Privacy Policy

Effective date: 25 March 2026

1. Overview

WHERE THIS WKND ("we", "us", "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains what data we collect, why we collect it, and how we handle it in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO").

2. Data we collect

We collect the following categories of personal data:

| Category | Examples | | --- | --- | | Account information | Name, email address, profile photo (provided by Google or Apple Sign-In) | | Activity data | Events you like or mark as interested, organisers and users you follow, social-visibility preferences | | Device & usage data | Device type, operating system, browser type, pages visited, actions taken within the app | | Error & diagnostic data | Crash reports, performance metrics, stack traces (collected automatically) |

We do not collect payment or financial information at this time. If we introduce payments in the future, this policy will be updated accordingly.

3. How we use your data

We use your personal data to:

• Create and manage your account.
• Personalise your experience — show relevant events and recommendations.
• Enable social features — show your activity to mutual friends when you opt in.
• Send event updates and announcements by email. You can opt out at any time via your account settings or the unsubscribe link in every email.
• Analyse usage patterns to improve the Platform (via anonymised analytics).
• Detect and prevent fraud, abuse, and security incidents.

4. Legal basis for processing

Under Hong Kong's PDPO, we process your data based on:

• Consent — you provide data voluntarily when you create an account and use the Platform.
• Legitimate interest — analytics, security, and service improvement.
• Legal obligation — where required by Hong Kong law.

5. Third-party services

We share data with the following third-party service providers, solely to operate the Platform:

| Provider | Purpose | Data shared | | --- | --- | --- | | Supabase | Database, authentication, file storage | Account info, activity data, uploaded content | | Vercel | Web hosting, edge delivery | IP address, request metadata | | PostHog | Product analytics | Anonymised usage events, device info, page views | | Sentry | Error monitoring | Error logs, stack traces, device/browser info |

We do not sell your personal data to any third party. We do not share your data with advertisers.

6. Data retention

We retain your personal data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or to resolve disputes.

Anonymised analytics data (which cannot identify you) may be retained indefinitely.

7. Your rights

Under the PDPO, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request deletion of your account and associated data.
• Opt out — unsubscribe from marketing emails at any time.

To exercise any of these rights, contact us at hello@wherethiswknd.com. We will respond within 40 days, as required by the PDPO.

8. Cookies and tracking

We use cookies and similar technologies for authentication, analytics, and to remember your preferences. You can manage cookie settings through your browser. Disabling cookies may limit some Platform features.

9. Data security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

10. Children's privacy

The Platform is not intended for anyone under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.

11. International data transfers

Our service providers may process data outside of Hong Kong. Where this occurs, we ensure appropriate safeguards are in place to protect your data in accordance with the PDPO.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform or email. The "Effective date" at the top indicates when the policy was last revised.

13. Contact

For privacy-related inquiries or to exercise your data rights, contact us at hello@wherethiswknd.com.