Privacy Policy

Kopsala is run by Hidden Diversion Recreational Services (“Kopsala”, “we”, “us”) in Dubai, United Arab Emirates. This policy explains what personal data the Kopsala app, kopsala.app and the venue portal (the “Service”) collect, why, who we share it with and the choices you have.

Kopsala is part of the Kattegat platform and uses the same account system: one account works on both. When you use Kattegat itself, the Kattegat privacy policy applies to that use.

Account details. Your name, email address, mobile number (if you add one), date of birth (to confirm you are old enough for 21+ nights and offers), profile photo and password (stored only as a secure hash by our authentication provider). If you sign in with Apple or Google we receive your name and email from them.

What you do on Kopsala. Booking requests and their details (night, date, party size, notes), chat messages with venues, offers you open and use, nights and venues you save or follow, reviews and the photos you add, your guest level and points, invites and gifts you send, and the city you choose.

Location. With your permission, the app uses your device’s location to show what’s near you and your position on the map; that stays on your device. We store a location only at two moments:

• Checking in at a venue: your location, how accurate it was, your distance from the venue and the check-in photo, so we can confirm you were there before you earn points or leave a review.
• Using an offer: your location and its accuracy when the code is shown, so we can spot codes used far from the venue.

Device information. When you use an offer we store a one-way hash of an identifier for your device (never the identifier itself), so we can spot one device using many accounts. We also keep your push notification token if you allow notifications.

Venue accounts. For venues: business and contact details, trade licence, photos, nights, offers, team members and the bookings and redemptions you handle.

Technical data. Crash and error reports (device model, operating system, app version, what failed), and standard server logs such as IP address and browser type, kept for security.

We do not access your contacts, and we do not collect payment card details: guests never pay Kopsala.

• to run your account and show you nights, offers and live acts near you;
• to send booking requests to venues, let you chat with them and remind you about your night;
• to check offer rules (age, guest level, once per night, first visit) and confirm codes at the door;
• to award points and levels, run the monthly draw, and handle invites and gifts;
• to prevent fraud and misuse, such as fake accounts, shared codes or codes used away from the venue;
• to send notifications you have allowed (booking updates, messages, deals near you) and service emails;
• to fix crashes and keep the Service secure and working;
• to meet legal obligations and enforce our Terms.

When you send a booking request, the venue sees your name, profile photo, party size, the night and date, and any note. Your mobile number is shared with that venue only after you send the request, so it can confirm your table. When you use an offer, the venue’s staff see your name and the code to confirm it.

Your reviews of a venue show with your name, as it appears on your account. Venues get totals (views, bookings, offers used), not your location or device information.

We do not sell your personal data. We share it only with service providers who run parts of Kopsala for us:

• Supabase (database, sign-in and storage hosting);
• Cloudinary (photo storage and resizing);
• Google Firebase and Expo (push notifications);
• Resend (emails);
• Sentry (crash and error reports);
• Apple and Google (when you choose to sign in with them);
• OpenFreeMap (map tiles; it sees the map area being shown, not your account).

We may also share data when the law requires it, to protect people’s safety, or as part of a sale or reorganisation of the business (in which case this policy keeps applying).

kopsala.app uses essential cookies to keep you signed in and secure. With your consent only, it also loads analytics and marketing tags (Google Analytics and Tag Manager, Meta, LinkedIn, TikTok and Microsoft Clarity) to understand how the site is used. You choose in the cookie banner and can change your mind by clearing your cookies. The Kopsala app has no advertising or analytics trackers.

Our service providers may store and process data outside the UAE. When they do, we rely on their contractual and security commitments to protect it to the standard this policy describes.

We keep your account data while your account is open. Booking, offer and check-in records are kept as long as needed for the venue relationship, fraud prevention and our legal obligations. When you delete your account we delete or anonymise your personal data, except what we must keep for legal, security or fraud reasons.

• Location, camera, photos and notifications: turn them on or off any time in your phone’s settings. Kopsala still works without location; you just won’t see what’s near you or be able to check in.
• Your details: change your name, phone and photo in Settings, in the app or on kopsala.app.
• Delete your account: in the app (Settings → Delete account) or by emailing us.
• Access or correction: ask us for a copy of your data or to correct it.

Write to askriaan@kattegat.app and we’ll reply within 30 days.

Kopsala is for people aged 18 and over, and some nights and offers are 21+ only. We do not knowingly collect data from anyone under 18; if you believe a minor has an account, tell us and we will delete it.

We protect your data with encryption in transit, access controls and limited staff access. No service is perfectly secure; if a breach affects you, we will tell you as the law requires.

We will update this page when how we use data changes, and change the date at the top. For important changes we will also tell you in the app or by email.

Questions about your privacy: askriaan@kattegat.app. See also our Terms of Use.