This Privacy Policy explains what personal data we collect, how we use, store, and protect it, and which privacy rights you can exercise. We may update this Privacy Policy from time to time. If substantial changes are made, we will post a notification on our website and inform registered users by email.

If you have any questions, please contact us at [email protected].

1. Applicability

This Privacy Policy applies to our website and web application at https://kawan.app (the “Services”). We process your personal data to provide and improve our Services. We handle your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws, including the Dutch Telecommunications Act regarding cookies (“Relevant Legislation”).

2. Data We Collect

We collect the following personal data when you register, complete your profile, and use our Services. If you choose to register through Google, we receive certain login information from that provider.

Login Information

• Email address

Profile Information

• First name, last name, gender, date of birth, city

Security & Technical Data

• IP address for security and service improvement

User Activity Data

• Buddy requests sent
• Matched buddies
• Events you like/view/join
• Tokens owned and transaction history

Payment Data

• Payment details (processed by our payment provider)
• Invoices and purchase records

3. How We Use Your Data

We process your data for the following purposes:

• Operating and improving the app
• Showing relevant events near you
• Facilitating buddy matching based on your preferences
• Preventing impersonation and supporting platform trust
• Age verification (18+) and age-based matching
• Gender-based matching where applicable

Public Profile Display:

• We do not display your first name, last name, email address, or date of birth publicly
• We show your age and gender to support clear expectations between users

4. Your Data Protection Rights

You have the following rights under GDPR:

• Access - Request a copy of your personal data
• Rectification - Correct inaccurate or incomplete data
• Erasure - Request deletion of your data in certain cases
• Restriction - Limit how your data is processed
• Objection - Object to data processing in certain circumstances
• Portability - Request transfer of your data to another party

To exercise these rights, contact [email protected].

5. Data Retention

We retain personal data only as long as necessary for the purposes described:

• Account data - Kept while your account is active; deleted within 30 days after deletion
• Payment data - Retained up to 7 years in accordance with Dutch tax regulations
• Logs and analytics - Stored in anonymized or aggregated form

6. Third-Party Services

We may share limited personal data with trusted third parties that support our operations. These parties are bound by data protection agreements and are not allowed to use your data for their own purposes.

Service providers may include:

• Google Cloud Platform - Hosting and data storage
• Resend - Email communication
• KYCaid - Identity verification
• Mollie - Payment processing
• Google - Optional account login and authentication

Our Privacy Policy does not apply to these third-party services.

7. Child Safety Policy

Kawan is strictly for individuals 18 years and older. Accounts belonging to minors will be removed.

The following actions are strictly prohibited:

• Child exploitation, abuse, or endangerment
• Sharing or requesting explicit content involving minors
• Inappropriate communications with minors
• Misrepresenting age or identity
• Any conduct violating child safety laws

We comply with legal reporting obligations and cooperate with law enforcement when necessary. To report concerns: [email protected]

8. Cookie Policy

On first visit, we request cookie consent where required by Dutch law. We use the following categories of cookies:

When analytics are processed in-house only, consent may not be required — we will apply the most privacy-friendly configuration possible.

9. Security of Your Information

We implement technical and organizational measures to protect personal data from unauthorized access, loss, or misuse. However, no system is completely secure, and we cannot guarantee absolute protection.