Privacy Policy

myfestival. (the “App”) is operated by MYSWAY APP INC, with Khaled Bessioud acting as the data controller. This Privacy Policy explains what personal information we collect when you use the App, how we use it, and the choices you have. You can reach us anytime at kaldenbess@gmail.com.

We collect only the information needed to run the App:

• Account data — email address, password (stored hashed, never in plaintext), display name, and, optionally, a profile photo you choose to upload.
• Location— your device’s GPS coordinates while you actively use map and nearby-peer features. Location is requested with “While Using the App” permission and is not collected when the App is in the background, unless you enable an explicit always-on feature.
• Bluetooth — ephemeral peer identifiers exchanged over Bluetooth Low Energy so attendees can find each other and chat offline when WiFi and cellular are unavailable. These identifiers rotate and are not tied to your real identity outside of conversations you initiate.
• Content you create — chat messages, direct messages, marketplace orders, saved artists, and personal schedule selections.
• Device information — app version, operating system version, and a push-notification token when you grant notification permission.
• Photos — only when you explicitly pick an image from your library or take one with the camera (e.g. for a profile photo or chat attachment).

• Provide core festival features — schedule, map, lineup, chat, marketplace.
• Deliver notifications you opt into.
• Fulfill orders placed in the in-app marketplace (when applicable).
• Detect abuse and moderate content.
• Comply with legal obligations.

We do not sell, rent, or trade your personal information. We share it only with the service providers strictly necessary to operate the App — for example, cloud hosting, push-notification gateways, and payment processors for marketplace transactions — and only the data each provider needs to perform its function. We may disclose information when required by law or to protect the safety of users.

Account data is retained for as long as your account is active. Chat content related to a specific festival is retained for the lifecycle of that festival plus a short post-event window for moderation review. You can request deletion at any time at kaldenbess@gmail.com.

Depending on your jurisdiction (including the European Economic Area, the United Kingdom, Canada, and California), you have rights to access, correct, export, and delete your personal data, and to object to or restrict certain processing. To exercise these rights, email us at kaldenbess@gmail.com. You may also delete your account in-app from the Profile screen, which permanently removes your data on next backend cleanup.

Authentication tokens are stored in the iOS Keychain (or Android Keystore) on your device. All traffic between the App and our servers uses HTTPS with TLS 1.2 or higher. We follow industry- standard practices to protect data at rest and in transit, though no system can be guaranteed completely secure.

The App is not directed to children under 13 (or the relevant minimum digital-consent age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

Our servers are located in North America. If you access the App from outside that region, you understand and consent that your information is processed in jurisdictions that may not provide the same level of data protection as your country of residence.

We may update this Privacy Policy from time to time. We will post the new effective date at the top of this page and, for material changes, notify you in the App. Your continued use of the App after an update constitutes acceptance of the revised policy.

Questions, requests, or complaints can be sent to kaldenbess@gmail.com.