What we hold, and what we do not

What we hold

What you tell us. Your name, your practice, your neighbourhood, your Instagram handle, your reason for creating, and anything you write in your profile or messages.

Your email address. An administrator may reserve it on a private profile shell so an invitation and your later verified sign-in reach the same profile. It is used to sign you in and to reach you about the collective. It is never shown to other members and never appears on a public profile.

Photographs you upload. Your profile picture and any image you attach to an event or a piece of work.

Photographs made at Coltivare events. Event images remain in the event archive. When a Coltivare curator links one to your profile, that relationship places the photograph in your Photos of You feed and, if your profile is public, on that public page. A photographer credit is stored separately and does not say that the photographer appears in the frame.

Approximate location, only if you open the map. Used to show what is near you while you are looking. We do not keep a history of where you have been, and the map works without it.

Ordinary technical records. The kind every server keeps: request times, errors, and a device identifier, held so the thing can be debugged and kept secure.

When a card or a QR is tapped

A tap on one of our short links — a coltivare.app/c/ address, printed on a card or encoded in a QR — records the code, the time, a coarse kind of device (phone, tablet, or desktop), and where the link sent you. It never records an IP address, a location, or anything that identifies the person holding the phone.

The member the card belongs to sees counts, not people. We use the same records to know whether an evening reached anyone, and for nothing else.

What we do not do

We do not sell your information, and we do not share it with advertisers or data brokers. There is no advertising here, so there is no business reason to and no mechanism for it.

We do not track you across other apps or websites, and we do not build a profile of you from anything outside this platform.

We do not create an account from a photograph, a curator tag, or an email typed on an invitation page. A curator may create a private, unclaimed profile shell for a known participant and prepare a one-time invitation. The person must approve that profile, and only a successful sign-in with the same verified email can attach the shell to an account.

Who can see what

Other members see your profile and anything you post to the collective.

Anybody at all sees your public profile page, but only after you have approved it. Before then it does not resolve for anyone.

Nobody but you and an administrator sees your email address, your account settings, or the record of an invitation issued to you.

Acknowledgements are visible to the person who sent one and the person who received it, and to nobody else.

A photograph linked by a curator appears in your Photos of You feed. It appears on the public web only when your profile is already approved and public. You can remove the link from the app without deleting the event photograph from the archive.

Where it lives

On Supabase, which hosts the database and Coltivare file storage on our behalf, in the United States. Every table is protected by row-level security, so the database itself enforces who may read and write each row rather than trusting the app to ask nicely.

The Pass The Aux event archive is hosted by Cloudinary. Coltivare stores the curator-confirmed relationship between a Cloudinary photograph and a profile in Supabase.

Invitation codes are stored hashed, never in the clear, so a copy of the database is not a copy of the invitations.

How long

Your profile and content are kept while your account exists. Delete your account and they are removed, along with your public page.

A curator-confirmed photo link is kept while the linked profile exists or until you remove the photograph from your profile. Removing the link does not remove the original event photograph from Cloudinary's event archive.

Backups and ordinary technical logs roll off within 30 days. Where we are required to keep a financial record of a payment, we keep that record and nothing else.

What you can ask for

A copy of what we hold about you. A correction to anything wrong. Deletion of your account and content, which you can do yourself in the app without asking.

You can remove a curator-linked photograph from your profile or delete your account inside the app. Removing the link does not remove the event photograph from the event archive.

Depending on where you live you may also have the right to object to some processing or to receive your data in a portable form. Write to us and we will do it; we will not ask you why.

Children

Coltivare is for people 18 and over. We do not knowingly collect anything from a child. If you believe we have, write to us and it will be deleted.