1. About this policy
This policy explains how Rukn ("we", "us", or "our") handles personal information when you use joinrukn.com, the Rukn mobile application, or contact us. Rukn is the controller for the information described here. Questions and privacy requests can be sent to support@joinrukn.com.
2. Information we handle
- Account and sign-in information: your name, email address, account identifier, and profile details. If you use Google or Apple sign-in, that provider sends us the account information you approve. Passwords are handled by Supabase Auth; we do not have access to your readable password.
- Enquiries and communications: the name, email address, optional phone number and event date, and message you provide when contacting a venue or vendor, plus messages you send to Rukn.
- Planning and preference data: information you choose to save, such as your wedding date and city, guest estimate and guest list, budget, checklist, day plan, and saved listings. The mobile app can keep limited onboarding preferences on your device before you sign in.
- Business listing data: business and contact details, service information, pricing, and images submitted by a business or obtained from its public website. We keep source information so listing facts can be reviewed.
- Technical service data: essential session or authentication tokens and request information that our hosting and backend providers may process, such as IP address, browser or app version, operating system, request time, and error details. This supports service delivery, security, and troubleshooting.
- Listing image requests:some approved listing images are served directly by the business's website or an identified stock-image host. Loading one can disclose ordinary request data, such as your IP address and device/browser details, to that image host.
The current website and mobile app do not include advertising or a behavioural analytics SDK. The mobile app does not request access to precise device location, contacts, or the photo library. We do not make decisions about you that have legal or similarly significant effects using solely automated processing.
3. How and why we use information
- Provide accounts, saved lists, planning tools, and support.
- Record an enquiry you submit and show its status. Rukn does not currently send that enquiry to the business automatically.
- Operate, secure, troubleshoot, and improve Rukn and prevent misuse.
- Review, publish, correct, verify, or remove marketplace listings.
- Meet legal obligations and establish or defend legal claims where necessary.
4. Lawful bases
Depending on the activity, we rely on one or more of these bases:
- Contract: to provide the account, enquiry, and planning services you request.
- Legitimate interests: to run and secure the service, maintain an accurate business directory, answer support requests, understand service performance without behavioural tracking, and prevent fraud or misuse. We consider the impact on people before relying on this basis.
- Consent: where we specifically ask for it. You can withdraw consent at any time, without affecting processing that already took place.
- Legal obligation: where applicable law requires us to keep, use, or disclose information.
5. When information is shared
- Supabase: database, authentication, server functions, and file storage.
- Vercel: website hosting, delivery, and associated security logs.
- Google or Apple: only when you choose the relevant sign-in service. Their own privacy terms also apply.
- Listing image hosts: your device contacts the relevant host when it loads an externally hosted, approved image.
- Authorities or professional advisers: when reasonably necessary to meet a legal obligation, protect rights or safety, or handle a legal claim.
- A successor organisation: if Rukn is involved in a merger, acquisition, financing, or sale, subject to appropriate confidentiality and notice requirements.
The current enquiry feature records your message in Rukn but does not automatically share it with the selected venue or vendor. We will update this policy and the enquiry screen before enabling business delivery. We do not sell personal information or share it with third parties for cross-context behavioural advertising.
6. International processing
Our providers may process information in the UK, the European Economic Area, the United States, or other locations described in their service terms. The locations and transfer safeguards depend on the provider, project settings, and service terms. Contact us for current details and information about the safeguards relevant to your data.
7. Retention and deletion
We keep personal information only for as long as needed for the purposes above. The period depends on whether your account remains active, whether the information is needed to provide a requested service, resolve a dispute, maintain security records, or meet a legal obligation.
- Account and planner data is normally retained while your account is active and deleted when your account is deleted, subject to limited legal or security exceptions.
- The mobile app includes an in-app account deletion control. You can also request deletion using the contact address below.
- Provider logs and backups follow the providers' operational retention schedules and are removed or overwritten over time.
8. Cookies and local app storage
The website uses strictly necessary cookies for sign-in, session continuity, and security. The mobile app uses local storage for its session and limited preferences. We do not currently set analytics or advertising cookies. Blocking or deleting essential storage may sign you out or prevent account features from working. If we add non-essential cookies later, we will update this policy and request consent where required.
9. Your choices and rights
Depending on the circumstances, UK data protection law may give you rights to access, correct, erase, restrict, or receive a copy of your personal information, and to object to certain processing. If we rely on consent, you can withdraw it. These rights can have legal exceptions.
You have the right to object to processing based on legitimate interests. You also have an absolute right to object to direct marketing.
Email support@joinrukn.com to make a request. We may need to verify your identity. We aim to respond within one month where the UK GDPR timeframe applies.
10. Security
We use access controls, encrypted connections, authentication, and provider security features intended to protect personal information. No online system can be guaranteed completely secure, so please use a unique password and tell us promptly if you suspect unauthorised account access.
11. Changes and complaints
We may update this policy when the service or our practices change. We will publish the new version here, update the date above, and provide additional notice when a change materially affects how we use personal information.
Please contact us first if you have a concern. You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.