Summary

The PDF above is the full and binding version. The summary below is for orientation only.

  • Who we are. Since 1993 BV, a Belgian limited company (VAT BE1009154643), registered office in Oostakker. Full address is in the PDF.
  • What we collect. Account data (email or phone for sign-in, display name, optional avatar and bio); location when you grant permission and use the Nearby tab (with ~110 m fuzzy precision for posts); social-graph (friends, follows, blocks, privacy settings); activity (hearts, going, watching, bookmarks); submitted events and flyer images; optional Spotify and SoundCloud connections; optional encrypted notes.
  • Where data lives. Supabase (EU, eu-west-1). No analytics SDK, no advertising SDK, no Firebase, no Sentry. Notes are AES-256-GCM encrypted on your device before upload, so we cannot read them.
  • Sub-processors. Supabase (EU), OpenAI (US, optional flyer OCR only), Spotify (EU, optional), SoundCloud (DE/US, optional public reads only), Apple App Store and Google Play (distribution).
  • Your rights. Access, rectification, erasure, portability, restriction, objection, withdraw consent, and complain to the Belgian Data Protection Authority. We respond within 30 days as required by Article 12 GDPR.
  • Children. Service is for people aged 18 and over.
  • Contact for data requests. Use the contact form; we route GDPR requests with priority.

The PDF version is the canonical document and contains the full data-processing tables, legal bases, retention periods, transfer mechanisms, and supervisory-authority contact details required by GDPR.