Raven Privacy Policy

This Privacy Policy explains how Ask Raven LLC, a New York limited liability company doing business as Raven ("Raven," "we," "us") collects, uses, and shares information when you use the Raven mobile application (the "App"). Raven is an electronic-music event-discovery app. By using the App you agree to this Policy.

You must be at least 18 years old to use Raven. Raven is an 18+ app: we ask for your date of birth when you sign up and refuse the account if you are under 18. We do not knowingly collect data from anyone under 18.

1. Information we collect

You give us:

• Account info — name or username, email, and authentication details when you sign up.
• Your date of birth — required when you sign up, because Raven is 18+ and this is how we check it. We use it only to work out your age in whole years: we store the age and discard the date, so Raven never holds your birth date. Your age is visible to no one but you, it is not sent to the AI models described in section 2a, and it is deleted when your account is.
• Profile details, all optional: a profile photo, your last name, and your pronouns. Your handle, display name, pronouns and photo are visible to other users (see section 4).
• Profile & taste data — genres, artists, and preferences you select to personalize recommendations.
• Your saves and signals — the events you save, mark as going, or give feedback on. The events you are going to or have liked are visible to users you are connected with. Everything else here stays private to your account.
• Connections: who you connect with, the requests you send and receive, and the optional note on a request (up to 280 characters).
• Comments: the comments and replies you post on events (up to 500 characters each), and the comments you like. Comments are visible to everyone signed in to Raven, with your handle, display name and photo.
• Tags: when you tag a raver, artist, venue or promoter in a comment (using @), we store who or what you tagged. The tag is part of the comment and visible with it.
• Reports: if you report a user or a comment, the category you chose, your note (up to 500 characters, required only if you choose Other), an optional screenshot, and who or what you reported.
• Blocks: the users you block.
• Support messages — anything you send us directly.
• Voice input — if you tap the mic to dictate, your speech is converted to text by Apple's speech recognition service (on device or on Apple's servers, depending on your device). Raven receives and stores only the resulting text, as part of your conversation. We never receive or store audio recordings.

Collected automatically:

• Your activity in Raven — the events you save, mark as going, or give feedback on, the artists, venues, and promoters you follow, and your conversations with the Raven assistant. This is what personalizes your recommendations, and you can review and erase it in Settings → What Raven remembers.
• Push token — if you enable notifications, so we have somewhere to send them.
• Notifications — the notifications we send you, including when someone replies to your comment or tags you, and your notification settings.

Raven is New York City only at launch and the event listings already carry their own addresses, so the App does not collect your device location and does not need it to work.

From third parties:

*(Raven does not connect to any third-party music account and never asks for your Spotify or SoundCloud login. Event and artist pages that have a track play it through an embedded SoundCloud player. That player loads from SoundCloud's own servers whenever such a page opens, whether or not you press play, so SoundCloud receives your IP address and may set its own storage on your device, exactly as it would on any web page carrying a SoundCloud embed. What SoundCloud does with that is governed by SoundCloud's privacy policy, not this one. Pages may also link out to services like Spotify; opening a link takes you to that service, on its own terms.)*

2. How we use it

• Provide and personalize event recommendations.
• Operate accounts and notifications.
• Maintain safety: prevent abuse and misuse of the service, screen comments and connection request notes before anyone else sees them, and review reports.
• Improve the App, using aggregate, non-identifying usage patterns only.
• Understand, in aggregate, what people say about events, artists, venues and promoters, including how often they are tagged. Insights we draw from comments and tags are combined across many users and do not identify you. We may share those aggregated insights; we do not share who said what.
• Communicate with you about the service.
• Comply with law.

Legal bases (EU/UK users): performance of our contract with you, your consent (notifications, marketing), our legitimate interests (security, product improvement), and legal obligation. The companies that handle your data on our behalf are listed in section 4a.

2a. AI processing

Raven uses third-party AI models to power the assistant and personalize recommendations. When you chat with Raven or open the feed, we send the model a working context: your first name, your taste preferences, a summary of what you have liked or marked going, and the current conversation.

Your taste preferences are the genres and event types you pick, the things you asked us to avoid, and your cultural tags: Underground, Queer, Diverse, Sober, Sex-positive, Local, Burner, and EDM Festival. Some of these describe things privacy law treats as sensitive, including sexual orientation and sobriety. You choose them yourself, none of them are required, and you can add or remove any of them at any time in My Raven.

We never send your email, account id, phone number, payment details, your age, or your device location. We do send the conversation itself, so anything you type into the chat goes with it. The AI provider processes this data on our behalf under contract; it does not use it to train its own models and does not sell it. We may change AI providers over time. If the categories of data we send change, we will update this section first.

Comments and request notes. Before a comment is posted or a connection request note is delivered, we check it using automated rules and an AI model (Google Gemini, acting on our behalf). We send the model only the text itself, not who wrote it or who it is for. If the text tags an artist, venue or promoter, we also tell the model which kind of tag it is. If the text fails the check, or the check is unavailable, it is not posted or delivered; you can edit it, and a connection request can still be sent without a note. The check does not suspend or ban anyone; a person reviews any action on an account.

3. Event & venue data

Event, venue, artist, and promoter listings in Raven are aggregated from publicly available third-party sources. We do not guarantee their accuracy, availability, or pricing. Tickets are sold by third parties — Raven is not the seller and is not party to any ticket purchase.

4. Sharing

We do not sell your personal data. We share it only with:

• Service providers (subprocessors) who run our infrastructure.
• Other users, as the App's features allow. Anyone signed in to Raven sees your handle, display name, pronouns and photo, the comments you post, and the users you are both connected with. Anyone on the web can see your handle, display name and photo through your profile link, askraven.app/u/your-handle. Users you are connected with also see your connections and the events you are going to or have liked. The person you send a request to sees its note. A raver you tag in a comment is notified, and the person you reply to is notified, with your display name and the start of your comment. You cannot tag a user you have blocked or who has blocked you. We never tell a reported user who reported them. Users you block, and users who block you, do not see each other.
• Legal / safety recipients when required by law or to protect users. This includes reporting content that sexually exploits minors to the National Center for Missing & Exploited Children, and sharing report material with law enforcement where the law requires it or where we believe someone is at risk of serious harm.
• A successor in a merger or acquisition, under this Policy.

4a. Who handles your data for us

These companies process your data so that Raven can work. Each is bound by contract to use it only to provide their service to us, and not for their own purposes.

• Supabase: accounts, sign-in, and the database that holds your profile, your saves, your conversations, your connections, your comments and your reports.
• Railway: hosts the Raven server your app talks to.
• Google: the Gemini AI models behind the assistant and your personalized feed. Receives the working context, and the text of comments and request notes, described in section 2a, and nothing else.
• Expo: delivers app updates and relays push notifications. Sees your push token and the text of the notifications we send you, not your account. A notification about a connection request carries the sender's display name and their note. A notification about a reply or a tag carries the commenter's display name and the first 140 characters of the comment.
• A privacy-focused product analytics tool, if and when we add one, as described in section 5.

Two others are not our processors and act under their own privacy policies rather than ours. Apple runs the App Store, delivers notifications to your device, and provides the speech recognition behind the mic button. SoundCloud serves the track player described in section 1.

Some content in Raven also loads directly from the sites it came from, such as event and artist images from ticketing and listing services. Those companies see your IP address when their image loads, the same as on any web page. We send them nothing about you.

If we add a company to this list, we will update it here first.

5. Tracking & analytics

Raven contains no advertising SDKs and we do not track you across other apps or websites. Because we do not track, the App does not show an App Tracking Transparency prompt. We may use a privacy-focused product analytics tool to measure aggregate performance and reliability (cold-start time, error rate, session length); it identifies devices, not people, and shares nothing with advertisers. If our tracking practices ever change, we will update this Policy and Raven's App Store privacy labels before the change ships, and we will ask for your permission where Apple requires it.

6. Your choices & rights

• Delete your account any time in-app (Settings → Delete account).
• Download your data any time in-app (Settings → Download my data), which returns your profile, your taste, your activity and your conversations with Raven. For a copy of anything else we hold about you, such as your comments, connections or reports, email support@askraven.app.
• Edit or delete a comment you posted, at any time, from the comment itself.
• Block any user from their profile or from one of their comments, and unblock them from their profile. We do not tell them.
• Report any user from their profile, or any comment from the comment itself. The person you report is never told it was you.
• Notifications — turn reply and tag notifications on or off in Settings → Notifications, and all notifications on or off in iOS Settings.
• EU/UK & California residents have additional rights (access, correction, deletion, portability, objection).

7. Retention

We keep your data while your account is active and as needed for the purposes above, then delete or anonymize it. Your age is kept for as long as the account exists, because it is the record that an adult opened it; it is deleted with the account. Some records are retained where required for legal, security, or financial reasons.

Comments stay on the event until you delete them. A comment you delete disappears for everyone at once, together with its replies; we keep a copy for up to 30 days for safety review, then erase it. When you edit a comment we keep the earlier text for up to 30 days. A comment we remove for breaking the rules is kept for up to 90 days as evidence. Tags of ravers are erased together with the comment. When a comment tagged an artist, venue or promoter, we keep a record of that tag (who or what was tagged, the event and when, but not the comment text) after the comment is deleted, for the aggregate insights described in section 2.

Refused comments and request notes are kept for 90 days with the sender, the recipient if there is one, and the reason, so that a person can review patterns of abuse. After 90 days we delete the text and keep only the record that something was refused and why.

Reports, including any screenshot, are kept for up to one year after the review closes, so that we can act on repeat behavior.

If you delete your account, your profile, connections, blocks, comment likes, refused text, the notifications you received, and tags of you are deleted with it. Comments you posted stay on the event without your name, handle or photo; delete them first if you want them gone. Records of the artists, venues and promoters you tagged are kept but no longer linked to you. Notifications already sent to other users, which show your display name and the start of your comment, stay in their notification list. Reports you made, and reports made about you, are kept for the period above but are no longer linked to your account.

8. Security & transfers

We use reasonable technical and organizational measures to protect your data. Data may be processed in the United States and other countries; for EU/UK transfers we rely on appropriate safeguards.

9. Changes

We'll update this Policy as the App evolves and post the new effective date here. Material changes will be notified in-app.

10. Contact

Privacy questions: support@askraven.app. Postal: Ask Raven LLC, 54 Noll St Apt 402, Brooklyn, NY 11206.