Privacy Policy

Last updated 6 October 2026.

Dormant is a 3D map of what's happening around campus, starting with the University of Kansas. It is operated by Wituk Works LLC, a Kansas company. This page says what we collect, why, and who sees it. If something here changes, we'll update this page and the date at the top.

Who can use this

Anyone in Lawrence with an email address. For now, accounts are by invitation: you request access on dormant-app.com and we approve you. You must be at least 13 to make an account. Some events (bar deals, 21+ nights) are only shown to people who have told us they're old enough.

Signing in

You sign in with Google, with Apple, or with your email and a link we send you. There's no password. We don't ask for or store one. With Apple you can share your email or hide it; if you hide it, Apple gives us a private relay address instead. Invitations go by email address, so if you hide yours, write to hello@dormant-app.com and we'll add the relay address to your invitation.

What's on your profile

Your display name, major, and age; whether you live on or off campus (and which hall, or which Lawrence street address, if you say); the interests you pick; and an optional profile photo, background photo and bio (up to 200 characters, which anyone on Dormant can see on your profile). Name, major and age are required; the rest isn't. A home address is only ever used to show you what's near home. It is never shown to other people, and more than one person may name the same address. You can set it, change it or remove it in Settings at any time. The car you pick in the Garage (and any other look you unlock with coins) is part of your profile too: it is how you are drawn on the map.

Your birthday is used to work out your age and is never shown to anyone. A photo you add to an event is seen by whoever can see that event (only the people invited, for a private one). We check event photos and wording, and your bio, with an automated safety check run by OpenAI before they are shown; it is not used to train their models.

When you sign up we also ask whether you're a KU student or a Lawrence local, and two optional questions: how you heard about Dormant, and your graduation year. Nobody else sees your answers; we only look at them as totals, to learn where Dormant is spreading.

We ask your age because some events have an age line. We don't ask for or store your date of birth, and we don't verify your age. That's on you, same as it would be at the door.

What we track about your use of Dormant

Events you mark Going or Interested. Friends can see this; strangers can't.
Your friend list. Friendship is mutual: you don't show up on someone's list unless they've also added you.
Your location. You choose one of three settings, at sign-up and any time after in Settings. Off: we never read your location, and the app stops watching for it. Ghost mode: you see yourself on the map and nobody else does; your position stays on your phone. We use it there to show your spot on the map, walking times, and to confirm you showed up, and nothing about where you are is sent to us, with the two exceptions below (parking and bus stops), which you trigger yourself. Share with friends: people on your friend list can see where you are on the map, your drives, and where you parked, drawn as your profile picture and the car you chose. If you also allow location "Always" in your iPhone's Settings, this keeps working while the app is closed or your phone is locked, so the friends you share with keep seeing where you are. With "While Using", it only updates while Dormant is open. Either way, when your phone stops updating, your last spot stays on their map for up to 24 hours, with how long ago it was ("Seen 25 minutes ago"), and then disappears. Ghost mode, Off, or stopping sharing with someone removes it from their map right away. We keep your current position, not a trail of where you've been. Nobody outside your friend list ever sees your location under any setting. Under 18, "Share with friends" is not available: you can still use your location for yourself, and nobody else ever sees it.
Parking. When you press "I've Parked", we save the lot, the spot, the time, and later the time you drove off. This is saved in Ghost mode too, because parking is how everyone helps everyone: those spots add up to an anonymous count of which lots are full and when, so the map can tell you where there's room. Other members may see that a car is parked there, with no name, picture or anything else attached; nobody can tell whose it is. Nothing about your location is saved until you press the button, and only you can read your own parking list.
Showing up. When an event you marked Going is on, your phone checks, in the moment, whether it's within about 10 metres of the venue. If it is, it sends that position once to our server, which checks it against the venue's location and then discards it. We save one thing: "arrived" and the time. The same for staying five minutes. No coordinates are saved anywhere, not even on the phone.
Rank (the weekly leaderboard). Missions earn XP. This week's XP, your name and your profile picture show on Rank to your friends and to other members at your campus. Your profile is public on Dormant: anyone signed in can find it, and it shows on the board. Ghost mode hides only your location on the map, not your place on the board. If you're under 18 you show to your friends only, never on the campus board. The board starts over every Monday, and the top 25 on the campus board win coins.
Bus stops. If you stand at a bus stop for 30 seconds, the app notes which stop and which day, so it can offer you the bus-stop screen. Only you can see that note, and it's deleted after a day. That screen may invite you to turn on "Share with friends" and play a small game. Nothing turns on unless you tap it.
Riding the bus. Riders help draw the buses. If you choose to, at a bus stop, pick the bus you're boarding and while you ride your phone's location places that bus on the map for everyone. What everyone sees is the bus, never you: no name, no photo, nothing that points back to your account leaves our server. It stops when you tap "About to hop off", when you get off, or after 45 minutes. The ride itself (which bus, when) is deleted after a day. Your location setting is not changed by riding.
Invite links. Every student gets one. We record who invited whom, and we count how many different phones or computers have opened your link. That's what unlocks the ability to add your own events. If you're the one clicking someone else's invite link, that's recorded too, even before you sign in.
Events you open. We note which events you open, and the day and hour you first opened each one that day. It counts toward missions, and an event's organizer sees how many students opened it and at what times. Organizers only ever see totals, never who.
Which screens you open, and how long you stay. Tied to your account. Only admins see it, and we use it to see what works. On the sign-up page we count visits with no name and no cookie: a code made fresh each day from your connection, which cannot be turned back into you. Vercel also counts page views on the website, without names or cookies.
Crash and speed reports. When the app hits an error, and once a visit to measure how fast it loads, it sends us a short report: what went wrong, which screen, how long things took, and your type of device. It's linked to your account if you're signed in. Only admins see it, and it's deleted after 30 days.
Searches that find nothing. When a search on the map comes back empty, we keep the words you typed, with no name, account or device attached, so we know which places to add.
"How was it?" After an event you marked Going, the app may ask how it was: Good, Not for me, or Didn't go. Organizers and admins only ever see totals, never your answer.
Flyers you scan. If you photograph a flyer, we send that photo to an AI service to pull out the event details: what, where, when. The photo itself is kept privately for an admin to check before anything goes on the public map. We don't publish the photo, only the event details and an icon we generate for the listing.

Who sees what

Other students see your display name, photo, and the events you're going to if you're friends with them. Nobody sees your email, your exact location, or your invite-link activity except you and Dormant's admins. Admins see the full picture (every account, who invited whom, and any flyer photo awaiting review) because that's what running the invite system and checking flyers requires.

Where events come from

Most events on the map are pulled automatically from the KU Events Calendar, KU Engage, and Ticketmaster. They are public listings, not created by us. We link back to the original listing so you can check details with whoever's actually running the event. Admins can also add a source by hand; we don't republish anyone's photos or writing wholesale, just the facts of when and where something is happening.

Email

We email you when you ask for a sign-in link, when you sign up on the interest form (to say we got it), when we approve you, when you unlock a car or a house build with coins and when your house build is done, and once when Dormant launches if you signed up with an email. If you buy coins on the website, Stripe sends you its receipt. If you support Dormant, Stripe sends you its receipt and we may send you one personal thank-you note. For now, that's it. Later we plan to email you if an event you're going to changes time, moves, or gets cancelled, and this page will say so before we start. No marketing, no digests.

Text messages

If you give us your phone number on the Early Access form and tick "Text me my invite and launch news", we text you from Dormant's number: your invite and the news when Dormant launches. How often varies, and it's a few texts, not a feed. Message and data rates may apply. Reply STOP at any time to stop, or HELP for help. Once you reply STOP, we don't text that number again unless you text START.

We keep your number, that you agreed, when you agreed, and the exact words you agreed to, and whether you replied STOP. We never sell or share your phone number or your agreement to receive texts with anyone for their own marketing. Twilio sends the texts for us and uses your number only to deliver them.

Purchases

Some things on the map are for sale (a different car for your spot on the map, for example) and they are paid for with Campus Coins, which you buy with real money. On the website, payment goes through Stripe; they see your card, we don't. In the iPhone app, you buy coins through Apple's in-app purchase: Apple handles the payment and sends the receipt, and we receive a record of which coin pack was bought and Apple's transaction number, never your card. We store your coin balance and its history (every coin bought and spent, when, and the Stripe or Apple receipt number). Coins bought on the website and in the app are one balance on your account, and what you've bought stays with it.

Supporting Dormant

If you support Dormant on the website, payment goes through Stripe; they see your card, we don't. We keep the amount, the date, the name you typed for your supporter car, whether you asked to keep that name private, and the email Stripe collected, so we can thank you. A private name is never shown publicly; your car shows "Supporter" instead. We use that email only for a thank-you, never for marketing.

Pro and the Business plan

Organizations that pay for Pro or the Business plan pay on the website through Stripe; they see the card, we don't. We keep your Stripe customer number, which plan you're on, whether it's paid, and when it renews or ends, so the right features show on your events. Stripe emails your receipts and renewal reminders.

On the website

The website (dormant-app.com) has a few forms. Each keeps only what it asks for, and only Dormant's admins see it:

Early Access: your name, your email or phone number (or both), whether you agreed to texts, and whether you want to test Dormant or only hear when it launches.
Bring Dormant to your campus: your name, school, role and email.
Student at another school?: the school you type. Nothing about you.
Organizations: the business or organization name, the place you pick (and whether public map data shows it as a business or a home, so we can check it), contact email and an optional phone, the details you'd like on your building, and up to 3 photos of your storefront (only Dormant's admins see them; we model your place from them). The card you save goes to Stripe, not to us; we keep the Stripe customer number and whether a card is saved, and charge it only once we approve your build.
Ambassador applications: your name, age, personal and KU email, major, your TikTok account and follower count, and your answers to the application's questions.

Some forms keep what you've typed on your own device until you send it, so nothing is lost if the page reloads; none of it reaches us until you press send. To have what you sent deleted, email hello@dormant-app.com.

Dormant's website uses no ad cookies. When you pay, Stripe sets its own cookies to check for fraud.

Who else touches this data

Running Dormant means a few outside services see parts of it: Supabase hosts the database and handles sign-in, Google and Apple handle their own sign-in, Apple handles in-app purchases, Resend delivers our email, Twilio delivers our text messages, Mapbox draws the map (and, when you ask for directions, gets your position to draw the route; nobody keeps it), Stripe takes payments, OpenAI screens text you write for things like harassment or threats before it's stored, and an AI provider reads flyer photos to pull out event details. None of them get to use your data for anything but running Dormant.

Deleting your account

Settings → Account → Delete account. It's immediate and permanent: your profile, your friend list, what you've marked Going, your location setting, and your purchases are all removed. It cannot be undone, which is why we ask twice. Purchases are not refunded on deletion. Payment records stay with Stripe or Apple as the law requires; they hold no link back to a Dormant account once it's gone. You can also email hello@dormant-app.com and we'll do it for you.

Your choices

Ask us to see what we have on you or correct it, change your location setting any time in Settings, or delete your account as above.

Changes to this policy

This describes what Dormant actually does, not what a bigger company's policy usually says. If we build something that changes it, the policy changes first.

Questions: hello@dormant-app.com