Privacy policy

Who we are

What's On is an events app and website for Auchterarder and the surrounding area, run by Seedcraft ("we"). We are the data controller for the information described here. Questions, requests and complaints go to hello@showmewhatson.live.

The short version

• You can browse, search and save without an account.
• No advertising, no third-party analytics, no cookies, and we never sell data.
• If you share your area, we keep it rounded to about a kilometre, never your exact spot.
• Hosts see numbers about their own events, not who you are. The one exception: if you get a free door pass, the host's door team see your first name when they check you in.
• You can delete your account from the app at any time.

Without an account

When you use the app or the website, it makes a random ID for that phone or browser. It isn't your name, email or phone number. It lets us count one person as one person. In the app it lasts until you delete the app; on the website it sits in your browser's storage until you clear it.

With that ID, we record how events are used:

• that an event was shown to you, opened, or how long it stayed on screen;
• that you saved it, skipped it, said you're going, or took it off your plans;
• that you tapped for tickets or directions, or shared it (including which app you shared it to, if your phone tells us);
• that you opened an event from one of our notifications.

Saves, boards and "I'm going" made without an account are kept on your phone, or in your browser, until you sign in. So are the interests and area you pick when you first open the app, which make your feed relevant; your area is rounded to about a kilometre on the phone too. When you sign in, they move into your account.

We don't record your IP address or browser details in these records. Our database provider's servers see them when your phone or browser connects, as any server does.

With an account

You sign in with Apple, Google or Facebook. We get your name and email address from them (with Apple, you can choose to hide your email). Test versions of the app also offer an email and password.

With an account, we keep:

• Your profile: your name as it appears in the app.
• Your interests: the kinds of events you told us you like.
• Your area, if you share it: either "Auchterarder", or a point rounded to about a kilometre. Your phone sends its location once, when you choose; we round it before saving it. During set-up we also use it once, unsaved, to list venues near you. We never track your location, and never in the background.
• What you follow, save and plan: venues you follow, saved events, boards and their notes, and dates you're going to.
• Your door passes, and when each was scanned.
• Your notification settings: each time you turn a type on or off, with the date and the version of this policy at the time, plus a record of what we sent you, and your phone's notification address.
• A link between your account and your phone's random ID, so what you did before signing in joins your account. The sign-in screen says so.

If you host events

• Your host name and events are public. If you host as yourself, your host name may be your own name, and it shows on your events.
• Photos and videos you add to an event or venue are public. They upload as soon as you choose them. Photos can carry details such as where they were taken; we don't read those, but we don't remove them yet either, so turn off location in your camera if that matters to you.
• Places you add become public venues. Public places only: never a home address.
• Claims and verification: your name, role and work email, and how you'd like us to check. A person at What's On checks them using details we already hold, such as the venue's listed phone number. We keep the record of what was decided.
• Your team: people on a host's team see each other's names. Invite links work once, for a week.

What hosts see

Hosts see counts for their own events: how many people saw, opened, saved, are going to, clicked for tickets or came, and where people found the event. They don't see who.

The exception is free door passes. When you get one, the host's door team can see your first name and pass code for that date, so they can check you in, including with no signal. When your pass is scanned, we note when and by which staff member. That's how a host knows who came.

Shared boards

If you share a board, anyone with the link can see its name and the events on it. They don't see your name or your notes, and search engines are asked not to list it. Stop sharing, or delete the board, and the link stops working.

Notifications

We only send notifications you've allowed: new events you might like, news from venues you follow, and reminders about things you've saved or are going to. Each has its own switch in the app. These arrive between 5pm and 9pm, and never more than one of each kind a day.

If you host, we also send messages about your hosting: you've been given access to a venue, you're verified, or an event has been checked or sent back. They're about your account rather than marketing, so they don't depend on those switches, and they arrive between 8am and 10pm.

Camera, microphone and photos

The app asks for the camera only to scan door passes or take photos and videos for your events, the microphone only when you record a video, and your photos only when you choose one to add. Nothing is taken or uploaded unless you do it.

Why we use it

• To run your account and the features you use (saves, boards, passes, hosting): because you asked us to.
• To count how events are used and show hosts, and to keep the service working and safe: our legitimate interest in running a local listings service and showing its value. The records are about events, and hosts only see totals, apart from the door list above.
• To send notifications: your consent, which you can take back at any time with the switches in the app, or in your phone's settings.
• To check claims and verify hosts: our legitimate interest in making sure the right people run each listing.

Who else handles it

We don't sell or rent data. These services handle it for us, only to run What's On:

• Supabase: our database, sign-in and file storage, hosted in London.
• Expo: delivers notifications to your phone, via Apple or Google, and delivers app updates. A notification carries the event's name, place and time, never your name.
• Apple, Google and Facebook: when you sign in with them, under their own privacy policies.
• Google Maps: some venue photos load straight from Google, so Google sees your phone's or browser's connection when they do. Directions open in Apple Maps or Google Maps.
• postcodes.io: when a host adds a place, we look up its postcode. Only the postcode is sent.
• Our website host, which serves this site.

Some of these are based in the United States, or handle data there. When they do, we rely on the safeguards UK law requires, such as the UK-US data bridge or standard contract clauses.

When you share an event to WhatsApp, Facebook or Instagram, or follow a ticket link, you're dealing with that service under its own terms.

How long we keep it

• Your account information: until you delete your account.
• Records of how events were used: while they're useful for reporting to hosts. They stop being linked to you when you delete your account.
• Claims and verification decisions: kept as a record of who runs each listing.
• Events and photos hosts publish: while they're listed, and as a record of where listings came from.

While What's On is in beta we're setting fixed time limits for each of these, and this page will list them before the app is open to everyone.

Deleting your account

In the app, go to Account, then Delete account. That removes your profile, interests, area, follows, saves, boards (and their shared links), plans, door passes, notification settings and history, and the link to your phone.

What stays:

• records of how events were used, with no link to your account, though they still carry your phone's random ID (delete the app to get a new one);
• claims and verification requests you made;
• hosts, events and places you created, which are public listings.

To have any of those removed too, email hello@showmewhatson.live.

Your rights

You can ask for a copy of what we hold about you, ask us to correct or delete it, ask us to stop using it or to limit how we use it, and object to anything we do on the basis of our legitimate interests. Email hello@showmewhatson.live and we'll reply within a month.

If you think we've got it wrong, you can complain to the Information Commissioner's Office at ico.org.uk.

Children

You need to be 13 or over to create an account. You don't need an account to browse. If you think a child under 13 has made one, tell us and we'll delete it.

Changes

When this policy changes in a way that matters, we'll update the date at the top and tell you in the app. Material changes are also noted in the changelog.