Privacy Policy

Last updated: October 20, 2026

EventRuta (“the app”, “we”) helps you discover upcoming events in your city using AI. This policy explains what data we collect, why, and what control you have over it.

Data we collect

• Account data — your email address and a hashed password, or your Google account ID and email if you sign in with Google. Passwords are never stored in plain text.
• Profile data — optional interests and home city you provide to personalize recommendations.
• App activity — event searches you run, events you save or share, and daily usage counters used to enforce fair-use limits.
• Contact messages — the email and text you send from the footer contact form, so we can reply. Messages sent while you are signed in are deleted with your account. Messages sent without an account stay so we can still answer them.
• Session cookie — a single HTTP-only cookie (em_session) that keeps you signed in. We do not use advertising or tracking cookies.

How we use your data

• To authenticate you and keep your account secure.
• To find and recommend events that match your searches, interests, and city.
• To let you save events and share them with friends via links.
• To enforce daily usage limits and prevent abuse.
• To read and reply to messages you send from the contact form.

AI processing

Event discovery is powered by a third-party AI provider (OpenAI). When you run a search or request recommendations, the search text, city, and your stated interests are sent to the AI provider to produce results. We do not send your email, password, or account identifiers to the AI provider.

Data sharing

We do not sell your data. Data is shared only with the infrastructure providers that run the app (hosting, database, email delivery, and the AI provider named above), strictly to provide the service. Events you explicitly share via a link are visible to anyone who has that link until you revoke it.

Data retention & deletion

Your data is kept while your account is active. You can permanently delete your account and all associated data at any time on the Delete account page. Deletion is immediate and irreversible: your profile, saved events, searches, recommendations, usage history, and contact messages sent while signed in are removed from our database.

Security

All traffic is encrypted with HTTPS. Passwords are stored as salted hashes, and sessions use HTTP-only cookies.

Children

The app is not directed at children under 13, and we do not knowingly collect their data.

Changes

We may update this policy as the app evolves. Material changes will be reflected by the date at the top of this page.

Contact

Questions or requests about your data: support@eventruta.app