Privacy

Last updated July 27, 2026 · AGENSUM, LLC · covers the RaveGang Android app and this website

The short version: your position never leaves your phone except as an encrypted signal addressed to your own gang. Two other things can leave it, both optional and both started by you. They are named in full below rather than summarized away. There is no account, no server holding your data, no analytics SDK, no advertising ID, no tracking.

The two things that can leave your phone

Neither happens unless you do it on purpose.

1. The venue map, if you ask for it

Before an event you can tick a box to download an offline street map of the venue. When you do, your phone sends the bounding box of the area you chose over HTTPS to overpass-api.de (or its public mirror overpass.private.coffee when the first is overloaded), the public Overpass API for OpenStreetMap data, and gets street geometry back.

• What is sent is a rectangle around a venue. It is not your position, and it is not sent while you are at the event.
• It goes to Overpass, not to us. We never see it and store nothing about it. Their handling is governed by the OpenStreetMap Foundation privacy policy.
• Skip the box and the app never contacts the internet at all.

In Google Play's Data safety vocabulary this is approximate location, shared with a third party, optional, for app functionality, and that is how it is declared. A rectangle around a venue is close enough to a place that calling it anything smaller would be shading the truth.

2. A session report, if you send one

At the end of a rave the app offers a MAKE THE APP BETTER button. It opens your own mail app with a message already written, addressed to hello@agensum.com. Nothing is transmitted until you read it and press send, and you can edit or delete any part of it first.

The pre-filled message has a space for what you want to tell us, then: how long the rave lasted, how many people were in the gang, counters for frames received, relayed, sent and echoed back, counts of failed message authentications, failed parses and slot collisions, the app version, your phone's manufacturer and model, and your Android version. Tick the extra box and it also attaches a radio log, which is those same counters over time. There is no position data in any of it, and no identifier for you or your phone beyond the model name.

In Data safety terms: app info and performance — diagnostics, collected, not shared, optional.

What never leaves your phone

• Your position. It goes out only over Bluetooth, sealed with a key made on your phone, addressed to your own gang. Other phones running RaveGang may relay that traffic onward; they cannot read it, cannot tell who sent it, and join nothing by carrying it. We do not hold the key and never see any of it. Setting yourself to SOLO stops your position going out at all while you still show as present.
• The key itself. Generated on your phone, never uploaded. The only copy that leaves is the invite you hand your friends.
• Names you type for people in your gang. They stay on your phone and are never transmitted. Colors are derived from a number, so every phone works out the same color for the same person without anyone sending it.
• Camera frames. The camera reads an invite QR code. Frames are decoded in memory, never stored, never saved to your gallery, never transmitted.
• Your contacts. Never read. There is no phone number to look up; invites travel as a QR code or a string you share yourself.

What the app does not have

No accounts and no sign-in. No advertising ID, no install ID, no device identifier of any kind. No analytics SDK, no crash reporting service, no third-party library phoning home. No ads. Nothing is sold or shared for advertising, and there is no profile of you anywhere to sell.

A rave expires on its own, and ending it early deletes it from every phone in it.

Permissions, and why each one exists

• Bluetooth. The entire product. Phones find each other by advertising and scanning.
• Location. Two reasons, and Android forces the first: it will not show any app the results of a Bluetooth scan without location permission, so the app cannot see your gang without it. Separately, a GPS fix is what turns "somebody is near" into a distance and a direction. Your location is not uploaded anywhere.
• Camera. Reading the invite QR code, and only that.
• Notifications. The ongoing notification for the service that keeps the radio running, and alerts when somebody calls the gang.
• Battery optimization exemption. Optional, and explained before it is asked. Declined, the app still runs; Android will suspend the radio when the screen is off, which is most of a night out.

The app does not request background location. All location access happens while a foreground service you can see in your notification shade is running, and you can stop it at any time.

This website

Static files served by Cloudflare. No analytics script, no tag manager, no advertising pixel, no cookie, nothing in your browser's storage. Because there is nothing to consent to, there is no consent banner.

• Server logs. Cloudflare processes your IP address, user agent and the URL you requested in order to serve the page and block attacks, acting as our processor on their standard retention. We do not build profiles from it and never join it to anything else.
• The iOS waitlist. If you submit your email address it is emailed to hello@agensum.com with the two-letter country code Cloudflare attaches to the request. It is not written to any database, because we do not run one. It sits in that inbox until we send the one message saying iOS has landed, and then it is deleted. Never sold, never shared, never used for anything else. Your IP address rate-limits that form and is not stored.
• The download. The Android build is served from this site, so downloading it is an ordinary web request and appears in the logs above. There is no install tracking, no referral ID, and no per-download identifier in the file.

Who it is for

RaveGang is for adults at nightlife events. It is not directed at children, we do not knowingly collect anything from anyone under 18, and it is published with an 18+ target audience.

Your rights

If you are in the UK, EU or a similar jurisdiction you have the right to access, correct or delete personal data we hold about you, to object to our processing of it, and to complain to your data protection authority. In practice the only things we can hold are a waitlist email address and a session report you chose to send. Write to hello@agensum.com and either will be deleted; you do not have to explain why. Everything else lives on your phone, where you can delete it by ending the rave or uninstalling.

Legal bases: consent for the waitlist and for a session report you send, both given by the act of sending. Legitimate interest for the server logs, in serving the site and keeping it up. The map request is performed on your instruction, to deliver a feature you asked for.

We do not transfer your personal data to anyone outside the services named on this page. AGENSUM, LLC is the data controller.

Changes

If this page changes, the date at the top changes with it. If a change ever means we start collecting something we do not collect today, it will be stated plainly at the top rather than folded into a paragraph.

Who we are

RaveGang is made by AGENSUM, LLC. Questions, complaints and deletion requests: hello@agensum.com.