Privacy Policy

Account & Profile Information

• Mobile number — used to sign you in. We send a one-time password (OTP) by SMS to this number and verify it on our servers; the code is valid for a single sign-in.
• Email address — used to identify your group account and for service communication.
• Name — your name and your group's name, to identify your account and profile.
• Event selection — the event you choose for your group during sign-up, so your group is registered to the right event.

Group & Member Information

When you add members to your group, we collect the details you provide for each of them, including their name, mobile number, gender, and profile photo, so that event passes can be generated and identity can be verified at entry. By adding a member, you confirm that they have consented to their name, mobile number and photo being used for event entry passes. Any member may contact us (see "Developer Contact") to have their details corrected or removed.

Photos

Member photos that you capture in the app are used to generate digital event passes and to verify identity at event entry. Photos are uploaded to and stored on our own protected servers and are not used for any other purpose. The app does not perform facial recognition and does not create or store any biometric identifiers; face detection (Google ML Kit, running entirely on your device) is used only on-device, at the moment of capture, to help frame a clear photo, and nothing from it is saved or transmitted to us, Google, or anyone else. Identity checks at the venue are a visual comparison by event staff — no automated face matching is performed anywhere in our system. A member's photo is deleted when the member is removed, and all photos are permanently deleted with the account (see "Data Retention").

Device & Usage Information

• Device information (such as device model, OS version, and a device identifier) — for security, session management, and compatibility.
• Usage data (such as feature interactions) — collected in aggregated/anonymized form to improve the app.

• Authentication — verifying your mobile number with a one-time SMS code and keeping your session signed in.
• Group & member management — creating, organizing and managing group members.
• Event registration & passes — registering members and generating digital passes for event entry.
• Identity verification — event staff visually compare the member's pass photo at entry points. No facial recognition or automated matching is used.
• Security — preventing fraud, unauthorized access, and misuse.
• Service improvement — analyzing anonymized usage to improve performance and usability.

• Data transmitted between the app and our servers is encrypted in transit.
• Personal information is stored on access-controlled, protected servers.
• Access to personal data is limited to authorized personnel and is monitored.
• We perform regular internal security reviews and updates.

• Service providers — trusted third parties that help us operate the app, such as our SMS provider for sending one-time sign-in codes. Providers may use the data only to perform services for us.
• Event organizers — for identity verification and event access management only.
• Legal requirements — when required by law, court order, or government request.
• With your consent — when you explicitly permit us to share your data.
• Safety — when necessary to protect users, our rights, or public safety.

• Account, member and photo data are retained while your account/group is active and for as long as needed to provide the service.
• Anonymized usage data is retained for analytics.
• You can delete your account in the app at any time (see "Your Rights"). Your account is deactivated immediately and permanently deleted after 30 days, together with your login account, your members' details, their photos and passes.

• Access — request a copy of the personal data we hold about you.
• Correction — edit your name, email, mobile number and group name directly in the app (Group Profile → Edit).
• Deletion — delete your account directly in the app (Group Profile → Delete Group Account). It is deactivated immediately and permanently deleted after 30 days. To cancel the deletion during that period, contact the event organiser.
• Withdraw consent — revoke previously granted permissions.
• Data portability — request your data in a portable format.

To exercise any other right, or if you need help with your account, contact us at info@sparrowsofttech.com.

The app contains no advertising. We do not track you across other companies' apps or websites, we do not use your data for targeted advertising, and we do not sell your personal data to anyone.

The app is intended for adults organising event groups and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at info@sparrowsofttech.com and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, through in-app notice.