Privacy Notice

Content safety checks

Images and public text you submit may be sent to OpenAI for automated safety classification before publication. Files awaiting checks remain in private Cloudflare R2 storage. Videos can publish after file checks without prior manual review. Community reports can hide a post pending review. Rumba administrators can review flagged or reported content and eligible appeals, remove content and impose a temporary account suspension. Reports, safety decisions and review records are used to protect the community. Known or suspected child sexual abuse material is excluded from the general moderation service and handled through a restricted safety process.

When a venue chooses menu import, its menu photograph or PDF is sent to OpenAI to extract an editable draft. Rumba requests that the extraction response is not stored through the Responses API. The source stays in private storage and is scheduled for removal after seven days; the extracted draft remains available to the venue. The venue must check and approve items and prices before they are published. Event review may also use listing details to identify suspicious claims and possible duplicates for human review. For paid advertisements, advertising images, copy, audience settings and relevant public business or event details may be sent to OpenAI for automatic policy checks. Clear advertisements can be approved automatically; flagged, uncertain or failed checks are referred for human review. Venue promotions are published by the venue without a separate commercial approval process.

Stall applications

When you apply for an event stall, Rumba stores your name, trading or business name, proposed products or services, email, phone number, requested spaces and consent record. These details are shared with the event organizer and authorized staff for application review, booking, setup, payment and refund communications. A Rumba account is not required to apply. Payment invitations and confirmations use Resend, and hosted payments use DPO when enabled. The secure email link grants access to the individual booking and its printable confirmation. Transaction and application records may need to be retained for disputes, accounting or legal obligations.

Outing suggestions

When you choose natural-language discovery, your request, country context and selected public listing facts may be sent to OpenAI to interpret filters and select explanations. We request store:false for these Responses API calls. We do not automatically send your precise device coordinates, contact details, saved lists or purchase history to the model. Your request may itself contain information you choose to type.

If you enable personalized suggestions, Rumba uses your discovery preferences, saved venues and lists, and past paid event purchases to rank matching places and events on its own servers. You can turn personalization off for a search. Weekend picks can use these signals to recommend nearby places and events twice weekly and prioritize matching places on Home. You can turn Weekend picks off in notification preferences. Device time zone and recent location or your chosen home area help determine the timing and area; these coordinates are not sent to the model. Recommendation selections are saved so opening them does not require another model call. Daily model-request counters are stored to limit cost and abuse; cleanup runs during subsequent model requests for counters older than seven days. Suggestions use current listed prices, may become outdated, and do not reserve entry, tables or menu stock.

Who handles your information

Bytebridge Technologies owns and operates Rumba and is responsible for the personal information Rumba uses to operate its app, website and business tools. Contact ola@rumba.co.bw for privacy questions or requests. Venues, organizers and payment providers may separately handle information for their own services and legal responsibilities.

Information we use

• Account details such as name, username, email, phone number, date of birth, gender, profile photograph, language and security or consent records. Gender is optional.
• Information you create or submit, including outings, images, comments, follows, saved items, plans, invitations, reviews, reports and support requests.
• Ticket, purchase, transfer, resale, refund, attendance and business verification records. Authorized businesses may submit documents and payment or payout details.
• Device and service information needed for sessions, notifications, reliability, fraud prevention and security. Notification delivery uses device registration details.
• Location you permit your device to share while using relevant features, the area you search for or choose on a map, and an approximate country or city associated with your account. Your privately chosen home town or area is kept separately so travel does not replace it.
• If you choose Find friends and grant contacts access, contact phone numbers are sent securely for matching. Contact names and photographs are not uploaded, unmatched address-book numbers are not retained, and we store only links to matching Rumba members. Matches require the other member to have a verified number and allow discovery by number. Saved unverified numbers are not used to identify members. Disconnect contacts in Find friends to remove your imported matches, and turn off discovery by number to stop new suggestions of your profile.
• Advertising views, button clicks, campaign settings, billing records and matching paid ticket purchases used to measure campaign results.

Why we use it

We use information to provide accounts and sign-in, nearby discovery, plans, community features, tickets, gate checks, business tools, payments, notifications and support. We also use relevant records to prevent fraud and abuse, investigate disputes, maintain security and satisfy legal obligations.

Depending on the activity and applicable law, processing is needed to provide the service you request, comply with a legal duty, pursue legitimate operational interests with appropriate safeguards, or follow your consent. Where consent is required, you can withdraw it without changing the lawfulness of earlier processing.

Location and permissions

With device permission, Rumba uses your location to show nearby places and update your approximate area. You can instead search for a place or choose an area on a map. Location information can be inaccurate or become outdated.

You can change location, camera, photo and notification permissions in your device settings. Turning off a permission may limit the related feature. We do not give advertisers your precise device coordinates through campaign reports.

Advertising and email updates

Sponsored placements are labelled. Campaign delivery may match an adult account's age, optional gender and approximate country or city, or a radius around a selected place when fresh device location is available. Campaigns may also match music and atmosphere preferences you select or preferences indicated by venues and events you save or favourite. We do not infer a musical taste solely from a description such as chilled. A campaign requiring an unknown attribute does not match that attribute. Selection is based on campaign rules; it does not determine eligibility for credit, employment or other similarly significant decisions.

Campaign reports provide aggregated delivery, click and attributed ticket results. Age-band and gender reporting stores broad groups at the time of a view, not a copy of your date of birth. These demographic and audience-area groups are shown only after at least ten different viewers fall in a group. This reporting does not give advertisers a list of viewers' names, email addresses or precise coordinates. Event organizers still receive the ticket information needed to operate their events.

Email updates are optional and can include sponsored offers from venues or other businesses. Change the email updates choice in your profile or use the unsubscribe link in a marketing email. Necessary account, security and purchase communications are separate. We do not provide advertisers with the subscriber email list as part of this service.

Turn on Hide sponsored advertisements in your profile to stop sponsored ad matching, new ad view and click tracking, and new ticket attribution to advertisements across your signed-in devices. This does not delete billing or security records already created. You may also object to the use of your personal information for direct marketing, including related profiling, by contacting ola@rumba.co.bw. You do not have to delete your account to make that request.

Who can see it

Public profile information, posts and other public contributions can be seen by other users according to the feature. Private lists, plans, security details and verification documents are restricted to the relevant people or authorized staff. Please consider what you include in public photos and captions.

Organizers and authorized gate staff receive limited ticket and admission information. Online entry verification may display the ticket owner's profile photograph; offline admission uses a limited event ticket record. Staff must not use this information for unrelated purposes.

Service providers handle information needed for hosting, storage, authentication, email, notification delivery, payment processing and operational support. Current services may include Render, Vercel, Neon, Cloudflare, Firebase, Resend and DPO when the corresponding feature is enabled. Payment providers collect payment details through their checkout; Rumba does not ask you to put card numbers into posts or support messages.

We may disclose information when required by law or necessary to investigate abuse, protect rights or complete a lawful business transition with appropriate protections. Information may be processed outside your country. Where cross-border safeguards are required, the applicable safeguards must be in place for that processing.

Storage and retention

We retain information for the purposes described here and assess retention by the type of record, account status, outstanding purchases or business duties, dispute and fraud risks, and legal recordkeeping requirements. Deleting an account does not require us to erase records that must lawfully be retained. Access to retained records is limited to the purpose for keeping them.

We use access controls, protected connections and restricted storage for sensitive documents. Keep your password private and contact us if you suspect unauthorized access. Essential local session information supports sign-in; choices such as language or onboarding may be stored on your device.

Your choices and rights

Use your profile and settings to update editable details, manage email and notification choices, download your account data, pause your account or request deletion. Some changes require a password or verification code. For a correction that is not available in the interface, contact us.

Subject to applicable law, you may request access, correction, erasure, restriction or portability of your information, withdraw consent, object to certain processing, or complain to a relevant data protection authority. We may verify your identity and must also protect other people's information and legally retained records. Contact ola@rumba.co.bw to exercise these rights.

Rumba accounts are for adults aged 18 and over. If you believe a child has supplied information or an account misstates their age, contact us. We may update this notice as the service changes and will identify material changes through an appropriate channel.