We collect information to provide seamless event ticketing and community features:

• Account & Profile Data: Phone number (for OTP authentication), full name, username, email address, profile avatar, and bio.
• Ticketing & Order Details: Event selections, ticket tiers, quantities, transaction references, and payment receipt screenshots uploaded during checkout.
• Check-in Records: QR code verification timestamps, door entry logs, and scanner operator identifiers.
• User Content: Photos, captions, stories, comments, and interactions published to the GURA community feed.
• Device & Usage Data: Web push subscription tokens (with your permission), IP address, browser type, and operating system for platform security.

• Ticket Issuance: To verify your manual bank transfer (Telebirr/CBE/BOA) and dispatch your digital passes with QR codes via in-app storage and email.
• Gate Management: To enable authorized door scanners to validate authentic passes and track venue entry.
• Transactional Notifications: To alert you when your order status changes from pending to confirmed, or notify you of schedule changes.
• Community Interaction: To display your stories, posts, likes, and profile within the social experiences feed.
• Security & Fraud Prevention: To prevent counterfeit ticket distribution, duplicate QR code entries, and fake receipt submissions.

When you upload a payment receipt screenshot (Telebirr transfer confirmation, CBE mobile slip, or ATM slip), the file is transmitted over encrypted SSL/TLS channels and stored in protected Supabase Storage buckets.

Access to payment proofs and transaction numbers is strictly restricted to designated GURA ticket managers and system administrators for the sole purpose of matching bank statement deposits with pending orders. We do not store your private banking passwords, PINs, or financial account credentials.

We do not sell, rent, or trade your personal information to third-party advertisers. We only share information in the following limited circumstances:

• With Event Organizers: Organizers receive attendee names, ticket tier types, and check-in statuses to manage door entry and venue security.
• Service Infrastructure Providers: Trusted cloud and database infrastructure providers (Supabase, Cloudinary) operating under strict data protection and confidentiality agreements.
• Legal Compliance: When required by Ethiopian legal authorities, court orders, or applicable regulations to investigate fraud or security threats.

Ticket transaction records and QR scan histories are maintained for audit trails, dispute resolution, and tax accounting purposes. Ephemeral community stories expire automatically after 24 hours. Feed posts and profile media are retained until deleted by you or removed in accordance with community guidelines.

You have control over your data within GURA:

• Profile Editing: You can edit your display name, bio, and avatar at any time via your Profile Settings.
• Push Notifications: You can enable or revoke web push notifications in your browser settings.
• Account Deletion: You may request permanent deletion of your profile and personal data by contacting our privacy team, subject to mandatory transaction record-keeping laws.

For questions, data access requests, or privacy-related concerns, please reach out to our team: