Privacy Policy

This policy explains what data Kuupo (“Kuupo”, “we”, “us”) processes when you use the Kuupo app and this website, and the choices you have. Kuupo is a map-first way to find and create local events, and we built it to collect as little as possible.

Anonymous by default

Kuupo works without a sign-up. On first launch the app creates an anonymous identity tied to your device (“device login”), so you can browse, create events and chat without giving us an email address, phone number or password. You may optionally create a full account (email and password) later if you want to use Kuupo across devices.

What we process

• Profile you choose: your display name and avatar, stored so other people can recognise you in an event’s chat.
• Account details (optional): if you create a full account, your email address and a securely hashed password.
• Events: the events you create or join, including their location (coordinates), time, description and the pictogram tags attached to them.
• Talks & shared media: the messages and images you post in an event’s chat are stored so they appear in that event’s history for its participants. We don’t use them for advertising and we don’t sell them.
• Approximate location: when you allow it, your device location is used to show events near you and to place events you create.
• Description text for tagging: when you write an event description, the text is sent to our own pictogram service to suggest matching activity symbols. It runs on our infrastructure and is not used to identify you.
• Operational logs: standard server and network logs (e.g. IP address, timestamps) needed to run the service securely, rate-limit abuse and troubleshoot.

Location

Kuupo asks for permission before using your location. We use it to find events near you and to position events you create — proximity search happens on our servers (PostGIS). You can use the app without granting location and browse the map by hand instead; you can withdraw the permission at any time in your device settings.

Who we share with

We do not sell your data and we show no third-party advertising. We use a small number of processors only to operate the service:

• Hosting — our servers run on dedicated infrastructure in the EU.
• Cloudflare — CDN and network protection for this website and our APIs (processes connection metadata such as IP).
• Map tiles — the basemap is rendered from vector map tiles; loading them sends standard tile requests (including your IP) to the tile provider. We are moving to self-hosted map tiles, geocoding and routing to remove this dependency.
• Apple & Google — app distribution via the App Store and Google Play, and delivery of any push notifications you opt into.

Retention

Messages and shared images are kept as part of an event’s chat history and are deleted when that event is removed. Your profile (display name, avatar) and the events you’ve created are kept until you change or delete them, or ask us to. Operational logs are kept only as long as needed for security and troubleshooting.

Deleting your data

Because Kuupo is anonymous by default, deleting the app removes your on-device identity. To delete the data we hold (profile, events and messages you’ve posted, and any optional account), email us at hello@kuupo.com and we’ll erase it.

Children

Kuupo is not directed to children under 13, and you must be old enough to consent to this processing under your local law to use it.

Your rights

If you’re in the EU/EEA, the GDPR gives you the right to access, correct, delete, restrict or port your data, and to object to processing. You can exercise these — or complain to your data-protection authority (in Finland, the Office of the Data Protection Ombudsman) — by contacting us first at hello@kuupo.com.

Changes

We’ll update this page if our practices change and revise the “last updated” date above.

Contact

Questions about privacy? Email hello@kuupo.com.