Privacy Policy
Effective 24 October 2026
Concert Buddy is an iPhone app that helps you prepare for concerts. This policy explains what information the app and its servers handle, why, who we share it with and the choices you have. "We" and "us" means the developer of Concert Buddy, who is named as the seller on the App Store and is responsible for your information.
The short version
- Your concerts, kits, journal reflections and taste profile are stored on your iPhone. We don't upload them.
- To write a concert kit we send the concert's details (performer, venue, date) to our server and to our AI provider. We never send your name or email with them.
- We use analytics to understand how the app is used. We don't sell your information, show ads or track you across other companies' apps and websites.
- You can delete your account and all its data from the app at any time: Profile → Delete Account.
Information we collect and how we use it
Your account
You can use Concert Buddy as a guest or sign in with Apple or Google.
- Guests get a random account identifier on our server. It isn't linked to your name or contact details.
- Sign in with Apple gives us an Apple account identifier and, the first time you sign in, the name and email address you choose to share. Apple lets you hide your real email address.
- Sign in with Google gives us a Google account identifier, your name, email address and profile picture link.
We use this information to sign you in, keep your access secure, apply usage limits to your account and respond if you contact us. Your name and email are also stored on your device so the app can show them in your profile.
Concerts, kits and your journal
The concerts you add, the kits created for them, your bookmarks, journal reflections and ratings, and the genres you pick during onboarding are stored only on your iPhone. They aren't synced to our servers, so deleting the app deletes them too.
Creating concert kits
When you create a kit, the app sends the performer, venue, city, date and genre of that concert to our server, plus the Ticketmaster or SeatGeek event ID if you found the concert through search. Our server fetches the public event listing and sends the concert details and listing to Anthropic, which provides the AI model that writes the kit. We send a shortened copy of each request and the AI's response to Arize AI, which we use to monitor kit quality. None of this includes your name, email or account identifier.
To enforce kit limits, our server records when your account creates a kit. These records are deleted after about 35 days, or straight away if you delete your account.
Searching for events, artists and venues
- Event search: what you type is sent to our server, which searches Ticketmaster and SeatGeek. Those services see our server's request, not your identity.
- Artist search: the app looks up artists directly with MusicBrainz.
- Venue search: the app uses Apple Maps search.
- Performer photos: the app loads photos and summaries directly from Wikipedia.
When the app contacts MusicBrainz, Apple or Wikipedia directly, those services receive your device's IP address as part of the connection, as with any website you visit.
Purchases
Concert Buddy Plus is sold through Apple's App Store. Apple handles payment, and we never see your card or billing details. To confirm your subscription, the app sends our server the transaction details Apple signs (such as the product, purchase date and expiry date). We use them only to check you're subscribed and don't store them.
Analytics
We use Mixpanel, with data stored in the EU, to understand which features people use and to find problems. The app records events such as opening a concert, creating a kit or searching, with details like the performer name, search text, kit generation time and error messages. Mixpanel also receives basic device information (such as device model, iOS version and app version) and estimates your approximate location (city and country) from your IP address. Analytics are linked to your account identifier and, if you sign in with Apple or Google, to the name and email address you shared.
When you contact us
If you email us, we receive your email address and whatever you include in your message, and use it only to reply and help you.
Who we share information with
We share information only with service providers that help us run Concert Buddy, and only for the purposes above. We don't sell or rent personal information, and we don't share it for advertising.
| Provider | What they do for us | Location |
|---|---|---|
| Supabase | Hosts our server, accounts and usage records | EU (Frankfurt) |
| Anthropic | AI model that writes concert kits | United States |
| Arize AI | Monitors the quality of AI responses | EU |
| Ticketmaster, SeatGeek | Event search and event listings | United States |
| Mixpanel | Product analytics | EU |
| Apple | Sign in with Apple, App Store purchases, Maps search | Global |
| Sign in with Google | Global | |
| MusicBrainz, Wikipedia | Artist search, performer photos and summaries | United States |
| Cloudflare | Hosts this website and forwards support email | Global |
If you tap a Spotify link, the Spotify app or website opens and Spotify's own privacy policy applies. We may also disclose information if the law requires it, or to protect the rights and safety of our users and others.
How long we keep information
- Account information: until you delete your account.
- Kit usage records: about 35 days.
- Analytics: as long as we need it to improve the app. When you delete your account, the app asks Mixpanel to delete your analytics profile. Email us if you'd also like your past analytics events deleted.
- Support emails: as long as we need them to help you, and no more than 2 years.
- Data on your iPhone: until you delete it, delete your account or remove the app.
Your choices and rights
- Delete your account at any time in the app: Profile → Delete Account. This deletes your account and usage records from our server, erases the app's data on your device, revokes the app's Sign in with Apple access and asks Mixpanel to delete your analytics profile.
- Sign out to stop using your account on a device.
- Contact us to access, correct, delete or get a copy of your information, or to object to how we use it.
Depending on where you live (for example in the UK, the EU or California), you may have legal rights over your personal information, including the rights above and the right to complain to your data protection authority. Where the GDPR applies, we rely on our contract with you to provide the app, our legitimate interest in keeping it secure, preventing abuse and improving it, and your consent where we ask for it. We'll never treat you differently for exercising your rights.
Children
Concert Buddy isn't intended for children under 13, or the minimum age required in your country, and we don't knowingly collect their information. If you think a child has given us information, contact us and we'll delete it.
Security
Information sent between the app, our server and our providers is encrypted in transit. Your sign-in session is kept in the iOS Keychain, and our server checks every request comes from a signed-in account. No system is completely secure, but we work to protect your information and keep only what we need.
International transfers
Some providers, such as Anthropic, process information in the United States. Where data protection law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses for these transfers.
Changes to this policy
If we make material changes, we'll update the date at the top and tell you in the app or on this site before they take effect.
Contact
Questions or requests about your privacy: support@concertbuddy.link.