العربية

Privacy Policy

Last updated:

1. Who we are

Kashta is a festival app for Kuwait operated by wavai ("we", "us"). This policy explains what data we collect when you use the app, why, and what choices you have.

The full legal name and address of the operating company must be added before publication. needs review

2. Your account and sign-in

You need an account to use Kashta. You can sign in with your email, with Apple, or with Google. When you use Apple or Google we receive only the name and email address you choose to share, and never your password with them.

3. Data we collect

  • Account data: name, email, birthday, phone number (optional) and profile picture.
  • Device and preferences: device type, operating system, app version and your chosen language.
  • Approximate presence at the festival site: if you allow location, we record only entry to and exit from the festival site. We do not track your movement inside or outside the site.
  • Steps: if you turn on the steps feature, we read your step count from your device to show it in the app.
  • Purchases: your orders at vendors and their payment records (we do not store card numbers; payments are handled by the payment provider). We do not collect event booking data: booking happens on the organiser's external booking page.
  • Loyalty points: your points balance and the history of earning and redeeming them.
  • Notification tokens: so we can send notifications to your device.
  • Analytics: identifiers and aggregate usage counts (such as which screens are opened) to improve the app.
  • Crash diagnostics: technical information sent when the app crashes.
  • Assistant chats: the messages you send to the Kashta assistant and its replies.

4. How we use your data

  • To run your account and provide the service: points, rewards and vouchers.
  • To complete purchases and send confirmations and account notifications.
  • To manage festival entry, crowd flow and safety.
  • To answer your questions through the assistant and to improve it.
  • To understand how the app is used, fix crashes and develop it.
  • To send offers and marketing messages, only if you have not opted out (see your choices below).
  • To comply with applicable law and to prevent abuse and fraud.

5. We do not sell your data or track you for ads

We do not sell your personal data, we do not use it for targeted advertising, and we do not track you across other apps or websites.

6. Who we share data with

We share only what is needed with service providers who work for us and must protect it, such as: database and app hosting, email delivery, push notifications (Apple), maps (Apple Maps), payment processing, and the AI provider behind the assistant. A vendor you buy from sees the order details needed to fulfil it. We may disclose data if a competent authority lawfully requires it. needs review

Your data may be processed on servers outside the State of Kuwait. needs review

7. How long we keep data

We keep your data while your account exists. After you delete your account it is hidden immediately and your personal data is then permanently purged after a short period; we keep only what the law or accounting requires (such as transaction records) for as long as required. Analytics and crash data are deleted or anonymised after a limited period. needs review

8. Your choices and rights

  • Delete your account: you can delete your account inside the app. It is soft-deleted first and then permanently purged.
  • Notifications and marketing: you can turn off notifications and marketing messages at any time in the app or device settings, or with the unsubscribe link in our emails.
  • Location and steps: you can withdraw the location or motion and fitness permission at any time in your device settings, and the app keeps working without them.
  • Access and correction: you can edit your profile in the app, or contact us to request a copy of your data or to correct it.

9. Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit and strict access controls. No system is completely secure, however.

10. Children

Kashta is intended for people aged 13 and over, and we do not knowingly collect data from anyone younger. If we learn we have, we delete the account. Some activities, or booking with event organisers, may require a parent or guardian's consent. needs review

11. Changes to this policy

We may update this policy. The date of the latest update is shown at the top, and we will tell you in the app about any material change.

12. Governing law

This policy is governed by the laws of the State of Kuwait, and its courts have jurisdiction over any dispute. needs review

13. Contact us

For any privacy question, or to exercise your rights, write to: privacy@example.com