Privacy Policy

Last updated: 6 November 2026

At Kpop Concerts Europe (“KCE”, “we”, “us”), accessible from https://www.kpopconcertseurope.com and through the KCE mobile app, one of our main priorities is the privacy of our visitors and members.

This Privacy Policy describes the personal data we collect, why we collect it, and your rights. It applies to:

the website kpopconcertseurope.com and related pages (including My Kpop Journey on the web);
the KCE mobile app for Android (package com.kce.app, Google Play) and iOS (App Store);
accounts, notifications, and support related to those services.

It does not apply to third-party websites or ticket shops we link to. Those have their own policies.

By using the Services you acknowledge this Policy. In the European Economic Area (EEA), the United Kingdom, and Switzerland, we ask for consent for non-essential cookies and personalised advertising through a consent tool (website CMP and, in the app, Google’s UMP / “Manage ad privacy” where required).

1. Who is responsible

The data controller is the operator of Kpop Concerts Europe. For privacy requests, email kpopconcertseurope@gmail.com.

2. Information we collect

Account and profile

If you register or log in (including Google or Facebook login via our website account), we process identifiers needed to run your member profile. Depending on what you provide, this may include email address, name, username/slug, country, bio, social links, profile photo, privacy/visibility settings, and login tokens stored securely on your device in the app.

The same member account is used on the website and in the app.

On iOS you can also sign in with Apple. Apple then shares a stable user identifier and, if you allow it, your email address (this can be a private relay address from Apple). We use them only to link your Apple sign-in to your KCE member account. To let you revoke this link, we keep a token from Apple that we use only to end the Apple sign-in when you delete your account.

My Kpop Journey and social features

When you use Journey or related features we process concert entries you save (including status, venue, ticket type and perks if you add them), private ratings and reviews, “went with” tags, friends and friend requests, and concert suggestions you submit for review.

Comments, reports and blocks
If you comment on posts, we process the comment and your public name. If you report a profile or comment, we process the report, the reason and any note you add, and the reported content, so our team can review it. If you block a member, we store that block so that member's comments and friend requests are hidden from you. Reports and blocks are not visible to the other member.

Notifications

If you enable notifications we process your subscription choices (for example countries or specific blog posts / tours) and a push token from Firebase Cloud Messaging so we can send updates. You can disable notifications in the app, on the website, or in system settings.

App diagnostics

The app uses Firebase Crashlytics to record crash and stability data (device type, OS version, app version and stack traces) and Firebase Analytics to understand which features are used (for example screens opened and buttons used). When you are signed in, this data is linked to your member ID so we can fix problems with your account. It is used to fix bugs and improve the app, not to advertise to you.

Website logs and cookies

Kpop Concerts Europe follows a standard procedure of using log files when you visit the website. These may include IP address, browser type, Internet Service Provider (ISP), date and time, referring/exit pages, and approximate click counts. These logs are for security and operations.

Like other websites, we use cookies and similar technologies to remember preferences and understand how pages are used. Non-essential and advertising cookies in the EEA/UK/CH depend on your CMP choice.

Advertising

The website may use Google AdSense (including advertising cookies such as DART where allowed). The app may show Google AdMob ads (for example native ads in the feed). Google and partners may use advertising IDs and cookies to serve ads, including personalised ads if you consent. On iOS, the app asks for your permission through Apple's App Tracking Transparency prompt before the advertising identifier (IDFA) can be used. If you decline, ads are still shown but without that identifier. You can change this at any time in iOS Settings > Privacy & Security > Tracking.

You can opt out of personalised advertising via the consent screen, the website privacy widget, the app’s ad privacy options where shown, and Google’s ad settings: https://www.google.com/settings/ads.

Information you send us

If you email support, submit feedback, or write as a tour organiser, we process the content of that message and your contact details to reply.

3. Why we use personal data (legal bases)

Contract: to create and run your account, Journey, friends, and the features you ask for.
Consent: non-essential cookies, personalised ads, and optional notification permission.
Legitimate interests: security, fraud prevention, crash diagnostics, improving the Services, and sending strictly service-related notices. You may object where the law allows.
Legal obligation: where we must keep or disclose data (for example a valid legal request).

4. Who we share data with

We do not sell your personal information. We use processors who help us run the Services, including:

Wix — website hosting and member accounts;
Google — sign-in, Play distribution, AdSense/AdMob, Firebase (Cloud Messaging, Crashlytics, app infrastructure);
Meta — Facebook Login if you choose that method.
Apple: App Store distribution, Sign in with Apple and push notification delivery on iOS; our own API server, which stores the concert catalog, your Journey entries, notification settings, and blocks and reports (hosted by SagaNetwork in Istanbul, Türkiye).

Public profile information (if you set your profile public) can be seen by other users. Friends and tags are visible to the people involved. We may disclose data if required by law or to protect users and the Services.

Third-party advertisers and linked sites have their own privacy policies. KCE’s Policy does not control those services.

5. Where data is stored

We and our processors may process data in the EU and in other countries (including the United States) where Google, Wix, or Meta operate. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

6. How long we keep data

We and our processors may process data in the EU and in other countries, including the United States (Google, Wix, Meta, Apple) and Türkiye, where our API server is hosted by SagaNetwork in Istanbul. Where data leaves the EEA, the UK or Switzerland for a country without an adequacy decision, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Your rights (EEA / UK and similar laws)

You may have the right to access, correct, erase, restrict, or object to processing, and to data portability. You may withdraw consent at any time (this does not affect processing already done). You may complain to your local data protection authority.

We aim to respond within one month. Email kpopconcertseurope@gmail.com.

Cookie consent: use the privacy / consent widget on the website. App ads: use “Manage ad privacy” when Google shows that option, and your device ad settings.

8. Account deletion

You can delete your account in the app under Account Settings > Delete account. Deleting removes your website member account and the data linked to it: your profile, Journey entries, friends and friend requests, comments, uploaded images, notification subscriptions and device tokens, and reports and blocks you created. If you signed in with Apple, we also tell Apple to end that sign-in. Some data may stay for a short time in backups or where we must keep it for security or by law.

You can also ask for deletion by email at kpopconcertseurope@gmail.com. Public copies (for example a share image you posted yourself on social media) are outside our control.

9. Children

Kpop Concerts Europe does not knowingly collect personal information from children under 13 (or under 16 in jurisdictions that require that age for an account). If you believe a child provided this information, contact us and we will delete it where required.

10. Cookies (website)

Cookies store preferences and help us understand traffic. Advertising cookies are used as described in section 2. You can block cookies in your browser; some site features may not work. Google’s advertising cookie policy: https://policies.google.com/technologies/ads.

11. Changes

We may update this Policy. The “Last updated” date will change. Continued use after an update means you acknowledge the new Policy. We will provide additional notice if the law requires it.

12. Contact

kpopconcertseurope@gmail.com
https://www.kpopconcertseurope.com

Tour organisers who want to promote a show may use the same address.