Privacy Policy

Last updated: 5 July 2026

WhatsOn ("we", "us") is a live-events discovery app operated from Glasgow, United Kingdom. This policy explains what personal data we collect when you use the WhatsOn app or website, why we collect it, and the choices you have. We've tried to keep it in plain English.

What we collect

Account details. When you sign in with Apple or Google we receive your name (or the name you choose to share) and your email address. That's what creates your account.
Profile content. Anything you add to your profile: stage name, bio, profile photo, social media links, and your taste preferences (the categories you pick).
Content you create. Pins you drop, comments you write, performers you follow, events you save, and reports you file.
Location. The app uses your device's location only to centre the map and show what's nearby. Your location is processed on your device — we do not store a history of where you've been on our servers. Pin locations are places performers choose to publish, not tracking data.
Verification evidence. If you apply for a verified badge, the handle, screenshot or ID document you submit is stored privately and used only to review your request.
Push tokens. If you enable notifications, we store a device token so we can send them (e.g. when a performer you follow drops a pin).
Support emails. If you contact us, we keep the correspondence.

We do not sell personal data, we don't run third-party advertising, and we don't use your data to train AI models.

Why we use it (legal bases)

To provide the service — showing events, running your account, sending the notifications you asked for (performance of a contract).
To keep the platform safe — reviewing reports, enforcing blocks, verifying performers (legitimate interests).
To meet legal obligations if they arise.

Who we share it with

Only service providers who help us run WhatsOn: Supabase (database and authentication hosting), Expo / Apple / Google (delivering push notifications and sign-in), and Skiddle (whose public event listings we display — we send them no personal data about you; if you buy tickets you deal with Skiddle under their own privacy policy). We may disclose data if the law requires it.

How long we keep it

For as long as you have an account. Delete your account (Profile → Delete account in the app) and your profile, pins, comments, follows, saved events, credits and history are permanently deleted. Verification evidence is kept only as long as needed to review and evidence the decision. Support emails are kept for up to two years.

Your rights

Under UK GDPR you can ask us for a copy of your data, ask us to correct or delete it, object to or restrict processing, and complain to the Information Commissioner's Office. The fastest route for deletion is the in-app Delete account button; for anything else email us.

Children

WhatsOn is not directed at children under 13, and you must meet the minimum age required to have an Apple or Google account in your country to sign in.

Changes

If we make meaningful changes to this policy we'll update this page and note it in the app. Continued use after changes means you accept the updated policy.

Contact

Data controller: WhatsOn, Glasgow, United Kingdom.
Email: support@getwhatson.app