Venna Privacy Policy
Effective from: 27 October 2026 · Version 1.0
The short version
Venna is an app for finding events and planning them with friends. To do that, we need to know who you are, what you like and who your friends are.
- We never sell your personal data. Organizers' statistics only show numbers, never who. Paid visibility is always labelled.
- Only friends you have accepted can see which events you are going to, and only to the extent you choose.
- Location and notifications are optional. Your location is used to show events near you and is not stored on our servers.
- Venna AI is used only if you have said yes and when you ask for it, is processed within the EU and does not train any models. Public events can be found with Venna AI, and other events are never sent to it.
- You can delete your account at any time in the app or at venna.se/radera-konto.
1. Who is responsible
The controller is Venna Platform AB, reg. no. 559586-9073, Rosendalsvägen 27 G lgh 1212, 756 44 Uppsala, Sweden. Questions about your data: privacy@venna.se. Anything else: support@venna.se.
2. What data we process
2.1 What you give us
| Data | Required? | Visible to others? |
|---|---|---|
| Email address | Yes | No |
| Sign in with Apple or Google: email, name and picture from the provider. With Apple you can choose a hidden address | If you choose it | No (the picture is not copied to your profile) |
| Display name and username (@) | Yes | Yes |
| Profile picture or chosen avatar | No | Yes |
| Date of birth | Yes | No, never |
| Gender | No ("Prefer not to say" is available) | No, never |
| Home town (a town you choose, never an address) | Yes – it decides which events you see | No, never |
| Interests and whether you are a student | No | No |
| Language (Swedish or English) | Set from your phone | No |
2.2 What is created when you use Venna
Events you save, are going to or have answered "Were you there?" about · event tips and poster photos you send in · friendships, friend links and blocks · plans, polls and votes · messages, images, video and voice messages in chats · communities you belong to and organizers you follow · events, communities and organizer profiles you create · watches you create · reports you make · your settings, including for visibility, notifications and Venna AI · when you accepted the terms and what you chose about anonymous statistics, with version and time.
2.3 From your phone
- Location – only if you allow it, and only while the app is in use, never in the background. We then use your location to show events near you. It is sent to our servers and to Mapbox (see 5) only to produce the result and is never stored on our servers. Your phone keeps your most recent location for no more than a day so that the map opens quickly. It is deleted when you sign out. On our servers we only store your home town (as the centre of the town) and the location of watches you create yourself.
- Notification token – only if you allow notifications. Tips about events (Tips from Venna, Weekend picks and Tips for you) are on from the start, and you turn them off under Settings → Notifications. The token is removed when you turn notifications off.
- Anonymous statistics – if you have said yes, the app counts how often it is opened and which parts and ticket links are used. The counts are stored without name or account ID, either with no ID at all or with a code that changes every day. If you say no, none of this is counted. That you save an event or are going to it is always counted, because it is something you do yourself in the service. The organizer only sees it as numbers (see 6). You can change your choice at any time in Settings › Privacy (organizers: Settings › Account and privacy).
- Sign-in – you sign in with a one-time code that we email to you, or with Apple or Google. There are no passwords. Apple on iPhone and Google on Android sign in directly in the app; otherwise in a sign-in window from Apple or Google. When the page for signing in with email is shown, Cloudflare Turnstile checks that you are a human, and in doing so sees your IP address and information about the browser. To stop abuse, we store your email address and IP address only as an unreadable code (hash), for no more than two hours. While you are signed in, we store the IP address and type of device for each sign-in, for security. A sign-in expires after 90 days without use and is deleted when you sign out on the device or delete your account.
- Technical information when something goes wrong – app version, operating system and what went wrong (see 5).
3. Why, and on what legal basis
| What we do | Legal basis |
|---|---|
| Create and manage your account, show your profile, deliver chats, plans, polls and friendships | Contract (Art. 6(1)(b) GDPR) |
| Show events near you when you have allowed location | Contract – you asked for it |
| Suggestions in For You based on home town, interests, student choice and what you have saved | Contract |
| Minimum age of 16 and events' target audiences (age, gender) – checked only by the server | Contract and legitimate interest (protection of young people) |
| Make public events searchable on Venna, including with Venna AI | Contract – you publish the event so that it can be found – and legitimate interest for events from ticketing platforms |
| Venna AI, when you have said yes and start an AI feature | Consent (Art. 6(1)(a)) – you can withdraw it under Settings → Venna AI |
| Notifications | Consent via your phone's prompt |
| Anonymous statistics in the app | Consent – your choice in the app |
| Blocking, reports, moderation and abuse protection | Legitimate interest and legal obligation (DSA) |
| Error reports, security and backups | Legitimate interest |
| Venna's customer register: contact with organizers and other organizations about Venna (see 6) | Legitimate interest |
| Visitor statistics on venna.se, without cookies | Legitimate interest |
| Statistics for organizers, without personal data (see 6) | Legitimate interest |
| Profiles for organizers that appear in ticketing platforms' public data (see 6) | Legitimate interest |
You can always object to processing based on legitimate interest (see 9).
4. What others can see about you
- All users: your display name, @-name and profile picture.
- Friends you have accepted: which events you are going to, your friends, your communities and which organizers you follow – according to your choices under Settings → "Who sees what I'm going to". You can hide individual events or not share at all.
- Others going to the same event: your name in the list of attendees.
- People in the same chat: what you write and send there.
- Shared links: anyone who gets a link to a plan you are part of sees, even without an account, the event, your first name and how many are going – never pictures or surnames.
- No other user: your email, your date of birth, your gender, your home town or your location.
- Blocking: if you block someone, you cannot see each other's profiles or contact each other.
5. Who processes data on our behalf
We use providers (processors) under agreements that protect your data:
| Provider | Does | Where |
|---|---|---|
| Supabase | Database, sign-in and files | EU (Ireland) |
| Google (Vertex AI) | Venna AI: what you write or upload in an AI field · search for public events | EU |
| Google (Gemini API) | Sorting public event data from ticketing platforms – never data about you | Global |
| Amazon Web Services | Sends email from Venna (sign-in codes, replies to requests) | EU (Stockholm) |
| Cloudflare | Encrypted backups · protection against automated sign-ins (Turnstile) | EU/global |
| Sentry | Error reports from the app and the website – without name, email, account ID or IP address | EU |
| Expo | App updates and delivery of notifications | USA |
| Apple and Google | Deliver notifications to your phone; sign-in if you choose them | USA/global |
| Mapbox | Map and address search in the app | USA |
| Vercel | Hosts venna.se | EU/USA |
| Attio | Venna's customer register: contact details for people at organizers and other organizations | USA/global |
| PostHog | Visitor statistics on venna.se, without cookies | EU |
Notifications: a chat notification contains the sender's name and the first 120 characters of the message. It passes through Expo and Apple or Google on its way to your phone.
Mapbox: when you search for an address, look at the map or the app shows the name of the place where you are, the search, the map position or your location goes to Mapbox. The app does not send any usage statistics to Mapbox.
The website: venna.se counts visits with PostHog, without cookies and without storing anything on your device, so you are not recognised from one visit to the next.
Ticket links: Venna may receive a commission when you buy tickets through our links. It does not affect the price, and this is shown in the app. Some links to Ticketmaster go through Impact, which records the click. Links to Billetto carry Venna's name. When you tap a ticket link, we count the click (see 2.3), and the link carries the event's ID so that the ticketing site can see that the visit came from Venna. We do not send any information about you. Impact and the ticketing site process data under their own terms.
We disclose data to authorities only when the law requires it.
5.1 Venna AI
- Nothing you write or upload is sent to Venna AI before you have said yes. The only exception is public events: their title, place, organizer and description are made searchable for everyone on Venna, including with Venna AI. The app asks you the first time you use an AI feature. After that, what you write or upload is only sent when you start an AI feature yourself.
- Tips you send in may be assessed by Venna AI before a human reviews them.
- Public events are searchable. A public event is an event you publish for Everyone (Who can see this? → Everyone), and events that Venna fetches from public sources. Events for Friends, Invited or Members are never public. A public event's title, place, organizer and description are sent to Google and turned into a search vector, so that the event can be found on Venna, including with Venna AI, whether or not you use Venna AI yourself. Other events are never sent. If the event stops being public, or is hidden or removed, the vector is deleted immediately. No one finds or is suggested an event they are not allowed to see.
- Watches you ask Venna AI to create are checked automatically against new events every day, and you get a notification when there is a match.
- What is sent is what you write or upload in the field (for example a poster, or a programme as a PDF) and the event's fields. When you ask Venna AI a question, the name of the place and an approximate time are also sent, so that the answer fits – never your location. Location data in images is removed before anything is sent.
- Processed by Google within the EU. Google does not use it to train models. If Google's automated safeguards suspect abuse, the request may be stored for no more than 90 days, within the EU, solely to investigate it.
- We do not store what you write or upload. A log of the request, without any text, is kept for 90 days and deleted with your account. The suggestion ends up in your draft, and you decide whether it is used.
- While Venna AI is writing, this is shown, and you can undo the text.
- You find your consent to Venna AI under Settings → Venna AI. If you say no or withdraw it, nothing you write or upload is sent – the only exception is public events, which are searchable for everyone. You turn off notifications from watches under Settings → Notifications.
6. Organizers
- Statistics: organizers see how their events are doing – for example how many people viewed, saved or clicked through to tickets. The figures are aggregated per day and cannot be linked to you.
- Organizer profiles from ticketing platforms: when a ticketing platform or another public source publishes an event with a named organizer, Venna shows a profile with the name, the town (if the source gives it) and the upcoming events – nothing more. If it is your name and you want the profile removed: write to support@venna.se.
- The organizer profile's contact options – website, email, Facebook, Instagram, TikTok and other link – are filled in by the organizer, and they are shown to everyone. Social media are only shown as the platform's logo.
- Contacts at organizations: when we have or seek contact with an organizer, association, student nation or other organization, we store contact details for people there – name, role, work address and phone, and what the contact concerned – in our customer register. The information comes from you, from the organization's website or from other public sources, for example ticketing platforms. We only use it to contact the organization about Venna. If you do not want to be in it: write to privacy@venna.se and we will remove you.
- If you follow an organizer, the organizer sees that you follow it. Other signed-in users see it when the organizer has at least ten followers. If you turn off "Organizers I follow are visible", you are counted as a follower but not shown to anyone.
7. Transfers outside the EU
Some providers (Expo, Apple, Google, Mapbox, Vercel, Cloudflare, Attio) are American or may process data outside the EU. This is done with the European Commission's standard contractual clauses or the EU–US Data Privacy Framework as safeguards.
8. How long we keep data
| Data | How long |
|---|---|
| Account and profile | Until you delete the account |
| Inactive account | After 24 months without signing in you get a warning; deleted after 25 months |
| Messages and polls | As long as the chat exists |
| Blocks | As long as the account exists |
| Block after suspension (the email address or Apple or Google ID, only as an unreadable code) | During the suspension, at most 24 months – after a permanent suspension 5 years |
| Moderation decisions | 24 months |
| Contacts in the customer register | As long as the contact is relevant, and at most 24 months after the last contact |
| Sign-ins (IP address and type of device) | Until you sign out, at most 90 days without use |
| Started sign-in without a completed profile | 7 days |
| New account where the code was never confirmed | 1 hour |
| Most recent location (only on your phone) | No more than a day, deleted when you sign out |
| Reports | 12 months after the case is closed |
| Error reports (Sentry) | According to Sentry's retention, no more than 90 days |
| Technical logs at our database provider (IP address and type of device) | 7 days |
| Backups | Daily in the database for 7 days, and daily encrypted copies within the EU for no more than 90 days |
9. Deleting your account and your rights
Delete: Settings → Delete account (organizers: Settings → Account and privacy → Delete account), or via venna.se/radera-konto. Deletion in the app goes through immediately, and you are signed out on all devices.
- Deleted: profile, email, date of birth, gender, home town, settings, friendships, saved events, your files (images and media), friend links, all sign-ins and one-time codes, and the connection to Apple and Google (we revoke the Venna connection with Apple).
- Remains without your name: messages and votes in conversations with others, so that their conversations do not get gaps. If you want your messages deleted as well: write to us before you delete your account.
- Plans and communities you created are handed over to another participant or admin. Your upcoming events are cancelled, and the attendees are notified.
- Backups are purged within 90 days.
Your rights under the GDPR: get a copy of your data (in the app under Settings, or via privacy@) · rectification · erasure · objection · restriction · data portability · withdrawal of consent. We respond within one month. If you are dissatisfied, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
10. Security
We protect your data with encryption, access rules that are tested automatically and encrypted backups within the EU. How long we keep data is described in section 8. In the event of an incident that may affect you, we will notify you and IMY as required by law.
11. Age limit
Venna is for people aged 16 or older. If you enter a date of birth showing that you are younger, you cannot create a profile, and you are signed out on all devices. A started sign-in is deleted after no more than 7 days (see 8). Events with an age limit of 18 are not shown to anyone younger.
12. Changes
Significant changes are announced in the app at least 30 days before they take effect. Changes required by law or for security reasons may take effect immediately.
13. Contact
Venna Platform AB · Rosendalsvägen 27 G lgh 1212, 756 44 Uppsala, Sweden · privacy@venna.se
This policy is available in Swedish and English. If the versions differ, the Swedish version prevails.