Privacy Policy

Last Updated: October 2, 2026

Effective Date: October 2, 2026

Welcome to Diasfrica (“Diasfrica”, “we”, “us”, or “our”). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you use the Diasfrica website, mobile application, and related services (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

We may collect information that you provide to us, including:

• Account Information: name, email address, phone number (optional), and profile photo.
• Authentication: Google Sign-In or Apple Sign-In identifiers, and, if you turn it on, the public part of a passkey (Face ID, Touch ID, or similar) registered on your device.
• Event Hosting: event title, description, images and flyers, venue, date, time, capacity, and visibility settings.
• RSVPs: your name, email address, and phone number when you RSVP, and your attendance status. These are shared with the host of the event.
• Flyer Submissions: the flyer image you send us and the name and phone number you give so that we can follow up.
• Funeral and Memorial Announcements: the name of the person who has died, dates, service details, a photo, a message, and a family contact name and phone number. Announcements are public.
• Communications: support requests, reports, feedback, and, if you subscribe, your email address for our newsletter.

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Device Information: device type, operating system, browser, and app version.
• Usage Data: pages or screens viewed, features used, and actions taken, using our own first-party analytics (see Section 10).
• Approximate Location: city or region, only if you grant permission, to show events near you.
• Log Data: IP address, timestamps, and error logs for security and abuse prevention.
• Crash Reports: for the mobile app, crash and performance diagnostics.

1.3 Information from Third Parties

We may receive information from third-party services, including:

• Google Sign-In: name, email address, profile photo.
• Apple Sign-In: name and email address (where shared, including a private relay address if you choose to hide your email).
• Mapping Services: location coordinates for event mapping and directions.

2. How We Use Your Information

We use your information to:

• Create and manage user accounts and sign you in securely.
• Enable event discovery, free RSVPs, event hosting, and flyer and announcement publishing.
• Share your RSVP details with the host of the event you RSVP to.
• Review and moderate events, flyers, announcements, reports, and accounts.
• Respond to support requests and send important service notices.
• Improve platform performance, features, and user experience.
• Detect, prevent, and investigate fraud or abuse.
• Comply with legal obligations and enforce our Terms of Service.

3. Legal Bases for Processing (Where Applicable)

Where required by law (including GDPR), we process personal data based on:

• Contractual necessity (to provide the Service).
• Legitimate interests (security, abuse prevention, analytics).
• Legal obligations (regulatory compliance).
• User consent (newsletter, optional permissions such as location, and non-essential cookies).

4. Data Retention

We retain personal data only as long as necessary:

• Account Data: retained for the life of the account and up to 30 days after deletion. Accounts that remain inactive for 90 days may be deleted automatically after warning notifications are sent at approximately 60 days, 80 days, and 89 days of inactivity.
• Event Data: events, flyers, and announcements are retained as part of the platform’s public record until they are removed by you, by us, or at the request of the family for announcements.
• RSVP Data: retained with the event record and with your account until you delete your account.
• Support Requests and Reports: retained as needed to resolve them and to keep a record of moderation decisions.
• Usage Data: retained according to the platform retention settings for first-party analytics.
• Crash Logs: retained for up to 90 days.

5. Data Sharing and Disclosure

We share information only as necessary with trusted third parties, including:

• Hosts: the name, email address, and phone number you give when you RSVP are visible to the host of that event.
• The public: events, flyers, and funeral announcements you publish, including the details you choose to include, are public.
• Cloud Providers: Google Cloud and Firebase (hosting, database, file storage, and authentication) and Amazon Web Services (domain name service).
• Mapping Services: to display event locations and directions.
• Legal Authorities: where required by law or to protect legal rights.

We do not sell personal data.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. We take appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy.

7. Your Privacy Rights

Depending on your location, you may have the right to:

• Access: request a copy of the data we hold about you.
• Correction: update inaccurate or incomplete data.
• Deletion: request deletion of your account and personal data. You can also delete your account from your account settings.
• Restriction: limit how we process your data.
• Portability: request your data in a machine-readable format.
• Opt-Out: unsubscribe from the newsletter at any time.

Requests can be made via the contact information below. Families can ask us to remove a funeral announcement at any time.

8. Data Security

We implement appropriate technical and organizational measures, including:

• Encryption in transit (TLS) and at rest.
• Role-based access controls and audit logging for our team.
• Secure cloud infrastructure and monitoring.
• Abuse and fraud detection.

Despite our efforts, no system is 100% secure.

9. Children’s Privacy

Diasfrica is not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal data from children. If we become aware of such data, we will delete it promptly.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you signed in and remember your preferences.
• Measure usage and improve performance using first-party analytics, if you allow analytics cookies.
• Prevent fraud and abuse.

You can choose which cookies to allow in the cookie banner, change your choice at any time using “Manage cookies” in the footer, and manage cookies through your browser or device settings. See our Cookie Policy for details.

11. Payments

Diasfrica is free to use and does not currently process payments or store payment card or bank details. If we add paid features in the future, we will update this Privacy Policy before they apply.

12. Contact Us

If you have questions or requests regarding this Privacy Policy:

Email: privacy@diasfrica.com

Mailing Address: Washington, DC