waitlist form is protected against bots and automated abuse
• privileged backend credentials are never exposed to website visitors

Kelar is not intended for children under 13, and you must be at least 13 years old to create a Kelar account.

If we learn that someone under 13 has created an account, we will take appropriate steps, which may include deleting the account and its personal data. If you believe this has happened, contact contact@kelar.app.

We may update this Privacy Policy as Kelar develops or if our processing practices change. The current version and its “Last updated” date will always be available on this page.

contact@kelar.app

You can also reach us through our contact page.