Privacy Policy
Version 2026-04-18
1. What we collect
Account details (email, phone, display name, avatar). Device push token. Approximate and precise location, only when you opt in to an event or DisplA Me share. Content you post. Basic analytics: screen views, crashes.
2. Why we collect it
To operate the service — show you events, let friends find you during a meet-up, deliver notifications, prevent abuse, and improve the app. We never sell personal data. We do not run advertising on DisplA and do not share data with ad networks.
3. Location data
Location is tracked only within the time window of an event you have joined, or while a DisplA Me share you have created is live. It stops automatically at the event end. You can opt out at any point — you stay in the event but become invisible to others. Location rows expire at event close and are deleted 30 days afterwards.
4. Messages
Message content is end-to-end encrypted with AES-GCM before leaving your device. We cannot read your messages. Metadata (who messaged whom, when) is stored to route and order conversations.
5. Sharing with third parties
We use Supabase (database, auth, storage), Firebase Cloud Messaging (push notifications only), and Google Maps & Places (venue search and mapping). These providers process data strictly on our behalf. We do not send data to advertising or data-broker networks.
6. Your rights
You can export or delete your account at any time from Settings. Deletion removes your profile, posts, and location data. Encrypted messages you sent to others remain on their devices until deleted. Email hello@displa.co.uk to make a data request.
7. Retention
Account data: kept until you delete your account. Location data: expires at event close, deleted 30 days later. Messages: stored encrypted until deleted by a participant or when their account is removed. Analytics: anonymised after 90 days.
8. International transfers
Data is stored in Supabase data centres (EU region). Some processors operate globally; transfers rely on Standard Contractual Clauses where applicable.
9. Contact
Data Protection enquiries: hello@displa.co.uk