privacy & safety
raund helps you find what's on in Sofia and Athens, and go to it with friends or new people. This page explains how to stay safe, the rules for using raund, and what we do with your data.
raund lists the Kinomania film festival programme, but it isn’t the festival’s app: raund is run independently by IatrosDesign, from Sofia, Bulgaria.
Safety
Meeting up safely
raund lets you meet people in person:
- Bumps are private invitations to go to an event together. If the other person accepts, it becomes a Plan with its own chat.
- Go together shows you other people who have said they're in for the same event. You can invite them, and they can invite you.
- Meet up is for spontaneous plans: a place, a time, a friend. With Free now you can also let people in your city see that you're free for a few hours.
- Groups have a wall, a group chat and, sometimes, plans with many people.
When you meet someone for the first time:
such as the cinema lobby, the venue entrance or a café next door. Don't meet at someone's home or in a car.
where you're going, who you're meeting and when you expect to be back.
by public transport, taxi or your own car, so you can leave whenever you want.
If something feels wrong, leave. You don't owe anyone an explanation.
It works across the EU, including Bulgaria and Greece.
Safety online
- Keep personal details to yourself at first: your home address, workplace, other social accounts and money matters.
- Check your photos. Make sure your profile photo or chat photos don't show your street, your building or documents.
- Chat in raund first. Plan and Meet up chats are deleted 24 hours after the event or meetup ends, so save anything you need, such as a meeting point.
- Stay in raund until you're comfortable. If something goes wrong, you can report and block the person from inside the app.
Scams
raund does not sell tickets. Tickets are sold by the organisers, venues and ticketing sites we link to. We never ask you for payment details.
to someone you met on raund, not for tickets, not for a "reservation" and not as a favour. If someone asks, it's a scam. Report them.
- Buy tickets only from the official seller. For Kinomania, that is the festival's own box office or ticket partners.
- Watch for pressure. Be careful with anyone who rushes you onto another app, asks for codes sent to your phone, or won't say who they are.
- raund will never ask for your SMS code. If someone asks for it, they are trying to take over your account.
Reporting and blocking
How to report
When to report: someone makes you feel unsafe, harasses you, asks you for money, pretends to be someone else, or breaks the Community Guidelines. You can also report wrong or harmful listings and content.
| What | Where in the app | Who can report |
|---|---|---|
| A person you found through Go together | On their card, before you invite: Report or block. On an invitation: Safety → Report and block or Block user | Signed-in users who share that event or invitation |
| An event | Event details → ⋯ → Report | Anyone, even without an account |
| A Meet up plan | Open the meetup → Report meetup | The people in that meetup |
| A group | Open the group → ⋯ → Report group | Members, people who can see the group, and people with an invite link |
| A review | The ⋯ menu on the review → Report review | Anyone who can see the review |
Blocking
- Reporting a person in Go together blocks them automatically. You can also block without reporting.
- When you block someone, you stop seeing each other in Go together. They can't send you a new Bump or Meet up invite, can't accept an old one, and can't post to your Plan or Meet up chats. Pending invitations between you are cancelled.
- The other person is not told that you blocked them.
- You can see and undo your blocks under Blocked people in Meet.
What happens after you report
- Your report goes to the raund team's review queue. A person reads every report.
- A review that three different people report is hidden straight away while we check it.
- Depending on what we find, we may do nothing, remove the content, warn the person, or suspend or remove their account. If we remove your content or restrict your account, we tell you why and how to object.
- Reporting does not remove anything automatically, except for reviews as described above.
- If you think someone is in danger, call 112 first.
Your report is confidential
The person or organiser you report is not told who reported them. Only the raund team sees your name with the report. We share it with others only if the law requires it, for example at the police's request.
Screenshots on a report
You can add up to three screenshots to a report or to feedback. Only the raund team sees them. We remove location and other data stored in the image before keeping it, and we delete the screenshots 90 days after the report, whatever happened with it, or straight away if you delete your account. Screenshots can show other people's messages or names, so add only what helps us check.
Community guidelines
- Be yourself. Use your real name or the name people know you by, and a photo of yourself or an avatar. Don't pretend to be someone else, including a venue, organiser or festival.
- Be respectful in invitations, chats, groups and reviews, including when you say no or someone says no to you.
- No harassment, hate or threats. That includes bullying, sexual comments, discrimination of any kind, and following or contacting someone who has said no.
- No spam, scams or selling. Don't use raund to advertise, collect money, resell tickets or send the same invitation to lots of people.
- No is a full answer. Anyone can decline or ignore an invitation, leave a chat or group, or cancel a plan at any time, without giving a reason. Going together means sharing an event, nothing more. Nobody owes anyone their company afterwards, their number or a drink.
- Keep reviews about the event or venue. Don't post personal details about staff or other guests.
- Only post what you have the right to post. Use your own photos, or photos you're allowed to share.
If you break these rules, we may remove your content, limit what you can do, or suspend or remove your account. Serious cases, such as threats, sexual content involving minors or fraud, are removed straight away and may be reported to the police.
Terms of use
These terms are an agreement between you and raund ("we"). By creating an account you accept them. If you don't, please don't use raund.
What raund is
raund is an app for finding events (films, concerts, theatre, exhibitions and more) in Sofia and Athens, and for going to them together: with friends through Bumps and Plans, with new people through Go together and Meet up, and with groups.
- In Go together you choose whether you're open to friends, dating or both. Dating is optional and only for adults.
- raund does not sell tickets and is not part of any sale. Organisers, venues and ticketing sites sell tickets under their own terms. We show listings and links to help you find them.
- Many listings come from public sources and can be wrong or out of date. Always check the date, time, price and venue with the organiser.
- When you meet people, that is arranged between you and them. raund is not part of those meetings (see "Safety disclaimer" below).
Who can use raund
Go together's dating options are only for people 18 and over. You must be able to agree to these terms, and you may not use raund if we have removed your account before.
Your account
- You sign in with Google or with your phone number and a one-time SMS code. We never see your Google password.
- Keep access to your Google account and phone secure. You are responsible for what happens on your raund account.
- One person, one account. Don't share or sell your account, or use someone else's.
- You can delete your account at any time (see "Your rights").
Acceptable use
Follow the Community Guidelines. Also, don't:
- break the law, or help someone else break it;
- harass, stalk, threaten or deceive other people;
- ask other users for money or payment details;
- collect other users' data, or use bots, scrapers or automated tools on raund;
- try to get raund blocks, limits, safety checks or security;
- post content you don't have the rights to.
What you post
You keep ownership of what you post: profile photo, bio, events, group posts, comments, messages and reviews.
To run raund, you give us a non-exclusive, royalty-free licence to store, copy, resize and display that content inside raund, to the people you chose to share it with, and on public pages where the feature works that way (public reviews, public events, shared group posts). This licence ends when you delete the content or your account. It does not end for copies other people already received, such as a message you sent, or where we have to keep something for legal or safety reasons.
You confirm that you have the right to post what you post. For photos of other people, you need their permission.
Safety disclaimer
We do not check identities, run background checks or screen members. A name or photo on raund is what the person told us. New profile, event, group and chat photos are automatically checked for harmful content before publication. These checks can make mistakes. You are responsible for your own decisions about who you meet. Please read the Safety section before meeting anyone.
Moderation
We may review, hide or remove content and restrict or remove accounts that break these terms or the law, or that put people at risk. Our team reads reports. New profile, event, group and chat photos are sent to OpenAI for an automated safety check before publication. Flagged photos are blocked; if the check is unavailable, the upload does not go through. Private report and feedback screenshots are not sent for this check. Photos uploaded before these checks were enabled have not been rechecked. If we act against your content or account, we tell you what we did and why, unless the law or someone's safety prevents us. You can dispute it through You → Send feedback in the app.
To report illegal content, use the report options in the app or You → Send feedback.
Ending your account
You can delete your account at any time. We may suspend or close your account if you seriously or repeatedly break these terms, if the law requires it, or to protect others. Where reasonable, we warn you first.
Responsibility
raund is free and is provided as it is. We work to keep it running and accurate, but we can't promise that every listing is correct or that the app will always be available.
We are not responsible for events, tickets, venues or other people's behaviour. As far as the law allows, we are not liable for indirect or unforeseeable loss. Nothing in these terms limits liability that can't be limited by law, such as for death or personal injury caused by negligence, for fraud, or for gross negligence or intent, and nothing affects your rights as a consumer under EU, Bulgarian or Greek law.
Law and disputes
These terms are governed by the law of Bulgaria. If you live in another EU country, you keep the protection of that country's mandatory consumer law, and you can bring a claim in the courts where you live. Otherwise the courts of Sofia have jurisdiction.
Changes
If we change these terms in a way that matters, we tell you in the app before the change takes effect. If you don't agree, you can delete your account.
Privacy policy
This explains what personal data raund uses, why, who sees it and how long we keep it. It follows the EU General Data Protection Regulation (GDPR).
Who we are
raund is run by IatrosDesign, Sofia, Bulgaria, which is responsible for your data (the controller). For anything about your data, use You → Send feedback in the app. You can do that signed in or, if you can't sign in, as a guest with a way for us to reply. Or email hello@raund.app.
What we collect
When you sign in
- Google sign-in: your email address and name from Google. Your name becomes your raund display name. We keep a scrambled (hashed) Google identifier to recognise you next time.
- Phone sign-in: your phone number goes to our SMS provider, which sends the code. We keep only a scrambled (hashed) copy of your number and a masked hint (for example "+359 ••• ••12"). Phone accounts get the name "raund member" and an internal ID instead of an email address.
- Your session: a sign-in cookie keeps you signed in for up to 30 days. We store only a scrambled copy of the session token, with the date and how you signed in.
- Security: to stop abuse of SMS codes, we keep a scrambled copy of your IP address together with the number of attempts.
Your profile
- Your display name, profile photo (or chosen avatar or initial) and a short bio (up to 180 characters).
- Your interests (Live music, Nights out, Stage & cinema, Art & design, Outdoors, Meet & learn), whether recommendations should learn from you, and your onboarding status.
- Your home city and alert settings (nearby radius, cities to get alerts for).
- Language, notification preferences, and what you follow: venues, organisers and event types.
What you do in raund
- Events you save, mark as going or attended, or react to; suggestion votes; reminders you set.
- Bumps and Plans: who invited whom, for which event, the status (sent, seen, accepted, declined, expired) and the chat messages.
- Friends: people you connected with through an accepted Bump.
- Go together: which events you said you're in for and for how long, invitations with their personal message and proposed time, and your blocks and reports.
- Meet up: invitations with the place, time and an optional note; your availability, mood and area; and, if you choose "public", the city you're visible in. Also the chat messages.
- Groups: groups you create or join, answers to a group's join questions, posts, comments, likes, group chat messages, reactions, photos and read status.
- Reviews: your rating, your text and the venue rating for events you went to, and whether each review is public or private.
- Events you add: title, description, dates, place and address, price type, capacity, visibility and photo. If you read an event from a poster, the text is read on your device: the poster image is not sent to us or to anyone else. If you paste a link, our server fetches that page from an approved list of public event sites to fill in the details.
- Photos you upload for your profile, events, groups and chats.
- Reports and blocks you make, and reports other people make about you or your content.
- Feedback and contact messages: your message, category, rating, the screen you were on, city, language and app version.
Usage information
- Beta usage research (off by default). If you turn it on in Early Access, we record app opens, event and card views, map use, search and filter counts (not what you typed), saves, ticket-link clicks and Bump actions, under an internal beta ID. Turn it off at any time.
- Go together counters. When you use Go together, we record steps such as opening it, opting in or out, and an invitation expiring, under a scrambled identifier.
- Anonymous counters of general app events, with no user identifier.
Special categories of data
We don't ask for health, religion, political views or ethnicity. Please don't include them in your bio, messages or reviews. Go together's optional dating choices are explained below.
Why we use it, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Create your account, keep you signed in, show your profile | Sign-in data, profile | Contract, Art. 6(1)(b) |
| Show events, saves, reminders, follows and recommendations | Interests, saves, follows, home city | Contract, Art. 6(1)(b) |
| Bumps, Plans, Go together, Meet up, groups, chats and reviews | Social data, messages | Contract, Art. 6(1)(b) |
| Show events near you using your device's location | Current location (kept on your device) | Consent through your device's permission, Art. 6(1)(a) |
| Push notifications | Device push address | Consent through your device's permission, Art. 6(1)(a) |
| Add an event to your Google Calendar | Event details, a temporary Google token | Your request (contract, Art. 6(1)(b)); you grant Google access separately |
| Beta usage research | Usage events under a beta ID | Consent, Art. 6(1)(a) |
| Check new uploaded images for harmful content | Profile, event, group cover and portrait, group wall and chat photos (excluding private report and feedback screenshots) | Legitimate interests (keeping users safe), Art. 6(1)(f) |
| Handle reports, blocks and rule-breaking; prevent fraud and spam; protect SMS sign-in | Reports, blocks, scrambled IP and phone hashes, rate limits | Legitimate interests (safety and security), Art. 6(1)(f) |
| Understand how Go together is used so we can improve it | Go together counters | Legitimate interests, Art. 6(1)(f) |
| Answer feedback and contact messages | Your message | Legitimate interests, Art. 6(1)(f) |
| Keep records the law requires, and answer lawful requests from authorities | As needed | Legal obligation, Art. 6(1)(c) |
Where we rely on legitimate interests, you can object (see "Your rights"). Where we rely on consent, you can withdraw it at any time. That does not affect what we did before.
We do not use your data for advertising, we do not sell it, and we do not make decisions about you that have legal or similarly serious effects by automated means alone.
Go together and dating
In Go together you choose whether you're open to friends, dating or both. Friends is the default and asks for nothing more.
If you choose Dating or Both, we ask for your date of birth, your gender, the genders you'd like to meet and an age range. Together these may show your sexual orientation, so they are optional and given only by you. We use them only to show you to, and show you, people whose choices match yours for the same event. Other members never see your date of birth, your gender or these choices; they see only that you're open to dating. You must be 18 or older to choose dating; this is based on the date you give us, and we don't check documents. You can switch back to Friends at any time.
Who can see what
| What | Who can see it |
|---|---|
| Display name and photo or avatar | People you send a Bump or Meet up invite to, or who send you one; your friends; members of your groups; people who opted into Go together for the same event at an overlapping time (if neither of you blocked the other); signed-in users in your city while you're publicly available in Meet up |
| Bio and interests | Go together matches and invitation partners |
| Email address | Not shown on your profile. Phone accounts have no email. |
| Profile photo file | Anyone who has its link, because profile photos are served without sign-in |
| Bumps, Plans and their chat | Only you and the other person |
| Meet up plan and chat | Only the people in that meetup |
| Group posts, comments, chat and members | Current group members. Public groups' names and descriptions can be seen by people in that city. Invite-link groups can be seen by anyone with the link. If the group owner turns on sharing, individual posts can get a public link showing your name, the text and any photo. |
| Join-question answers | The group owner |
| Public reviews | Anyone, including people who aren't signed in, shown with your first name, last initial and photo. Private reviews are only for you. |
| Events you host | Public events: everyone, with your name. Invite-only events: not in Explore; anyone with the event’s link can see it and ask to join. A get-together’s address: you and the guests you let in. |
| Events you add from a poster or link | Public: everyone, shown as added by you, with a link to the original source. Invite-only: not in Explore; anyone with its link. |
| Your saves, follows, reminders, interests, location settings, blocks and reports | Only you (and the raund team, see "Who on our team can access data") |
Location
- Near me: when you allow it, your device gives the app your position to centre the map and show distances. That position stays on your device. We don't send it to our servers or store it.
- Map: the map images come from OpenFreeMap. Your device asks for the area you're looking at, so OpenFreeMap can see your IP address and roughly which area you viewed.
- What we store: only the home city and alert cities you choose, and, for Meet up, the city and area you type in yourself. Events you create store the place and address you enter. We don't keep a history of where you've been.
- Directions open Google Maps only when you tap them.
- You can turn location off at any time in your device or browser settings. raund still works if you pick a city instead.
Messages
Plan, Meet up and group chats are not end-to-end encrypted. They are stored on our servers as written, so that you can read them on any device you sign in on. Only the people in the conversation can open them in the app. The data is encrypted while it travels. The raund team can technically read stored messages, but we only look at them to handle a report, to protect someone's safety, or when the law requires it.
- Plan chats and Meet up chats are deleted 24 hours after the event or meetup ends (or 24 hours after a plan is cancelled). Photos attached to them can no longer be opened after that, but the files stay in storage until the sender deletes their account.
- Group chats are kept until the group owner deletes the history for everyone, or the group or your account is deleted. You can also clear the history for yourself only.
- Push notifications about messages say only "You have a new message." or "There is an update to your plan." They never contain the message text.
Who on our team can access data
raund is run by a very small team. The admin area is open to one owner account. It shows: the event catalogue and its quality, reports (with the reporter's and the reported person's email), contact messages, beta tester feedback and anonymised beta statistics. People with access to the hosting account can technically reach the database. Access is limited to people who need it for running and protecting raund, who are bound by confidentiality, and who never look people up out of curiosity.
Companies that help us run raund
These providers process data for us so that raund can work:
| Provider | What for | Data involved |
|---|---|---|
| Cloudflare, through the OpenAI Sites hosting platform | Hosting the app, database and photos | Everything we store; IP addresses in security logs |
| Google (Identity Services) | Sign in with Google | Email address, name, sign-in token |
| Google (Calendar, optional) | Adding an event to your calendar, only if you choose to | The event details; the request goes from your device to Google |
| OpenAI | Checking new uploaded photos for harmful content | The resized photo after metadata removal. We do not send your email, name, message text or private report screenshots with this check. |
| An AI writing service | Writing a short summary of a long event description, labelled as a summary in the app | The event's public title and description only, never anything about you |
| An SMS provider | Sending and checking sign-in codes, if you sign in with your phone | Your phone number and the code |
| Push services (Google, Apple, Mozilla, Microsoft) | Delivering notifications to your device | Your device's push address and a short, encrypted notification |
| OpenFreeMap | Map images | Your IP address and the map area requested (your device asks directly) |
Others who receive requests from your device: when you open event pages, images may load directly from the organiser's or venue's website, which then sees your IP address. Links to tickets, directions (Google Maps) and sources open the other site under its own privacy policy. A film trailer loads from YouTube (privacy-enhanced mode) only when you tap play; YouTube then sees your IP address. The landing page loads fonts from Google Fonts.
No user data: to place venues on the map we look up venue addresses with Photon (komoot), based on OpenStreetMap. Only venue addresses are sent, never anything about you.
We don't sell your data or share it for advertising. We disclose data to authorities only when the law requires it, or to protect someone from serious harm.
Data sent outside the EU
Some of these providers are US companies or may process data outside the EU. Where that happens, the transfer relies on the safeguards the GDPR allows, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. You can ask us about them.
How long we keep data
| Data | How long |
|---|---|
| Account, profile, interests, preferences, follows | Until you delete your account |
| Sign-in session | 30 days, or until you sign out |
| SMS code | Valid for 10 minutes |
| Plan and Meet up chat messages | Deleted 24 hours after the event or meetup ends, or 24 hours after a plan is cancelled |
| Group posts and group chat | Until you or the group owner delete them, or the group or your account is deleted |
| Go together availability | Ends automatically at the end of the time you chose (tonight, now, this week, until the event) |
| Bumps, invitations, Meet up records, friendships, reviews, events you added | Until you delete them or your account |
| Notifications in the app | Until you delete your account |
| Push delivery queues | Message pushes: until they expire. Plan-update pushes: 30 days after they expire |
| Reports and blocks | Until you unblock, or until the account of the reporter or the reported person is deleted |
| Beta usage research events | 90 days |
| Contact form messages | 90 days |
| Photo upload record (upload status, without the photo itself) | Until you delete your account |
| Photos | Replaced profile photos are deleted at once. When you delete your account, your photos are removed by a scheduled job shortly after |
When you delete your account, we delete, in one step: your account and sign-in records, profile and photos, interests and settings, saves and reminders, devices, notifications, the Bumps and invitations you sent or received (including their chats, for both people), your friendships, Meet up plans, groups you own (with their posts and chats, for all members), the posts, comments and messages you wrote in other groups, your reviews, events you added, your feedback, your reports and blocks, and reports about you. Signing in again later creates a new, empty account.
Your rights
You have the right to:
- Access your data and get a copy;
- Correct it. You can edit most things in the app: profile, interests, settings and reviews;
- Delete it. You → Edit profile → Delete account deletes your account and data permanently (see "How long we keep data"). You can also delete single reviews, posts and events;
- Restrict how we use it in certain cases;
- Port it: get it in a machine-readable format;
- Object to uses based on legitimate interests;
- Withdraw consent at any time: location and notifications in your device settings, beta research in Early Access.
How: there is no in-app data download yet. To get a copy of your data, or to use any other right, write to us through You → Send feedback, signed in with the account it's about. If you use phone sign-in and can't sign in, include your number so we can find your account. We may ask you to prove the account is yours. We reply within one month; for complex requests we may need up to two more months and will tell you why.
Complaints: you can complain to a data protection authority, in particular in the country where you live or work.
- Bulgaria: Commission for Personal Data Protection (Комисия за защита на личните данни), www.cpdp.bg.
- Greece: Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), www.dpa.gr.
We'd appreciate the chance to sort it out with you first.
Children
raund is not meant for children, and we don't knowingly collect data from them. Dating in Go together is only for people 18 and over. If you think a child is using raund, tell us through You → Send feedback, and we will remove the account and its data.
Cookies and storage on your device
raund does not use advertising or tracking cookies, and has no third-party analytics.
| Name | Type | What it does | How long |
|---|---|---|---|
| around_session | Cookie (HttpOnly, secure) | Keeps you signed in | 30 days |
| around:saved | Local storage | Your saved events, so they work offline and before sign-in | Until cleared |
| around:market, around:locale, around-appearance, around-map-theme | Local storage | Your city, language and theme | Until cleared |
| around:catalogue:‹city›:v3 | Local storage | Cached event list, for speed and offline use | Refreshed; ignored after 72 hours |
| around:quick-event-types:v1, around:lucky-recent:‹city›, around:interests-intro:v1, around:onboarding-carry:v1 | Local storage | Your shortcuts, recent "surprise me" picks, and onboarding choices before sign-in | Until cleared |
| around:interest-device | Local storage | A random ID used to count saves while you're signed out | Until cleared |
| around:google-token, around:google-calendar-token (and their expiry) | Session storage | Short-lived Google tokens for sign-in and, if you choose it, Calendar | Until you close the tab or the token expires |
| around:pending-group-invite, feedback draft | Session storage | Remembers a group invite link and an unsent feedback message | Until you close the tab |
| App cache (service worker) | Browser cache | App icons and files, so raund opens quickly and can be installed | Until the next app update |
These are needed for the app to work, or remember choices you made, so we don't ask for consent for them. You can clear them in your browser settings at any time. You'll be signed out, and saved events that aren't synced to your account will be lost.
Changes to this policy
The date at the top shows the latest version. If we make important changes, we tell you in the app before they take effect.
Venues, organisers and listings
How listings get onto raund
raund lists cultural venues and their public programmes: films, concerts, plays, exhibitions and more. Most listings are collected from venues' and ticket sellers' public websites and from public calendars, with a link back to the source. We show only the details we need (title, time, place, price, link) and, where the source allows it, a description and image. When a site's terms ask not to be copied, we show only those facts and a link, never its text or photos. Our robot (AroundBot) reads slowly and follows each site's robots.txt. Some events are hosted by raund users and show the user's name. Others are added by users from a poster or link; those show who added them and link to the original source.
We don't sell tickets and we're not the organiser. Tickets and event changes are up to the organiser.
Correct or remove a listing
- Anyone can report a listing from its ⋯ menu to flag a wrong date, venue, duplicate, broken link, a cancellation or wrong information.
- If you represent a venue or organiser, write to us through You → Send feedback or at hello@raund.app to correct details, add missing events, ask us to stop importing your programme, or remove a listing. We act on these within 48 hours.
- We may ask you to confirm that you represent the venue before we change or remove anything, to protect venues from false requests.
Personal data in listings
If a listing includes personal data, such as a named contact person, a performer's personal details, or the name of a user who added the event, that person can ask us to correct or remove it through You → Send feedback or at hello@raund.app. We reply within one month. Users can delete events they added themselves at any time.