Privacy Policy
Last updated 9 November 2026
1. Who we are
Komon is a trading name of Halvane Ltd (company number 17565949, registered office 167-169 Great Portland Street, London, W1W 5PF). Halvane Ltd is the data controller for the personal data described here. Contact: hello@komonapp.com.
2. What we collect
| Who | What we collect |
|---|---|
| Organisers | Email address; display name and alias; the gatherings, polls and bill splits you create; sign-in records |
| Guests | Name and email if the organiser adds them or you give them; your RSVP, poll vote, alias and payment status for that gathering |
| Waitlist sign-ups | Email address and name |
| Everyone | Basic technical data such as IP address and browser type, used for security and to prevent abuse; anonymous page-visit counts |
We never see or store full card details. Stripe collects those directly. We keep a record that a payment was made and its amount.
3. Why we use it
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Running gatherings, polls, bill splits and payments you take part in | Contract, or legitimate interests where you are a guest without an account |
| Keeping Komon secure and preventing abuse | Legitimate interests |
| Emailing you about your waitlist place or your account | Legitimate interests |
| Any marketing emails, if we start sending them | Consent, which you can withdraw at any time |
4. Guests
If you’re invited to a gathering or poll, the organiser gave us your details so we can run it. We use them only for that gathering or poll. Poll votes are shown to other guests under your alias, never your real name. We don’t use guests’ details for marketing and we don’t sell them. To have your details removed, contact us and we’ll work with the organiser to sort it.
5. Who we share data with
- Stripe, to process payments and verify organisers who receive money. Stripe also uses data under its own privacy policy.
- Supabase, our database and sign-in provider. Data is stored in the EU (Ireland).
- Vercel, which hosts the Komon website and app, and counts page visits without cookies.
- Resend, which delivers messages sent through our contact form to our inbox.
- The organiser of a gathering you join, who sees your RSVP, payment status and, for polls, your real name if you gave it.
We don’t sell personal data or share it with advertisers.
6. International transfers
Supabase stores Komon’s data in the EU (Ireland), which the UK recognises as giving adequate protection. Stripe, Vercel and Resend are US companies that may process data in the US; each is certified under the UK Extension to the EU–US Data Privacy Framework (the “UK–US data bridge”), which the UK recognises for transfers to certified companies.
7. How long we keep it
- Account data: while your account is open. When you delete it, your profile details are removed.
- Gatherings and polls: kept for 1 year after an organiser deletes their account, so guests can still see what they joined, then deleted.
- Payment records: kept for 6 years, because financial records have to be kept for tax and accounting.
- Waitlist entries: until you join or ask us to remove you.
8. Your rights
You can ask to access, correct, delete or receive a copy of your data, and object to or restrict how we use it. Contact hello@komonapp.com and we’ll reply within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.
9. Children
Komon accounts are for people aged 18 and over. If you think a child has created an account, contact us and we’ll remove it.
10. Cookies
Our Cookie Policy explains what we store in your browser.
11. Changes
If we make significant changes to this policy, we’ll tell active users by email or in the app.
12. Contact
Questions about your data: hello@komonapp.com.