PRIVACY POLICY

PERSONAL INFORMATION:

• Account information (name, email address, username)
• Profile information (profile picture, bio, preferences)
• Contact information for support requests
• Social media account information (if you choose to connect via Google Sign-In)

USAGE DATA:

• Events you view, save, or attend
• Search queries and filters used
• App interactions and navigation patterns
• Time spent on different sections
• Device crash logs and performance data for app improvement

DEVICE INFORMATION:

• Device type, model, and operating system version
• App version and build information
• IP address for general location determination
• Network information and connection type

LOCATION DATA (WITH YOUR PERMISSION):

• Precise location (GPS coordinates) only when you explicitly enable location services
• Approximate location derived from IP address for general event recommendations
• Location data is used solely for showing nearby events and venues
• You can disable location access at any time in device settings

CAMERA AND PHOTOS (WITH YOUR PERMISSION):

• Photos you choose to upload for your profile picture
• Camera access only when you choose to take a new profile photo
• We never access your photo library without your explicit permission

SERVICE PROVISION:

• Create and manage your account
• Provide personalized event recommendations based on your preferences
• Enable you to discover, save, and attend events
• Process RSVPs and event attendance tracking
• Facilitate social features and connections within the app

COMMUNICATION:

• Send push notifications about events and updates (with your permission)
• Respond to your support requests and inquiries
• Send important service announcements and security updates
• Provide customer support and technical assistance

APP IMPROVEMENT AND SECURITY:

• Analyze app usage patterns to improve features and user experience
• Monitor app performance and fix bugs
• Prevent fraud, abuse, and unauthorized access
• Generate anonymized analytics insights for service improvement

LEGAL COMPLIANCE:

• Comply with applicable legal obligations
• Protect our rights, property, and safety, and that of our users
• Enforce our terms of service
• Resolve disputes and respond to legal claims

SERVICE PROVIDERS (WITH EQUIVALENT PROTECTION):

• Cloud hosting providers (AWS) for secure data storage
• Authentication services (Supabase, Google Sign-In, Apple Sign-In)
• Push notification services (Apple Push Notification Service)
• Customer support platforms for handling your inquiries

All third-party service providers are contractually required to provide the same level of data protection as outlined in this policy and are prohibited from using your data for any other purpose.

EVENT ORGANIZERS (LIMITED SCOPE):

• Basic attendance information only when you RSVP to events
• Contact information only if you explicitly request event-related communication
• No personal data is shared without your explicit consent

LEGAL REQUIREMENTS:

• When required by law, regulation, court order, or government request
• To protect our rights, property, or safety, or that of our users or the public
• To prevent, investigate, or respond to fraud, illegal activities, or security threats
• In connection with legal proceedings or investigations

BUSINESS TRANSFERS:

• In connection with a merger, acquisition, or sale of assets (with user notification)
• During bankruptcy or similar proceedings (with continued data protection)

WITH YOUR EXPLICIT CONSENT:

• When you explicitly agree to share information for specific purposes
• For features you've specifically requested that require data sharing

ANONYMOUS DATA:

• We may share aggregated, anonymized data that cannot identify you personally for analytics and research purposes

AUTHENTICATION SERVICES:

• Apple Sign-In (Apple Inc.) - for secure authentication
• Google Sign-In (Google LLC) - for authentication
• Supabase (Supabase Inc.) - for user session management

INFRASTRUCTURE SERVICES:

• Amazon Web Services (AWS) - for cloud hosting and data storage
• Map services for location features

SOCIAL MEDIA INTEGRATION (OPTIONAL):

• Instagram, Spotify, SoundCloud links (only if you choose to add them to your profile)
• No automatic data sharing occurs - links are provided by you voluntarily

TECHNICAL SAFEGUARDS:

• End-to-end encryption of data in transit using TLS 1.3
• Encryption of sensitive data at rest using AES-256
• Secure authentication using OAuth 2.0 and JWT tokens
• Regular security audits and vulnerability assessments
• Secure cloud infrastructure with reputable providers (AWS)

ACCESS CONTROLS:

• Multi-factor authentication for administrative access
• Role-based access controls limiting data access to authorized personnel only
• Regular access reviews and permission audits
• Employee training on data protection and security protocols

MONITORING AND RESPONSE:

• Continuous monitoring for unauthorized access attempts
• Automated threat detection and response systems
• Incident response procedures for potential data breaches
• Regular backup and disaster recovery procedures

LIMITATIONS:

While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security practices and promptly address any identified vulnerabilities.

BREACH NOTIFICATION:

In the unlikely event of a data breach, we will notify affected users and relevant authorities as required by applicable law, typically within 72 hours of discovery.

DATA SUBJECT RIGHTS:

• ACCESS: Request a copy of your personal data
• CORRECTION: Update or correct inaccurate information
• DELETION: Request deletion of your data ("right to be forgotten")
• PORTABILITY: Request your data in a portable format
• RESTRICTION: Limit how we process your data
• OBJECTION: Object to processing based on legitimate interests
• WITHDRAWAL: Withdraw consent for processing based on consent

SPECIFIC CONTROLS WITHIN THE APP:

• Location sharing: Enable/disable in device settings or app permissions
• Push notifications: Manage in app settings or device settings
• Profile information: Edit or delete in profile settings
• Account deletion: Available in app settings with complete data removal
• Data export: Request your data via email

CONSENT WITHDRAWAL:

• You can withdraw consent for location access, notifications, or other optional features at any time
• Withdrawing consent will not affect the lawfulness of processing before withdrawal
• Core app functionality does not require consent withdrawal

NO ACCOUNT REQUIRED FOR BASIC BROWSING:

• You can browse events and venues without creating an account
• Account creation is only required for saving favorites and RSVPs

ALTERNATIVE SOLUTIONS:

• If you decline location access, you can manually search for events by city or venue
• If you disable notifications, you can still check for updates manually in the app

AGE RESTRICTIONS:

• Our services are not intended for children under 18 years of age
• We do not knowingly collect personal information from children under 13
• Most nightlife events featured in our app have age restrictions (18+ or 21+)

PARENTAL NOTICE:

• If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at niteowlza@gmail.com
• We will promptly delete any such information upon verification

COMPLIANCE:

• We comply with the Children's Online Privacy Protection Act (COPPA)
• We comply with GDPR requirements for child data protection
• We do not use third-party analytics or advertising that could target children

LOCATION DATA USAGE:

• Location services are used solely to show nearby events and venues
• We only access your location when you explicitly grant permission
• Location data is never used for advertising, marketing, or tracking purposes
• We do not build location profiles or track your movements

PERMISSION AND CONTROL:

• You will be asked for permission before any location access
• You can enable or disable location access at any time in device settings
• The app provides clear explanations of why location access is requested
• Alternative manual location entry is always available

DATA RETENTION:

• Precise location data is not stored permanently
• Only your chosen location (city/area) is saved in your profile
• Location history is not maintained or tracked

COMPLIANCE:

• Location services comply with Apple's Human Interface Guidelines
• Clear consent is obtained before any location access
• Location data is never shared with third parties without explicit consent

ACCOUNT DELETION:

• You can delete your account at any time through the app settings
• Account deletion is permanent and cannot be undone
• All personal data associated with your account will be deleted within 30 days
• Some data may be retained for legal compliance purposes as required by law

DATA DELETION INCLUDES:

• Profile information (name, username, photo, bio)
• Account credentials and authentication data
• Saved events, favorites, and preferences
• Location data and search history
• Communication history with customer support

DATA PORTABILITY:

• You can request a copy of your data in a portable format
• Data export includes profile information, saved events, and preferences
• Exported data is provided in JSON format for easy import to other services
• Data export requests are processed within 30 days

RETENTION EXCEPTIONS:

• Anonymized analytics data (cannot be linked back to you)
• Legal compliance data as required by applicable laws
• Security logs for fraud prevention (personal identifiers removed)