Privacy Policy — Agora

Last updated: 2026-05-11

This Privacy Policy describes how Agora (“we”, “our”, or “us”) collects, uses, and shares information when you use the Agora mobile application (the “App”). By using the App you agree to this Policy.

If you do not agree with this Policy, do not use the App.

1. Who we are

Agora is operated by Miguel Nebot Chirivella, based in Spain. You can contact us at mnebotchirivella@gmail.com for any privacy question or to exercise your rights.

2. Data we collect

We collect only what is needed to operate the community features of the App. Specifically:

Data	Why we collect it	Source
Email address	Account creation, sign-in, password recovery	You provide it
Display name	Identifies you to other community members	You provide it
Avatar URL (optional)	Shown next to your name in communities	You provide it
Language preference, dark-mode preference	Personalize the App	You set it in the app
Push notification token (FCM)	Deliver push notifications about your activities and reservations	Generated by Firebase Cloud Messaging on your device
Community memberships, activity reservations, slot history	Core functionality (manage events and reservations)	Generated as you use the App
Messages you send in community chat	Core functionality (community chat)	You provide it
Reports and blocks	Moderation tooling	You provide it

We do not collect: location data, contacts, photos, microphone or camera input, advertising identifiers, or browsing behavior outside the App.

We do not use third-party advertising networks. No ads.

3. How we use your data

Provide and operate the core features of the App (communities, activities, reservations, chat).
Send you push notifications about activities you participate in (e.g. reminders, slot promotions, new messages).
Authenticate you and keep your session secure.
Investigate abuse and enforce our Terms of Service when you submit a report or are reported.

We do not sell your personal data. We do not share your data with advertisers.

4. Service providers

We use the following service providers to operate the App:

Supabase (supabase.com) — Hosts our database, authentication, storage, and realtime services. Data is stored in the EU region. Subject to Supabase’s privacy policy.
Google Firebase Cloud Messaging — Delivers push notifications to your device. Subject to Google’s privacy policy.

These providers process data on our behalf and only for the purposes listed above.

5. Data retention

Your account data is retained for as long as your account exists.
Messages and reservations are retained as long as the related community/activity exists.
When you delete your account from the App’s profile screen, your profile, messages, reservations, blocks and reports are permanently deleted from our database, normally within 30 days. Backups containing your data are overwritten on a 30-day rolling basis.

You can also request account deletion by emailing us at mnebotchirivella@gmail.com.

6. Your rights

Depending on where you live (e.g. EU/EEA, UK, California), you may have the following rights:

Access — Request a copy of the data we hold about you.
Rectification — Correct inaccurate data (most fields can be edited from the Profile screen).
Deletion — Delete your account at any time from the App. See section 5.
Portability — Request a machine-readable export of your data.
Objection / restriction of processing.
Withdraw consent — When processing relies on consent.
Lodge a complaint with your data protection authority.

To exercise any of these rights, email mnebotchirivella@gmail.com. We will respond within 30 days.

7. Children

The App is not intended for children under 13 (or under the minimum age of digital consent in your country, whichever is higher). If we learn we have collected data from a child under that age without verifiable parental consent, we will delete it promptly.

8. Security

All traffic between the App and our servers uses HTTPS.
Passwords are never stored in plain text — authentication is handled by Supabase Auth using industry-standard hashing.
Local cache on your device is sandboxed by Android and is not backed up to Google’s cloud (android:allowBackup="false").

No system is perfectly secure. Please report any vulnerability to mnebotchirivella@gmail.com.

9. International transfers

Our database is hosted in the EU. Push notifications are routed through Google services that may transfer data globally. By using the App you consent to these transfers.

10. Changes to this Policy

We may update this Policy. The “Last updated” date at the top reflects the latest version. Material changes will be announced inside the App.

11. Contact

Questions, requests, or complaints: mnebotchirivella@gmail.com