The site is in soft launch and is on-going maintenance.

Privacy Policy

Akatora

1. Who We Are

Akatora is a community web application designed to help young adults across Europe connect through shared interests and real-world activities. It is operated by Akato Studio, an independent project based in Slovenia, EU.

2. Data We Collect

We collect the following categories of personal data:

Account and identity data:

  • Email address (used for authentication and account recovery — never displayed publicly)
  • Username and display name
  • Profile photo (avatar) and banner image
  • Bio, gender, spirit animal (optional self-expression fields)
  • How you heard about Akatora (referral source)

 

Location data:

  • City or district-level location (e.g. Ljubljana, Bežigrad) — not a precise address
  • Approximate coordinates derived from your city input, used to suggest nearby groups, events, and activities to you
  • You may set your location to private, which hides it from your public profile. Your city-level coordinates are still used internally to power location-based features (nearby suggestions) but are not shown to other users.

 

Preferences and activity:

  • Languages spoken and proficiency levels
  • Interests and hobbies
  • Notification preferences

 

User-generated content:

  • Posts, comments, reactions, and poll votes
  • Direct messages and group chat messages
  • Group join requests including any free-text answers to join questions
  • Event RSVPs, guest counts, and venue suggestions
  • Game session records including scores and outcomes

 

Social data:

  • Friend requests and friendship connections
  • Group memberships and roles

 

OAuth login data (if you sign in with Google or Discord):

  • Your email address and basic profile information provided by the OAuth provider
  • We do not store your OAuth passwords — authentication is handled entirely by the provider

 

Implicit and metadata:

  • Timestamps on all activity (when content was created, updated, or joined)
  • Storage file paths that include your user ID
  • Supabase Auth may log your IP address at the platform level — this is outside our direct control. See Supabase’s privacy policy at supabase.com/privacy.

3. How We Use Your Data

We use your personal data to:

  • Create and manage your account
  • Display your profile to other authenticated users
  • Suggest nearby groups, events, and activities based on your city-level location
  • Enable community features: posts, comments, messaging, group chats, RSVPs
  • Match you with relevant content based on your interests and languages
  • Send in-app notifications about activity relevant to you
  • Award badges and track community participation
  • Moderate content and enforce community rules
  • Maintain the security and integrity of the platform

 

Legal basis for processing (GDPR Article 6):

  • Contract performance — processing necessary to provide the service you signed up for
  • Legitimate interests — platform security, abuse prevention, and community moderation
  • Consent — optional profile fields such as gender, spirit animal, and referral source

4. Data Shared With Other Users

Akatora is a social platform. The following data is visible to other authenticated users:

  • Your username, display name, avatar, banner, bio, languages, interests, and badges
  • Your city/location (unless you set it to private)
  • Your posts, comments, reactions, and group memberships
  • Your participation in open groups, events, and game sessions

 

The following data is visible only to group members:

  • Group chat messages, drop and anchor RSVPs, stream content

 

The following data is private (only you and admins can see it):

  • Direct messages (visible only to sender and recipient)
  • Your email address
  • Your precise coordinates
  • Notification history

 

Platform administrators can access all profile data, group memberships, join request reasons, and moderation records for the purpose of operating and moderating the platform.

5. Third-Party Services

We use the following third-party services to operate Akatora:

  • Supabase (supabase.com) — database, authentication, file storage, and real-time features. Your data is stored on Supabase infrastructure. Supabase is GDPR compliant.
  • Nominatim / OpenStreetMap (nominatim.openstreetmap.org) — location search for finding your city. Your search query and browser language header are sent to this service. No personal identity is transmitted.
  • Self-hosted map tile server (tiles.akatostudio.com) — serves map tiles for Slovenia. Only tile coordinates are transmitted, no personal data.
  • Google OAuth (if used) — your Google email and basic profile are transmitted to authenticate you. Governed by Google’s privacy policy.
  • Discord OAuth (if used) — your Discord email and identity are transmitted to authenticate you. Governed by Discord’s privacy policy.
  • GitHub (github.com) — used to host community icons and group assets. No user personal data is transmitted.

 

We do not use any advertising networks, third-party analytics, or tracking services.

6. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, your profile, posts, messages, and associated data will be removed from the platform within a reasonable timeframe.


Some data may be retained for a short period after deletion for moderation and abuse-prevention purposes (e.g. ban records).

7. Your Rights Under GDPR

As a user in the EU/EEA, you have the following rights:

  • Right of access — you can request a copy of all personal data we hold about you
  • Right to rectification — you can correct inaccurate data at any time through your profile settings
  • Right to erasure — you can request deletion of your account and associated data
  • Right to restriction — you can request that we limit how we process your data
  • Right to data portability — you can request your data in a structured, machine-readable format
  • Right to object — you can object to processing based on legitimate interests
  • Right to withdraw consent — for optional data fields, you can update or remove your data at any time

 

To exercise any of these rights, contact us at: akatoxstudio@gmail.com. We will respond within 30 days.

8. Cookies

Please refer to our separate Cookie Notice for full details on how we use cookies.

9. Children's Privacy

Akatora is intended for users aged 18 and older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, please contact us and we will remove the account promptly.

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted data transmission (HTTPS), row-level security on our database, and restricted access to sensitive data. No system is completely secure — if you have security concerns, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy as the platform evolves. We will notify users of significant changes via in-app notification. The date at the top of this page always reflects the most recent version.

12. Complaints

If you believe your data has been handled incorrectly, you have the right to lodge a complaint with the Slovenian data protection authority: Informacijski pooblaščenec (IP RS), Dunajska cesta 22, 1000 Ljubljana, Slovenia — www.ip-rs.si

13. Contact

For questions, contact us at: akatoxstudio@gmail.com

This Privacy Policy explains how Akatora (operated by Akato Studio, an independent project) collects, uses, stores, and protects your personal data when you use the Akatora web application at https://akatora.akatostudio.com. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR).

Last updated: 26 June 2026