Privacy Policy

Your privacy at Commfy

Last updated: 19 June 2026

This Privacy Policy explains how Commfy (“Commfy”, “we”, “us”) collects, uses, and protects your personal data when you use the Commfy mobile app and related services. We’ve written it to be clear and honest, not to bury you in legalese.

Commfy is operated by Commfy Kira Ltd, a company registered in England and Wales [company no. — 16925072], which is the data controller responsible for your personal data. If you have any questions, contact us at support@commfy.app.

1. What we collect

We only collect what we need to run Commfy. That’s it.

Data	Why we collect it
Email address & name	To create and secure your account, and identify you within communities.
Profile & content you post	Posts, comments, photos, and other content you choose to share in communities.
Location	To show you nearby communities and events, and your position on maps. Only ever shown to you.
Payment information	When you pay for an event or supporter contribution. Card details are handled directly by Stripe — we never see or store your full card number.
Support messages	When you contact us or submit feedback through the app.
Account identifiers	A user ID and device push token, so the app works and we can send notifications you’ve opted into.

2. How we use your data

• To provide and operate the app — your account, communities, events, and recommendations.
• To match you with communities and events relevant to your interests and location.
• To process payments for events and supporter contributions.
• To send you notifications you’ve opted into, and respond to your support requests.
• To keep Commfy safe — including filtering inappropriate content and responding to reports.

3. Our legal bases (UK GDPR)

We rely on the following legal bases to process your data: performance of a contract (to give you the service you signed up for), your consent (for example, location access and push notifications, which you can withdraw at any time), and our legitimate interests (to keep the platform safe, secure, and working well).

4. Who we share data with

We use a small number of trusted service providers (“processors”) to run Commfy. They only process your data on our instructions:

• Supabase — secure database, authentication, and file storage.
• Stripe — payment processing. Stripe handles your card details under its own privacy policy.
• Apple Push Notification service & Firebase Cloud Messaging (Google) — to deliver push notifications.
• AI processing services (including Hugging Face and Anthropic) — to generate community tags and recommendations. These process community content, not your private account details.

We may also disclose data where required by law, or to protect the rights, safety, and security of Commfy and its users.

5. International transfers

Some of our providers are based outside the UK/EEA. Where your data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent protections recognised under UK GDPR.

6. How long we keep it

We keep your personal data for as long as your account is active, and only as long as needed for the purposes set out here or to meet legal obligations. When you delete your account, we delete or anonymise your personal data — see below.

7. Your rights

Under UK GDPR you have the right to: access your data; correct it; delete it; restrict or object to how we use it; receive a copy in a portable format; and withdraw consent at any time. To exercise any of these, email support@commfy.app.

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

9. Location data

Commfy uses your device location to show nearby communities, events, and your own position on maps. Your precise location is only ever shown to you — never to organisers or other users. You can turn location access off at any time in your device settings; some features that rely on “near me” will then be limited.

10. Children

Commfy is not intended for children under 13, and we do not knowingly collect data from them. In some regions a higher minimum age may apply. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Security

We use industry-standard measures — including encryption in transit, access controls, and trusted infrastructure providers — to protect your data. No system is ever completely secure, but we take protecting your information seriously.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we’ll update the date at the top and, where appropriate, notify you in the app.

13. Contact us

Questions about your privacy or this policy? Email us at support@commfy.app and we’ll get back to you.