This policy explains how FRIYAY LTD (Company No. 17515583, registered in England & Wales) uses your personal data when you use FriYaY!. We are the data controller under the UK GDPR and the Data Protection Act 2018. Contact us at ed@friyay.co.uk.
Fan privacy first
If you're a Fan, your name, follows, hearted events and activity are private by default. Venues and acts never see who you are unless you choose to make yourself discoverable. They only see anonymous, combined numbers (for example, "40 fans nearby like indie rock").
What we collect
Account details: email address, display name, account type, and password (stored securely, never readable by us).
Profile details: for venues and acts — name, location, genres, photos, links and contact details you choose to add.
Activity: follows, hearts, events and Gig Board posts, invites and referral credits.
Location: only if you allow it, to show events near you. We don't store your precise location history.
Payments: purchase and subscription records. Card details are handled by our payment provider (Stripe) — we never see or store your full card number.
Profile claims: the verification details you provide (such as an Instagram handle, email or phone number).
Technical data: basic device, browser and usage information to keep FriYaY! secure and working.
Why we use it (and our lawful basis)
To run your account and show you events — contract.
To process payments and keep financial records — contract and legal obligation.
To verify profile claims and prevent fraud or abuse — legitimate interests.
To produce anonymous Fan Insights for venues and acts — legitimate interests (no individual fan is identified).
To improve FriYaY! — legitimate interests.
To send optional updates — consent, which you can withdraw any time.
We never sell your personal data.
Public listings
Venue and act profiles and events are public, so anyone can see them. We may list publicly available information about venues and acts to help local scenes get started; the owner can claim, edit or ask us to remove it at any time.
Who we share it with
Hosting, database and authentication providers that run the service for us.
Stripe, to take payments.
Authorities, if the law requires it.
Some providers may process data outside the UK. When they do, we make sure appropriate safeguards are in place, such as UK-approved contract terms.
How long we keep it
We keep your data while your account is open. When you delete your account, we delete your personal data within 30 days, except payment records, which we must keep for up to 6 years for tax purposes.
Your rights
You can ask us to:
see a copy of your data;
correct it;
delete it;
send it to you in a portable format;
restrict or object to how we use it.
Email ed@friyay.co.uk and we'll respond within one month. If you're unhappy, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
We only use essential storage needed to keep you signed in and remember settings like your chosen skin. We don't use advertising cookies.
Children
FriYaY! is not intended for anyone under 16.
Changes
If we make significant changes to this policy, we'll let you know in the app or by email.