Dencity — Privacy Policy

Last updated: 24 June 2026. Operated by Evert Cornelissen ("we", "us", "Dencity"), South Africa. Contact / Information Officer: evertcornelissen@gmail.com.

Dencity helps you see how busy places are, check in, find friends and discover venues. This policy explains what personal information we process and your rights under South Africa's POPIA and, for users in the EU/EEA/UK, the GDPR.

1. What we collect

DataWhy
Account: email, username, display name, password (stored hashed by our auth provider)To create and secure your account
Profile (optional): gender, age, ethnicity, home citySee section 2 — used carefully and with strict limits
Approximate device location (with your permission)To show nearby places and to verify you are at a venue when you check in
Check-ins, verifications, and optional check-in proof photosTo power live crowd counts and your activity/points
Friends, friend requests, and "presence" (opt-in, off by default)So friends can connect and, only if you opt in, see where you're checked in
Push notification subscriptions (if you enable them)To notify you (e.g. a friend checks in, a referral)
Photos: avatar (public), check-in proof (private), recommended-place photos (public)Profile, anti-fraud proof, and place listings
Payment status & amount for paid venue listingsTo activate featured listings — see section 4
Referrals (who invited whom) and product analytics eventsRewards and improving the app — see section 5

2. Sensitive profile data — how we limit it

3. Location

We request your device location only with your permission and use it to show nearby venues and to confirm you're actually at a place when you check in. We do not track a continuous location history; a check-in records the venue, not a trail of your movements. You can revoke location access in your device/browser settings at any time.

4. Payments

Paid venue listings are processed by PayFast. Card/banking details are entered on PayFast's secure pages — we never see or store your card details. We retain only the payment status, amount and a reference to activate your listing and for our records. PayFast's own privacy terms apply to the payment.

5. Analytics

We use PostHog for privacy-first product analytics. We record anonymous events (e.g. "checked in", "opened friends") to understand usage. We deliberately do not send your name, email, gender, ethnicity, age, search text, or assistant messages to analytics.

6. Who we share with

We do not sell your personal information. We share it only with service providers needed to run Dencity, under their own safeguards: Supabase (database/auth, hosted in the EU – Frankfurt), Netlify (hosting), Google Places & OpenStreetMap (place data), PostHog (analytics, US), PayFast (payments, South Africa), Resend (transactional email), and web-push services. We may disclose information where required by law.

7. International transfers

Some providers are outside South Africa (e.g. Supabase in the EU, PostHog in the US). Where personal information is transferred across borders we rely on the providers' safeguards and applicable lawful-transfer mechanisms.

8. Retention

We keep your information while your account is active. When you delete your account (Settings → Delete account) we permanently remove your profile and associated data (check-ins, favourites, friends, photos, etc.). Some records may be retained where the law requires (e.g. payment records).

9. Your rights

Under POPIA and the GDPR you can: access your information, correct it, delete it (account deletion is built into the app), object to or restrict certain processing, withdraw consent (e.g. location, notifications), and request a copy. To exercise these, use the in-app controls or email us. You may also complain to South Africa's Information Regulator (or your local data-protection authority).

10. Security

We use reputable providers, row-level access controls, and HTTPS. No system is perfectly secure, but we work to protect your information and limit who can see it.

11. Cookies & local storage

We use your browser's local storage to keep you signed in and remember preferences (theme, units, language, sound, age confirmation). We do not use advertising cookies.

12. Children

Dencity is intended for users 18 and over. We do not knowingly collect information from anyone under 18.

13. Changes

We may update this policy; we'll change the date above and, for material changes, notify you in the app.

Questions or data requests: evertcornelissen@gmail.com · ← Back to Dencity