Information We Collect
Account & Profile Information
When you register, we collect your name, email address, phone number, gender, role (attendee, staff, organizer, admin), and a profile photo (either one you upload or a default avatar assigned based on gender). This is stored against your account in our database and authentication system.
Event, Pass & Attendance Data
When you register for an event or facility access we create a digital pass linked to your account, containing your event/facility details, assigned gate or zone number, QR code, and check-in status. Every gate check-in (via NFC tap or QR scan) is logged with a timestamp, gate/zone number, and the staff member who processed it, so organisers can maintain accurate attendance and access records.
NFC Wristband Data
If you activate a physical NFC wristband, we create a band record linking a unique band ID to your pass and account. Only one band may be active per pass at a time. If you report a band lost, it is immediately and permanently disabled — any further scan of that physical chip is rejected — to protect you if the band is misused by someone else.
Payment & Transaction Data
We maintain a band balance associated with your pass for cashless payments at event stalls and venue services. We record recharge amounts, payment method selected (UPI/card/net banking), stall or service purchases, item lists, and resulting balances. We do not collect, process, or store your card number, UPI ID, or bank credentials — all recharge payments are processed by our payment partner, Razorpay (see Section 04).
Location Data
If you are a staff member using the location-tracking features of the app, we collect precise (GPS) location — including in the background while the app is minimised — so your real-time position can be shown on the venue or campus map to coordinate staff during an event. This is used only for on-shift coordination and is not collected from regular attendee accounts unless the same location feature is explicitly enabled for them.
Device & Technical Data
We may collect basic technical information such as device type, OS version, and app version to diagnose crashes and maintain compatibility, and standard web analytics (e.g. Google Analytics cookies) when you visit kizonance.com.
How We Use Your Information
- To create and manage your event pass, wristband, and account
- To verify identity and eligibility at gate check-ins and stall or venue payments
- To process band recharges and deduct stall or service purchases against your balance
- To show live staff locations on the venue map for on-ground coordination during events
- To generate attendance records and post-event reports for event and venue organisers
- To detect and prevent fraud — for example, rejecting a wristband that has been reported lost
- To communicate service updates, receipts, or respond to support requests
How We Share Your Information
We do not sell your personal data. We share information only as follows:
| Recipient | What is shared & why |
|---|---|
| Razorpay Payment gateway |
Recharge amount and your contact details required to process the transaction. Razorpay independently handles your card/UPI/bank details under its own PCI-DSS compliant systems — we never see or store them. |
| Firebase / Google Cloud Infrastructure |
All account, event, band, and transaction data is hosted on Firebase (Authentication, Firestore database) as our backend infrastructure provider, under Google Cloud's security and compliance standards. |
| Event / venue staff & organisers | Your name, check-in status, and profile photo are visible to authorised staff at the event or venue you registered for, solely to verify identity at gates and stalls. |
| Legal requirements | If required to comply with a valid legal request, protect our rights, or ensure user safety. |
Payments via Razorpay
All band recharges are processed using Razorpay Standard Checkout, a PCI-DSS Level 1 compliant payment gateway.
- Your payment (card, UPI, or net banking) is entered directly into Razorpay's secure checkout — it never passes through or is stored on our servers.
- We receive only a payment confirmation and a signed reference (order ID, payment ID, and signature) which we verify server-side before crediting your band balance.
- Razorpay's own handling of your payment data is governed by Razorpay's Privacy Policy.
Data Security
Account credentials are managed through Firebase Authentication. Sensitive operations — check-ins, band verification, and balance deductions — run through server-side transactions to prevent tampering. Wristbands can be instantly disabled if reported lost, limiting the impact of a physically lost or stolen band.
Data Retention
We retain event, attendance, and transaction records for as long as needed for event reporting, financial reconciliation, and legal/tax requirements, and delete or anonymise account data upon a verified deletion request, except where retention is required by law (e.g. payment records).
Your Rights & Choices
- Access or correction — request a copy of your data or correct inaccurate profile information
- Deletion — request deletion of your account and associated data, subject to retention obligations noted above
- Location control — staff location tracking can be disabled from device settings, though this may limit real-time coordination features for staff roles
- Marketing communications — opt out of non-essential communications at any time
To exercise any of these rights, email info@kizonance.com.
Children's Privacy
Kizonance is intended for use by venue/facility staff, volunteers, and event attendees who are 18 years or older. We do not knowingly collect data from children under 18. If you believe a minor's data has been submitted to us, contact us for prompt removal.
Changes to This Policy
We may update this policy as our platform and features evolve. Material changes will be reflected by updating the "Effective date" above, and where appropriate, communicated in-app.
Contact Us
For privacy questions, data requests, or concerns, reach us at info@kizonance.com.