Your data should not be a mystery.

This Privacy Policy applies when you browse Hapnin, create an account, save or interact with an event, choose discovery preferences, send us a correction or suggestion, or otherwise use Hapnin's website and related services.

For personal data where Hapnin decides the purpose and means of processing, Hapnin acts as the data controller. Third-party ticketing companies, organisers, map providers, ride providers, and sign-in providers may separately act as controllers for the information they receive from you.

Depending on how you use Hapnin, we may collect:

• Account and profile information: your email address, display name, city, selected interests, and basic account details needed to sign you in. If you use a third-party sign-in option, that provider may send us the account details you approve for the sign-in flow.
• Discovery activity and preferences: events you save, your selected city, interests, and settings that make Hapnin feel relevant to you.
• Information you send us: corrections, event suggestions, feedback, support messages, and any evidence or contact details you choose to include.
• Device and session information: authentication session data, essential cookies, browser storage, and information needed to keep your session and preferences working.
• Operational and security information: service logs and technical records used to operate, secure, troubleshoot, and prevent abuse of Hapnin.

Hapnin also keeps daily aggregate product counters for actions such as event-detail views and outbound ticket, source, map, or ride clicks. Those counters are designed not to contain an account ID, cookie ID, session ID, IP address, or per-interaction timestamp.

We use personal information to:

• create and secure your account and keep you signed in;
• remember your city, interests, appearance, and other preferences;
• show saved events and make discovery more useful to you;
• review corrections, suggestions, organiser-related requests, and support messages;
• operate, debug, protect, and improve Hapnin;
• understand service usage in an aggregated way; and
• comply with applicable law, enforce our terms, and respond to lawful requests.

If Hapnin introduces a materially new use of personal information, this policy will be updated before that use is rolled out where required.

Kenyan data-protection law requires personal data to be processed lawfully, fairly, transparently, and for a specific purpose. Depending on the activity, Hapnin relies on one or more lawful grounds, including:

• your consent, where we ask for it;
• processing needed to provide a feature or service you request;
• Hapnin's legitimate interests in operating, securing, and improving the service, where those interests do not override your rights; and
• compliance with a legal obligation or lawful request.

Where processing depends on consent, you may withdraw that consent for future processing. Withdrawal does not make earlier lawful processing invalid.

Hapnin uses essential session data and a small amount of browser storage to keep the service working. This can include your authentication session, city preference, appearance choice, and short-lived Discover-page restoration.

Some of this storage is necessary for features you ask us to provide. Clearing browser data or blocking essential storage may sign you out or reset preferences.

We may share information only as reasonably necessary with:

• service providers that help us run Hapnin, such as hosting, authentication, database, storage, security, and infrastructure providers;
• professional advisers or authorities where disclosure is required by law or reasonably necessary to establish, exercise, or defend legal rights; and
• another entity involved in a genuine restructuring, acquisition, or transfer of the service, subject to appropriate privacy protections.

Hapnin does not currently sell personal information. We also do not give organisers your account data merely because you viewed or saved their event.

Hapnin often helps you discover an event and then sends you to the organiser or provider to continue. When you open a ticket, RSVP, source, map, or ride link, you leave Hapnin.

The destination service may receive standard information from your browser, such as your IP address, browser details, and possibly referring-page information, and it will apply its own privacy policy and terms. Hapnin does not control how that third party handles information you provide after the handoff.

Some of the service providers that support Hapnin may process or store information outside Kenya. Where personal data is transferred across borders, Hapnin will use safeguards required by applicable Kenyan data-protection law and will take the nature of the information and the receiving service into account.

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, for security and dispute handling, or to meet legal obligations.

• Account and profile information generally remains while your account is active.
• Saved-event relationships remain until you remove them or the related account data is deleted.
• Short-lived browser state can disappear when it expires or when you clear it.
• Security records, correction evidence, and public-source listing evidence may be kept longer where needed to investigate abuse, resolve disputes, or preserve an auditable history of a listing decision.

When information is no longer needed, we delete it, anonymise it, or otherwise remove the link to you where appropriate.

Hapnin uses technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure. Access to sensitive systems is limited to people and services that need it to operate Hapnin.

No internet service can promise absolute security. If you believe your Hapnin account or information has been compromised, contact us as soon as possible.

Under Kenya's Data Protection Act, you have rights over your personal data. Depending on the circumstances, these include the right to be informed about its use, access it, object to certain processing, correct false or misleading information, and request deletion where applicable.

To exercise a privacy right, use Corrections & contact. We may need enough information to verify that the request relates to you before acting on it.

You can also learn about data-subject rights or raise a concern with Kenya's Office of the Data Protection Commissioner.

Hapnin will update this policy when the service, our data practices, or legal requirements materially change. The effective date and version at the top of the page show when this document was last revised.

Questions about this policy, a privacy request, or a concern about how Hapnin handles information can be sent through Corrections & contact. You can also read our Terms of Service.