Your privacy at Commfy

Last updated: 27 October 2026

This Privacy Policy explains how Commfy (“Commfy”, “we”, “us”) collects, uses, and protects your personal data when you use the Commfy apps for iPhone and Android, the web app at get.commfy.app, and related services. We’ve written it to be clear and honest, not to bury you in legalese.

Commfy is operated by Commfy Kira Ltd, a company registered in England and Wales (company number 16925072), with its registered office at 167-169 Great Portland Street, London, England, W1W 5PF. Commfy Kira Ltd is the data controller responsible for your personal data. If you have any questions, contact us at support@commfy.app.

1. What we collect

We only collect what we need to run Commfy. That’s it.

DataWhy we collect it

Email address and nameTo create and secure your account, and identify you within communities.

Profile and content you postPosts, comments, photos, and other content you choose to share in communities.

Interests and preferencesThe interests and what you’re looking for that you choose, so we can suggest communities and events.

Events and bookingsThe events you RSVP to or buy tickets for, whether you checked in, and any answers you give to an organiser’s questions.

Feedback and survey answersAnswers you choose to give in event feedback and community surveys.

LocationTo show you nearby communities and events, and your position on maps. Only ever shown to you.

Payment informationWhen you pay for an event or supporter contribution. Card details are handled directly by Stripe, and tips in the iPhone app by Apple. We never see or store your full card number.

Usage and device informationHow you use the apps and website, your device type, and crash reports, so we can fix problems and improve Commfy.

Support messagesWhen you contact us or submit feedback through the app.

Account identifiersA user ID and device push token, so the app works and we can send notifications you’ve opted into.

2. How we use your data

To provide and operate the app: your account, communities, events, and recommendations.
To match you with communities and events relevant to your interests and location.
To process payments for events, supporter contributions and tips.
To send you notifications and emails you’ve opted into, and respond to your support requests.
To understand how Commfy is used and fix problems, through analytics and crash reports.
To keep Commfy safe, including filtering inappropriate content and responding to reports.

We do not sell your personal data, and we do not share it with anyone to target advertising. Commfy has no ads.

3. Our legal bases (UK GDPR)

We rely on the following legal bases to process your data: performance of a contract (to give you the service you signed up for), your consent (for example, location access and push notifications, which you can withdraw at any time), and our legitimate interests (to keep the platform safe, secure, and working well, and to understand how it is used).

4. Who we share data with

Organisers. When you join a community, its organiser can see your name and profile. When you RSVP to an event or buy a ticket, the organiser can also see your email address, whether you checked in, and any answers you give to their questions, so they can run their events.

Brands. Some community events are backed by brands. Brands only ever see totals, such as how many people came and overall feedback, never your name or contact details.

Service providers. We use a small number of trusted service providers (“processors”) to run Commfy. They only process your data on our instructions:

Supabase: secure database, authentication, and file storage.
Stripe: payment processing. Stripe handles your card details under its own privacy policy.
Apple and RevenueCat: tips made in the iPhone app.
Apple Push Notification service and Firebase Cloud Messaging (Google): to deliver push notifications.
Resend: to send emails, such as sign-in codes, tickets and event reminders.
Microsoft Azure OpenAI and Anthropic: AI that suggests communities and writes community tags. They process community descriptions and the interests you choose, never your password or payment details.
PostHog (EU) and Google Analytics for Firebase: usage analytics, to see how Commfy is used.
Sentry: crash and error reports.
Cloudflare: hosting for the web app.

We may also disclose data where required by law, or to protect the rights, safety, and security of Commfy and its users.

5. International transfers

Some of our providers are based outside the UK/EEA. Where your data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent protections recognised under UK GDPR.

6. How long we keep it

We keep your personal data for as long as your account is active, and only as long as needed for the purposes set out here or to meet legal obligations. When you delete your account, we delete or anonymise your personal data (see below).

7. Your rights

Under UK GDPR you have the right to: access your data; correct it; delete it; restrict or object to how we use it; receive a copy in a portable format; and withdraw consent at any time. To exercise any of these, email support@commfy.app.

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

8. Deleting your account

You can delete your account at any time directly in the app, under Settings, then Delete Account, or on the web at get.commfy.app/delete-account. This permanently removes your account and associated personal data. You can also email us at support@commfy.app and we’ll handle it for you.

9. Location data

Commfy uses your device location to show nearby communities, events, and your own position on maps. Your precise location is only ever shown to you, never to organisers or other users. You can turn location access off at any time in your device settings; some features that rely on “near me” will then be limited.

10. Children

Commfy is not intended for children under 13, and we do not knowingly collect data from them. In some regions a higher minimum age may apply. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Security

We use industry-standard measures, including encryption in transit, access controls, and trusted infrastructure providers, to protect your data. No system is ever completely secure, but we take protecting your information seriously.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we’ll update the date at the top and, where appropriate, notify you in the app.

13. Contact us

Questions about your privacy or this policy? Email us at support@commfy.app and we’ll get back to you.

Questions?

Ask us anything about your data

Email support@commfy.app and a real person will get back to you.

Email us