Privacy Policy

Last updated: 8 July 2026

This Privacy Policy explains how TicketBadger ("TicketBadger", "we", "us") collects, uses, and shares information when you use the TicketBadger website and the TicketBadger mobile app for iOS and Android (together, the "Service"). We have written it to be specific about what the Service does, including the camera, photo, and location features. If you do not agree with this policy, please do not use the Service.

1. No Account Required

You can use TicketBadger without creating an account or signing in. We do not ask for your name, password, or a login. To keep features such as your saved lineups and photo results working during a visit, the app generates a random, anonymous session identifier on your device. It is not tied to your real-world identity.

2. Information We Collect

Photos and camera

The "festival personality" feature lets you take a photo or choose one from your library. With your permission, the selected image is sent securely to our servers and to our AI processing providers (see Section 4) to generate a fun personality result and matching event recommendations. We analyse the aesthetic and style of the image; the feature is not designed to identify or recognise specific people. We do not retain the original photo after the analysis is complete. If — and only if — you choose to share your result, the share card we generate (which includes your photo) is uploaded to our storage and given a public link so it can be shared; you can ask us to delete it at any time (see Section 7).

Face data (TrueDepth camera and AR)

On supported iPhones, the festival personality feature offers an optional augmented-reality (AR) camera mode. When you use it, the app uses Apple's ARKit face tracking (which relies on the TrueDepth camera) to display a live wireframe "mesh" over your face and to react to your expression on screen. This face-tracking information — the face mesh geometry and expression (blendshape) values provided by ARKit — is processed entirely on your device, in real time, and only while the camera is open. We do not store it, we do not send it to our servers, and we do not share it with any third party. It is discarded as soon as you leave the camera. TicketBadger does not use this data to identify or recognise you, and does not create a faceprint or any persistent biometric template.

The only thing that leaves your device is the still photo you choose to capture (or pick from your library), which is handled exactly as described under "Photos and camera" above. That photo is an ordinary image and does not include TrueDepth depth or face-mesh data.

Location

With your permission, the app uses your device location to show venues near you and to provide walking directions. Location is used while you are using the app (foreground), is processed to fetch nearby results and routes, and is not stored on our servers or linked to your identity. You can decline or revoke this permission in your device settings; the rest of the app will keep working.

Search and usage

We collect the search queries and event interactions you make so we can return results and improve recommendations.

Analytics

We use Google Analytics 4 to understand how the Service is used (for example, screens viewed and features used). For this, a random analytics identifier is generated and stored on your device, and usage events are sent to Google. This is first-party analytics only — we do not use it for advertising, and we do not track you across other companies' apps or websites.

Notifications

If you allow notifications, we use a push token provided by your device's operating system to send you relevant updates. You can turn notifications off in your device settings at any time.

Contact

If you email us or use a contact form, we receive the contents of your message and your email address so we can reply.

3. How We Use Information

  • Provide the festival personality analysis and recommend matching events
  • Show nearby venues and provide directions
  • Return search results and personalise event recommendations
  • Send notifications you have opted into
  • Measure and improve the performance and usability of the Service
  • Maintain security, prevent abuse, and apply rate limits
  • Respond to your support requests

We do not sell your personal information, and we do not use it for cross-app or cross-site advertising tracking.

4. Third-Party Service Providers

We share information with a small number of service providers only to operate the Service. They process data on our behalf under their own privacy terms:

  • AI providers (Anthropic and OpenAI) — process your photo to generate the personality analysis, and power semantic search.
  • Supabase — our database and storage (including shared result cards, if you share one).
  • Mapbox — maps and walking directions.
  • Google Analytics — usage analytics, as described above.
  • Apple and Google — push notification delivery and app distribution.

5. Data Retention

Original photos are not retained after analysis. Shared result cards are kept until you ask us to remove them. Search and analytics data are retained only as long as needed for the purposes above and then deleted or aggregated. Server logs are kept for a short period for security and debugging.

6. Data Security

Data is transmitted over encrypted HTTPS/TLS connections, and we apply appropriate technical and organisational measures to protect it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your Rights and Choices

  • Control camera, photo, location, and notification permissions in your device settings
  • Request access to, correction of, or deletion of personal data we hold about you
  • Ask us to remove a shared result card
  • Object to or restrict certain processing, and request data portability

Depending on where you live (for example, the UK/EU under UK GDPR and GDPR, or California under the CCPA), you may have additional rights. To exercise any of these, contact us using the details below.

8. Children

The Service is intended for a general audience and is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

9. International Transfers

We and our service providers may process information in countries other than yours. Where required, we rely on appropriate safeguards for these transfers.

10. Contact Us

If you have any questions about this Privacy Policy or want to exercise your rights, contact us at: hello@ticketbadger.ai

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date above. Significant changes will be highlighted where appropriate.