Privacy Policy

1. Introduction

Flow ("we", "our", or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at flow-concerts.app.

By using Flow, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create an account, we collect your email address, display name, and profile photo. If you sign in with Google, we receive your Google profile information (name, email, and profile picture) as authorized by you.

Concert Activity Data

We collect data about your concert activity, including saved shows, attended shows, favorite artists, followed cities, crowd reports, queue participation, spot goals, and media uploads (photos and videos).

Usage Data

We automatically collect certain information when you access the App, including your device type, browser type, and general interaction patterns. We do not use third-party tracking cookies.

3. How We Use Your Information

• Provide and maintain the App and its features
• Generate your concert stats and post-show timelines
• Deliver pit intelligence, arrival timing, and spot strategy recommendations
• Process payments for subscriptions
• Send notifications related to your account and activity
• Improve and optimize the App

4. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers — Supabase (database & authentication), Vercel (hosting), Stripe (payments)
• Other users — Your public profile, display name, and community activity are visible to other users
• Legal compliance — When required by law or to protect our rights

5. Data Storage & Security

Your data is stored securely using Supabase with row-level security policies. All data is transmitted over HTTPS. We implement industry-standard security measures to protect your information, but no method of electronic transmission is 100% secure.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your account and data
• Export your concert history data
• Withdraw consent for optional data processing

To exercise these rights, contact us at support@flow-concerts.app.

7. Third-Party Services

The App integrates with third-party services including Google (authentication), Stripe (payments), and Supabase (data storage). Each of these services has its own privacy policy governing how they handle your data.

8. Children's Privacy

Flow is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@flow-concerts.app.