Privacy Policy
How we handle your data
Last updated: April 11, 2026
1. What We Collect
Stuff you give us
- Your email: When you sign in (email code or Google), we store your email address and display name. That's it for account data.
- Business claims: If you claim a venue, we'll ask for a phone number and email so we can verify you're the actual owner.
- Submissions: Venue details, photos, edit suggestions, and feature requests you send us through the site.
Stuff we pick up automatically
- Usage data: Which pages you visit and what you search for. We use Ahrefs Analytics for this.
- Device info: Your browser, OS, and screen size. Standard web stuff.
- Rough location: We use your IP address to show nearby venues. We don't track precise GPS coordinates.
2. What We Do With It
- Run the directory and keep it working
- Sign you in and manage your account
- Verify business listing claims
- Make the site better over time
- Send you admin stuff (claim status updates, account changes)
- Reply when you reach out to us
3. Third-Party Services We Use
Here's who else touches your data and why:
- Supabase — handles authentication and hosts our database
- Google OAuth — if you choose to sign in with Google
- Cloudinary — stores and resizes venue photos
- Resend — sends the one-time-password emails
- Ahrefs — site analytics
- Radar.io — address autocomplete when submitting a venue
Each service has their own privacy policy. We'd recommend reading them if you're curious.
4. How Long We Keep It
We hold onto your info as long as your account exists. If you want it gone, email us and we'll delete your account and everything tied to it.
5. Security
We use HTTPS everywhere, secure auth tokens, and access controls on our servers. We take reasonable precautions, but we won't pretend any website is bulletproof. If something happens, we'll let you know.
6. Your Rights
You can:
- Ask us what data we have on you
- Ask us to fix anything that's wrong
- Ask us to delete it
- Withdraw consent for processing
- Get a copy of your data in a portable format
7. Cookies
We use cookies for login sessions. We don't run ad trackers or third-party tracking pixels.
8. Kids
Kelva isn't built for anyone under 13. We don't knowingly collect data from children.
9. Changes
If we change this policy in any meaningful way, we'll update this page and the date at the top. No sneaky edits.
10. Questions?
Email us: