Privacy at Kara

Who is responsible

Granil Dsouza, trading as Kara.Social, operates this Kara website and is responsible for the personal information it collects.

Private event discovery

What’s Happening searches and filters run in your browser, not through an external AI or search service. Kara does not send your search words, selected interests, dates or locations to a search server, analytics or error monitoring. Choosing a suburb does not access your device’s location.

Choices appear after the # in the page address. This part is not sent in ordinary website requests, but can remain in browser history and be included when you copy or share the address. Clear all resets the current choices, not earlier history. Search indexes and result caches stay in browser memory, not a saved Kara interest profile. Loading pages, catalogues and images still involves hosting requests. Private search does not mean no information is processed.

Event sources and contact

Event-source buttons open external organiser, ticketing or social websites. Kara does not book these events or send your search choices to those sites. Source links suppress the referring page address. Once you follow a link, the provider receives your visit and handles bookings, cookies and information you give it under its own privacy notice. Event posters are served through Kara’s image service, which may fetch them from their source.

Contact offers email, Instagram and Facebook links, not a contact form. The email link opens your chosen mail application; nothing is sent until you send a message. Kara receives your address or profile and the message you provide to respond to you. Email forwarding and mailbox providers, or the social platform you choose, also process that communication.

What Kara collects and why

If you preregister, Kara collects your name, email address and date of birth. These details are used to record your interest, confirm that you are 18 or older, and contact you about the first Kara and launch updates. Please do not preregister if you are under 18.

App preregistration is optional. Without the required fields we cannot accept it, but you can still browse the site. The cancelled Halloween event no longer has a public registration form. Any previously collected event records, including pet information, remain subject to the separate retention commitments below and the original disclosure, not automatic enrolment into the app waitlist.

Preregistering does not create a Kara app account or subscribe you to ongoing marketing. The retained information may not be used for unrelated promotions or recurring marketing.

How information is handled

Your browser sends the form to Kara’s server, hosted by Vercel. The server validates it and stores the preregistration or event record in Kara’s separate website Supabase database. App preregistration uses its own preregistrations table, with name, normalised email and date of birth, plus a record identifier and creation timestamp. Form drafts stay in browser memory. Kara does not intentionally place form values in analytics or error-monitoring events.

Website analytics

Your analytics choice is saved in this browser’s local storage to avoid repeated prompts. Clearing that storage removes the choice. Browsing or scrolling is not acceptance. Where configured, analytics can use cookies and process technical device and usage information. What’s Happening is excluded from analytics. Search choices and Share Link tokens are not supplied to analytics.

Kara uses Google Analytics 4, where configured, to understand website use, such as visits to the registration section and whether a submission succeeds. Google Analytics loads only after you choose “Allow analytics”. Kara does not send your name, email, date of birth, form values, pet name or registration payload to Google Analytics. Advertising storage, ad personalisation and Google signals are disabled. You can change your choice using “Analytics choices” in the Contact page.

Withdrawing consent stops permitted analytics storage; it does not retract information already sent. You can remove existing cookies in your browser settings.

Error monitoring

Kara’s configuration uses Sentry, when enabled, to identify technical failures in the browser and on the server. It is configured to avoid recording registration form bodies, names, pet names, email addresses, dates of birth, authorisation headers and service secrets. Session replay and user tracking are not enabled.

What’s Happening telemetry is excluded and Share Link tokens are redacted by application monitoring filters. These protections do not establish that infrastructure logs never contain a requested URL or other technical information.

Shared app links

Share Links can contain a private token in the URL path. Treat the whole link as private: recipients and browser history may retain it. The website fallback does not look up profiles or accounts, read or display the token, or run analytics scripts. It requests no caching, no indexing and no referrer transmission. The hosting service must still receive the requested path to deliver the page. Opening a link in the Kara app is separate from this website notice.

How long records are kept

Preregistration records will be retained until six months after the public Kara app launch. This is not six months after you submit this form. At that deadline, deletion will be reviewed and carried out with the operator’s authorisation.

No later than 1 December 2026 at 11:59 pm NZDT, Kara will delete all Halloween-specific personal information, including pet information, date of birth, attendance details and other event-registration fields.

After that date, Kara may retain only your name, your email address in normalized form, the date and time you registered and accepted the registration disclosure, and the disclosure wording or version you accepted. Kara will use this retained information solely to send one personalised invitation when the Kara app is ready.

Within 30 days after the one-time Kara launch invitation is sent, Kara will delete the retained name, email address and consent record. If Kara decides not to launch the app, the retained information will be deleted because the stated purpose will no longer exist.

Deletion and privacy requests

You may ask Kara to access, correct or delete your preregistration or event registration information, or withdraw from the future Kara invitation at any time. Use the unsubscribe method in a Kara email or contact Kara at privacy@kara.kiwi.

If you withdraw, Kara will delete the retained name, email address and consent evidence for the Halloween launch invitation. We may need to verify your identity before acting; please do not send unnecessary identity documents in an initial email.

You may request access or correction, including attaching a statement of correction if a requested correction is not made. You can raise privacy concerns with Kara or the Office of the Privacy Commissioner.

Security and service providers

Kara uses access controls, validation and restricted service credentials intended to protect preregistration information. No online service can promise perfect security. Current providers are Vercel for hosting, Supabase for database services, Google for consent-based analytics, and Sentry for privacy-filtered error monitoring.

Hosting and security can involve IP addresses, browser information, request paths and timestamps in provider logs, independently of optional analytics. These providers and communication services may process information outside New Zealand. This notice does not promise New Zealand-only storage; precise locations depend on the service arrangements.

Registration deletion follows the manual process and deadlines above, not an automatic timer. Contact messages are kept to handle your enquiry and necessary follow-up. Current retention settings for correspondence, provider logs and monitoring have not been confirmed, so no fixed periods are asserted here. Contact us about retention or deletion of information relating to you.