Privacy Policy

What data do we process?

We process the account identifier, name, email and profile photo, when available, shared by your sign-in provider; profile and contact information you add; events, attendance, connections, encounters, private notes and Bi’Kahve invitations. We do not receive the password for your chosen Google, Apple or LinkedIn account. Infrastructure providers may also process IP addresses, device/browser information and activity logs for security and troubleshooting.

Why do we use your data?

We use data to create your account, manage your session, provide the features you choose, handle connections and events, prevent abuse and resolve problems. Information is collected electronically from you, your sign-in provider and your use of the service. Processing relies on grounds such as entering into or performing a contract to provide the service, legitimate interests in security, and applicable legal obligations. Where consent is required, we ask for it separately.

Who can see it?

Your basic profile may be visible to other signed-in users. If you make your profile public, permitted basic information may also be accessible outside the application. Connection and invitation information is shared with the people involved. Your private notes are visible only to you within the application and are not listed in the administration panel. Authorized administrators can access records needed for moderation and security. We do not sell your personal data.

QR, NFC and shared profile cards

When you share a QR code or profile link, people with that link can view your name, photo, company, title and bio without the app and download your contact card (.vcf). Phone and email are included only if you enable them in profile sharing settings. Card opens are recorded with their source, time and a random visit identifier to avoid counting refreshes twice. Signed-in scans also record the user identifier and can notify the card owner if enabled. Automatic QR/NFC connections are off by default and can be enabled in your profile.

Camera, photos and voice notes

Camera access is requested for QR scanning, and microphone access only when you start a voice note. Photos come from files you choose through the system file/photo picker; access to all your files is not requested. Voice recordings and written notes are private and are not added to the other person’s view or the public card. Event context and private notes kept with a pending request are linked to the encounter when the connection is accepted.

Service providers and transfers

We use Supabase for authentication and data storage, and Vercel for web hosting. Your chosen identity provider also processes data under its own privacy policy. Depending on our providers’ infrastructure, data may be processed in different countries. Data is shared as necessary to operate the service and in accordance with applicable data protection rules, and may be disclosed to competent authorities when legally required.

Sessions and browser storage

We use device and browser storage to keep you signed in and remember your language and theme preferences. Sign-in providers may use their own session cookies. This version does not use advertising tracking. Clearing browser data may remove your session and saved preferences.

Retention and security

Data is retained for as long as needed to provide the service and meet necessary security or legal obligations. When retention is no longer needed, data is deleted or anonymized; removal of backup copies may take additional time. Access controls and secure connections help protect data, although no system can guarantee absolute security.

Your rights and requests

Depending on applicable law, you may have rights to learn whether your data is processed, request information and access, request correction or deletion, learn who receives your data, and object to processing. You can edit your profile in the application. For account deletion and other privacy requests, use the contact address below. We may need to verify your identity before handling your request.

Changes to this policy

We update this page when the service or our data practices change. The date above identifies the current version; significant changes will be communicated appropriately.

Contact

Bi’Kahve

Privacy requests: bikahveplatform@gmail.com