Your information
Privacy policy
Effective 17 October 2026. This policy describes how ATK handles information in its attendee iPhone app.
Who we are
ATK is operated by Kenson Kamutu Wathiu. For privacy questions or requests about your personal data, email wathiukamutu1@gmail.com.
What ATK collects
You can browse published events without creating an account. If you use Apple or Google to sign in, we receive a provider identifier and the name and email details the provider makes available. Apple may supply a private relay address instead of your personal email. Your ATK profile can also include a name, an email address you add or verify, and an optional mobile number. We use these details to create or reopen your account, show your profile, and provide account support.
Sign-in security
ATK keeps your sign-in session in your iPhone's Keychain. Our authentication provider stores the online account and linked sign-in identities. For Apple sign-in, a server-only authorization token is retained so ATK can ask Apple to revoke access when you delete your ATK account. ATK also records a temporary provider identifier during sign-up to prevent a log-in attempt from creating an account. That record is valid for two minutes; expired unused records are removed by an hourly cleanup job.
Saved events and reminders
Events you save, your browsing preferences, and reminder choices are stored on your iPhone. When you choose to set a reminder and allow notifications, iOS schedules a local alert for the event. ATK does not ask for GPS location to choose a browsing region. Removing your online account does not automatically erase this on-device information or its scheduled reminders; you can remove reminders and saved events in the app or remove the app's data from your device.
Tickets and external sellers
ATK's first iPhone release does not sell or issue tickets, display an ATK ticket wallet, or process payments. Event pages may show ticket information and offer a link to a separate seller. ATK opens that seller's site only when you tap the link. The seller controls its own website, checkout, and privacy practices. ATK does not receive your payment details from that checkout.
Who handles your data
Supabase provides ATK's online authentication and database, with the Production project based in Mumbai, India. Apple and Google handle the sign-in you choose and may process technical information such as device or network details under their own services. Service providers may process information in other countries as part of their operations. ATK does not use your personal profile for advertising or sell it to advertisers. We do not add a separate in-app advertising or analytics SDK, although the sign-in services may process operational and usage information.
How long information stays
Your online ATK account and profile remain while you keep the account. Temporary sign-up records expire after two minutes and an hourly job removes unused expired records. When you request deletion in the app, ATK removes the sign-in account and related attendee data, including your stored Apple authorization. Apple authorization is revoked when applicable before deletion completes. Operational security logs and service-provider records may remain for limited periods under those services' retention rules; this app cannot erase them immediately. Local saves, preferences, and reminders remain on your iPhone unless you remove them.
Your choices and rights
You can sign out or use Delete Account in the app's Account screen. You can ask us to help you access, correct, or delete personal information, or object to certain uses, by emailing wathiukamutu1@gmail.com. We may need to verify that a request comes from the account holder. If you believe your data has been mishandled, you may also contact Kenya's Office of the Data Protection Commissioner.
Changes and scope
We will update this policy when ATK's data practices change. The current Development-only organizer and staff websites are not covered as public services by this attendee policy; they require separate reviewed privacy information before wider release.