Last updated: August 20, 2026
Caruso Ventures operates Tulagi, the mobile application for Boulder Roots Music Festival
(Android package com.carusoventures.rootsapp). This policy describes what the Tulagi app
collects, how it is used, and how to delete your account.
This policy covers the Tulagi mobile app only. The Boulder Roots Music Festival website has its own separate privacy policy.
You can browse the festival schedule, lineup, and venues without an account. If you create an account, we collect:
| Data | Why |
|---|---|
| Name and email address | Account creation and sign-in, via email and password, Google Sign In, or Apple Sign In |
| Phone number (optional) | Only if you choose to provide it. Shown to other festival participants only if you turn that on |
| Push notification token | Only if you allow notifications. Identifies your device so we can send festival updates |
| Saved schedule | The events you save are stored so your schedule follows you across devices |
| Wallet and redemption records | For festival participants with a Founder Wallet: balances, transactions, and merchandise redemptions |
| Badge and entry scans | When your credential is scanned at a venue or the merchandise table, we record that the scan happened |
| Crash and error reports | Diagnostic messages when something in the app fails. These do not include your account identifier |
If you allow location access, the venues map can show where you are relative to festival venues. Your location is used on your device to position the map and is not stored by us and never leaves your device except to the map provider that draws the map. Location is optional and every other part of the app works without it.
The app uses your camera only to scan QR codes for festival credentials and Founder Wallet redemptions. We record the code that was scanned. We do not store or transmit camera images or video.
If you are listed in the Founders Directory, other signed-in festival participants can see your name, title, organization, and photo. Your phone number and email are shown only if you have chosen to share them. You can opt out of the directory entirely, and we honor that opt-out.
We do not use your data for advertising, and we do not sell, trade, or rent your personal information.
These providers process data on our behalf and have their own privacy policies.
All connections between the app and our servers are encrypted in transit using HTTPS. Sign-in credentials are held in your device's secure storage. Access to festival records is restricted per account.
To request deletion of your Tulagi account and associated data:
You do not need to give a reason, and deleting your app account does not cancel or refund any festival ticket you have purchased.
What is deleted: your account and sign-in credentials, your name, email address, phone number, profile photo, saved schedule, push notification tokens, and your listing in the Founders Directory. These are removed within 30 days of your request.
What we keep, and for how long:
| Data | Retention | Why |
|---|---|---|
| Wallet transactions and merchandise redemption records | Up to 7 years | Required for accounting and tax records. Retained without your name or contact details wherever possible |
| Badge and entry scan records | Up to 12 months | Festival attendance and security records, then deleted |
| Crash and error reports | Up to 90 days | These contain no account identifier and cannot be linked back to you |
If you want some of your data removed without deleting your account, email the address above and tell us what you would like removed.
Tulagi is not intended for children under 13, and we do not knowingly collect personal information from children under 13.
We may update this policy. Changes are posted on this page with a new revision date.
Caruso Ventures
Email: musicfest@carusoventures.com