Privacy Policy

Last updated: May 2026

1. Who We Are

NOCTVM is a nightlife and event discovery platform. This policy explains how we collect, use, and protect your personal data when you use our service.

Contact: support@noctvm.app

2. What We Collect

  • Account data: name, email, username, profile picture, bio
  • Authentication data: user ID, OAuth provider data, session logs
  • Profile & social data: photos, posts, comments, likes, saves, follows, blocks, reports
  • Location data: approximate city-level location; precise GPS only with explicit permission
  • Event data: event listings, venue interactions, search history
  • Device data: IP address, app version, crash logs
  • Consent data: cookie preferences and consent logs

3. How We Use Your Data

  • To create and manage your account (contractual necessity)
  • To display your profile and social content (contractual necessity)
  • To send transactional emails — verification, security alerts, account notices (legitimate interest)
  • To recommend events based on your city and preferences (legitimate interest)
  • To moderate content, prevent abuse, and ensure platform safety (legitimate interest)
  • Analytics and marketing only with your consent

4. Third Parties We Work With

  • Supabase — database and storage (EU hosting)
  • Clerk — authentication (US-based, SCCs in place)
  • Resend — transactional emails (US-based, DPF certified)
  • Google — OAuth sign-in (limited profile data)
  • Facebook / Meta — OAuth sign-in (limited profile data)

5. Your Rights (GDPR)

You have the right to: access, rectify, erase, restrict processing, data portability, object to processing, and withdraw consent at any time.

To exercise these rights, email support@noctvm.app or use in-app account deletion.

You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP).

6. Data Retention

We retain your data while your account is active. After deletion, data is anonymised or deleted within 90 days. Security logs are retained for up to 180 days.

7. Cookies

See our Cookie Policy for details on how we use cookies and similar technologies.