Legal

Privacy Policy

Effective date: October 6, 2026

Tixxy ("we", "us") helps you track events and tickets, and coordinate with friends about who's going. This policy explains what we collect and why.

What we collect

• Account info — email address, and (if you sign in with Apple or Google) your name, in order to create and secure your account.
• Profile info — username, display name, and avatar photo you choose to add.
• Content you add — events and tickets you save (venue, date, seat, notes), and any ticket photos you upload from your camera or photo library.
• Social info — your friends list, event invitations you send or receive, and who's attending an event, so we can show that to you and to the friends you're connected with.
• Location — if you allow it, your device's current location, used only to suggest nearby cities when you search for events. Your coordinates are turned into a city name by your phone's built-in geocoding service (Apple's on iPhone) and are never sent to our servers; we store only the city name you search for, on your device. If you then search in that city, the city name is sent with the search so we can find events there.
• Feedback — anything you submit through in-app feedback, along with app version and platform, so we can act on it.
• Usage analytics — how the app is used, so we can tell what works and what to fix. This is on by default, and you can turn it off at any time in Settings → Share usage data. When it's on, we record:
  • which screens you open, and which buttons and controls you tap — identified by labels we assign in the app's code, never by the text on screen;
  • internal IDs and counts for what you acted on (for example, an event's internal ID, or how many search results came back);
  • your app version and build number, and whether you're on a phone or tablet.

  These records are linked to your account's internal ID, so we can understand usage over time. They never include anything you type — search terms, event names, notes, seat details or invite links — and never your email address, name or username. Our analytics provider, PostHog, also uses your IP address to estimate your approximate location (country and city), which is stored with these records.

We don't collect advertising identifiers, we don't use analytics for advertising or to track you across other companies' apps and websites, and we don't sell your data.

How we use it

To run the app: authenticate you, show your events and tickets, connect you with friends, and let you search for events. Usage analytics are used only to understand and improve the app. Nothing is used for advertising.

Sharing

• With other users: friends and people you invite to an event can see the event details and your attendance, per the visibility rules in the app (e.g. pending invitees only see who invited them).
• With service providers:
  • Supabase stores and processes your data (our database, auth, and file storage provider).
  • PostHog receives the usage analytics described above, on servers in the EU, unless you've turned them off.
  • Ticketmaster receives the artist names you search for, and Google (Places) receives what you type into the venue field, so they can return listings and suggestions. These requests go directly from your device, so these companies also see your IP address, but not your account details.
  • Spotify serves the artist previews shown on event pages. Spotify loads them directly onto your device, so it sees your IP address and device information under its own privacy policy.
• We never sell your data, and only disclose it to comply with the law.

Your choices

You can edit or delete your saved events, tickets, and profile info at any time in the app.

Usage analytics. Turn off Settings → Share usage data and the app sends one final event recording that you opted out, then stops sending usage analytics. The setting is remembered on your device.

Deleting your account. You can delete your account from inside the app: open Settings, tap Delete Account, and type DELETE to confirm. This is immediate and permanent — your account, events, tickets, uploaded photos, friendships, and any invitations you sent are erased, and it cannot be undone. Friends keep their own copies of events you shared with them. If you can't reach the in-app option, email hello@itstixxy.com and we'll delete your account within 30 days.

Children

Tixxy is not directed at children under 13, and we don't knowingly collect data from them.

Security

Data is encrypted in transit and at rest via our provider (Supabase). No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information.

Changes

If we materially change this policy, we'll update the effective date above and notify you in the app.

Contact

Questions, or want your data deleted? Email hello@itstixxy.com.