Privacy notice

What we keep

• Your mobile number, and the name you choose to give us, so we can sign you in and deliver a ticket.
• Orders, tickets, and the payment reference a bank or card provider sends back.
• A campus email, only after you ask for a code at a real university domain. The code expires and is not logged. You remain a buyer.
• A city you type, and activities you choose (such as soccer, drama, or singing), so we can show events at places in that city. If you turn on city notices, we use that same saved city to tell you when an event is published or updated there. The notice names the event, the city, and whether it is free or paid. It is off until you turn it on, and you can turn it off. City notices do not read your GPS or device location.
• If you allow it, your current location is read once in that visit to draw nearby events on a map. It is not stored, it is not kept as a trail, and it is not used to send WhatsApp or other notices. If you refuse, the map uses the city you already saved. An organiser can also set one pin for a venue that is not on Google Maps. That pin is a single point for the event, not a record of where you went. A heat layer on that map can be turned off. It is warmer where more of those events sit together and where more people have marked interested. It uses the same session location or saved city, and it does not send a notice.
• If you mark an event interested, we keep that choice against your account so the map can show how many people are interested. The map shows the count. It does not show who those people are.
• Whether you opted in to WhatsApp. That is a booking confirmation, one digest, or a single notice about one event in your city. It is not a message for every nearby event, and it is not sent unless you opted in.
• Gate results for the event you attend: whether a ticket was accepted, and at which gate. That is how we stop a ticket being used twice.

What we do not keep

• We do not store a trail of where you, or a student, have been. We do not record your GPS path. A location you allow for the nearby map stays on that screen for the visit and is then discarded.
• We do not store or log one-time sign-in codes, or campus codes. A code is checked as a hash, then discarded. It expires after 5 minutes.
• We do not show staff phone numbers or a shared demo code on the sign-in page.

Why, and who sees it

We use this information to sell and deliver tickets, to limit fraud, and so gate staff can check a ticket at the door. You see your own tickets. The organiser of an event sees sales and gate totals for that event, not a map of your movements. A bank or card provider sees a payment only when you pay them. If Peach, Paystack, or M-Pesa is not configured, the order stays unpaid. This app cannot mark an order paid on its own. A free ticket is a claim, not a payment.

Your choices

You can correct your name from your profile after you sign in. On the nearby map you can allow location for that visit, or use the city you saved. City notices stay off until you turn them on from Campus, and you can turn them off there again.

Deleting your account and data

Under POPIA you can ask us to see, correct or delete the personal information we hold about you. To delete it, open Delete my account and data, or use Profile → Delete my account in the app.

• An Azantix super admin handles every request, normally within 30 days. You can see where your request stands on the same page, and you can withdraw it while it is open.
• We first make sure nothing is still owed: tickets for upcoming events must be used, transferred or refunded, and an organiser's open payouts and upcoming events must be settled.
• We then remove your name, number, email, ID number, passcode, campus details, saved city, follows, interests, wristband and gate PINs, photos you posted, and any crew, vendor or affiliate profile and bank details.
• We keep orders, payments, refunds, payouts and invoices for as long as tax and anti-fraud law requires (normally five years), but they no longer name you. The account is closed and cannot be signed in to again.
• If we cannot delete something, we tell you why. You may also complain to the Information Regulator (inforegulator.org.za).