Privacy Policy

PocketFest ("we," "us," or "our") provides a closed-loop contactless payment platform for school festivals, fundraisers, and similar events. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use our website at pocketfest.app and our mobile applications (together, the "Service").

By creating an account or using the Service, you agree to the collection and use of information as described in this policy.

Account information: When you sign up, we collect your name, email address, and password (stored in hashed form). If you sign in with Google or Apple, we receive basic profile information from that provider (such as your name and email).

Event and wallet data: When you join an event, we store your role (consumer, vendor, or organizer), wallet balance, and transaction history within that event.

Device and session data: We may collect your IP address, browser or device type, and session identifiers to keep you signed in and to protect the Service from abuse.

Camera access (mobile app only): The PocketFest mobile app requests camera access solely to scan QR codes for payments and event check-in. We do not record, store, or transmit camera footage.

We use the information we collect to create and manage your account, process event payments and wallet transactions, provide customer support, improve the Service, and comply with legal obligations.

We do not sell your personal information to third parties.

Event organizers and authorized staff may see transaction and wallet activity within their events as needed to operate the event.

We use trusted infrastructure and service providers (such as hosting, database, and authentication services) that process data on our behalf under contractual obligations to protect it.

We may disclose information if required by law, to protect the rights and safety of users, or in connection with a merger or acquisition.

We retain your account information for as long as your account is active. Event transaction records may be kept for a reasonable period to support organizers and resolve disputes.

You may delete your account at any time from the Settings screen in the mobile app or by contacting us. Deleting your account permanently removes your profile and associated authentication data.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and secure session management. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

PocketFest is designed for use at school and community events. Accounts are created by individuals with a valid email address. If you believe a child has provided us personal information without appropriate consent, please contact us and we will take steps to delete it.

You can update your name from the Settings screen. You can sign out or delete your account at any time.

Depending on where you live, you may have additional rights to access, correct, or delete your personal data. Contact us using the details below to exercise those rights.

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date below. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at privacy@pocketfest.app.