Privacy Policy

1. Scope and contact

This policy applies to the Eventinel mobile app and the Eventinel website. Questions, privacy requests, and deletion requests can be sent to eventsentinel@gmail.com.

2. Data Eventinel processes

Account and authentication

Eventinel uses a Nostr public key as your account identifier. Signing can happen with a locally entered key or a supported external signer. Eventinel does not send your private key to Eventinel application services. An external signer is governed by its own terms and privacy practices.

Location

If you grant permission, Eventinel uses foreground location to show nearby incidents, plan area-based relay subscriptions, calculate distance, and help choose a location when you create a report. Eventinel does not request background location. A location selected for a public incident report becomes part of that public report.

Public posts, comments, and media

Incident reports and comments that you publish are signed Nostr events and may include a location, text, timestamps, your public key, and references to uploaded images, video, or audio. Media may be stored by a configured Blossom server. Nostr relays and Blossom servers are decentralized third-party services; copies may remain available even after you delete the app or ask Eventinel for help.

Notifications and device information

If you enable notifications, the app and its notification providers process a push token, app and operating-system version, and delivery information needed to route alerts. The app also processes network and relay status, crash-relevant technical state, and local preferences needed to operate reliably. Eventinel does not sell this information or use it for targeted advertising.

Private media reports

A private media report includes your public key, the reported media and incident identifiers, category, timestamp, app version, moderation state, and an optional note. The report goes to the configured private review service and is not posted to Nostr. The reported media is hidden locally for you immediately. Reviewers may use the report to quarantine, confirm, dismiss, or re-review media under the moderation policy.

3. Services that receive data

Depending on the feature you use, data may be processed by:

• Nostr relays that receive and distribute public events;
• Blossom servers that store or retrieve public media;
• Mapbox and device location services used to render maps and determine location;
• Expo, Apple Push Notification service, and Firebase Cloud Messaging for alerts;
• the Eventinel media-safety and private-review service; and
• infrastructure providers used to host the website and production services.

These providers may process network identifiers and other information under their own privacy terms. The app does not include third-party advertising SDKs or cross-app tracking.

4. Storage and retention

• Public Nostr events and Blossom media are retained by the third-party servers that receive them. Eventinel cannot guarantee their deletion.
• The app keeps private-report queue and history records on your device for no more than 90 days. Optional private notes are stored in protected device storage while a report is pending and are removed after service acknowledgement or local expiry.
• The private review service retains optional note text for no more than 90 days and report, audit, and reviewer-state records for no more than 365 days, unless a longer period is required to investigate abuse, protect users, or comply with law.
• App preferences, cached public incidents, and credentials remain on your device until removed by app controls, operating-system controls, or uninstalling the app.

5. Your privacy choices

• Deny or revoke location, camera, microphone, photo, and notification permissions.
• Choose whether to add an optional private note to a media report.
• Remove local app data by signing out, using available app controls, or uninstalling.
• Email eventsentinel@gmail.com to request access to or deletion of private service records associated with your public key.

Include your public key and enough information to identify the request. Do not send a private key. Eventinel may ask you to sign a challenge to verify control of the public key. Eventinel cannot delete copies independently retained on decentralized public services.

6. Security

Eventinel uses encrypted transport for production application services, authenticated signed requests for private reports, protected device storage for private notes and sensitive credentials, access controls for reviewer functions, and bounded retention. No system is completely secure, so protect your signing keys and report suspected misuse.

7. Children

Eventinel is not directed to children under 13. Incident content can concern violence, emergencies, or other mature subjects. If you believe a child provided private information to Eventinel, contact us so we can review the request.

8. Changes

We may update this policy as Eventinel changes. The effective date above identifies the current version. Material changes will be posted on this page before they apply where required.