Party

Privacy Policy

最終更新：2026-10-18

この文書は英語版とドイツ語版があります。英語版が優先されます。

Party helps people host and attend real events. This policy explains what personal data Party processes, why, who receives it and which rights you have. It is written for the Swiss Federal Act on Data Protection (FADP) and, for people in the EU, the EEA and the UK, for the GDPR and the UK GDPR.

Who is responsible

The controller is Leo Heinz Sommerhalder (sole proprietor), Schaerhusweg 7, 4852 Rothrist, Switzerland. Contact for privacy requests: support@partyapp.io, in German or English.

What we process

• Account: email address, how you sign in (a code by email, a password, Apple or Google), authentication data (handled by our authentication provider; passwords are stored only as salted hashes), creation and last sign-in time.
• Sign in with Apple or Google — only if you use it: Apple or Google confirms who you are and sends Party an identifier for your account with them, your email address and, the first time, your name; Google also sends a link to your profile picture, which Party does not use. With Apple you can hide your email address: Party then gets an address from Apple that forwards to yours. For Sign in with Apple, Party keeps a token from Apple that it uses only to end its access at Apple when you delete your account. Party never gets your Apple or Google password or anything else from those accounts.
• Age check: when you create your account you enter your date of birth. Our server checks it and does not store it; Party keeps only that you are 18 or older, when and how this was confirmed, or that the check refused the account. On iPhones where Apple applies age rules to your Apple Account, the app also asks Apple — you choose whether to share — if you are 18 or older. Apple then shares an age range and how it was set (by you, by a parent or guardian, or confirmed by Apple), never your date of birth. Party does not check IDs.
• Profile: name, username, optional photo, bio, the town you choose and music interests you add.
• Discovery location: the town or postal area you choose (name and coordinates rounded to about 100 metres) and your search radius, so Party can show events near it. Only you can see it. If you tap “Use my location”, the surrounding town is saved, not your position.
• Events you host: details you enter, including the exact address, which is stored separately and shown only to confirmed guests and your event team unless you mark it public.
• Participation: your RSVPs, +1 count, waitlist position, tickets, check-in time, and messages or photos you post in an event.
• Refund requests: the conversation between you, the host and Party about a ticket, files you attach (screenshots, PDFs), the reason, the decision and when it was made. The host sees your display name, not your email. Notes Party’s team writes about a request are seen only by the team. Kept like the purchase records (see Retention).
• Hosts who sell: the card a host registers through Stripe for card fees they may owe (Party stores only its brand, last four digits, expiry and country — never the number), the host’s consent to these charges with its time and wording, and amounts owed and paid.
• Fraud prevention for paid events: Party assesses what a paid event could cost if it went wrong — from its price and capacity, the host’s other paid events and completed events, guests’ reports and Stripe’s fraud assessment of each payment (“Radar”). Above set limits, ticket sales or a payout wait until a person at Party has checked the event (usually within a day); a person decides whether they go ahead. Hosts can ask for a review at support@partyapp.io. Legal basis: the contract with hosts and Party’s legitimate interest in preventing fraud and losses.
• Apple Wallet — only if you add a ticket: the pass holds the event, its time and place (the exact address of a private party only once the host shares it with you), your name, the ticket type, the host’s name and your ticket’s entry code. It is stored in Wallet on your device. So that the pass updates itself — when the event changes or is cancelled, or your ticket is used — Wallet registers your device with Party: we store an identifier Wallet creates for this, a push token and which passes are on the device, and send update notices through Apple’s push service. The notices contain no content; Wallet then fetches the updated pass from Party.
• Notifications — only if you allow them: your device’s push token (an address Apple gives your iPhone for Party), its language and whether it is a development device, and which notifications were sent to it and when. Live Activities — in the hour before a party you go to or host, your lock screen and Dynamic Island can show its name, start time and place (the exact address only once you may see it) and, for hosts, how many guests have checked in. So that Party can start and update it while the app is closed, your iPhone gives Party a token for it. You can turn both off at any time in the iOS Settings.
• Social graph: friends, follows, blocks, and an optional “I’m out tonight” status that expires automatically.
• Safety and operations: reports you file in the app; notices sent through partyapp.io/report — also by people without an account — with the sender’s name, email address and what they report; moderation decisions; security events; audit records of sensitive actions.
• Contact form — only if you use it: the topic, your message, your email address and, if you give it, your name, so that we can answer you. The message is emailed to our support address.
• Device: your device’s position is used on your device and sent only as a search parameter for “near me”, rounded to about a kilometre; we do not store a location history.
• Technical data: when you use the website or the app, our hosting providers process your IP address, device and browser type and the address requested, to deliver the service and protect it against attacks. They keep these logs for a few days; Party does not use them to identify or profile you.
• Purchases — when you buy a ticket: the event, the number of tickets, the amount and currency, the time and status of the payment, any refund or dispute and, for events with an age limit of 16 or more, when you confirmed that you meet it. You enter your card or other payment details on the page of our payment provider Stripe; Party never receives or stores them.
• Hosts who charge for entry: Stripe verifies your identity and holds your bank details directly. Party stores only the reference of your Stripe account, its country and currency, and whether it may take payments and be paid out.

Why we process it, and on what legal basis

• To provide the service you asked for: accounts, invitations, guest lists, tickets and door entry (performance of a contract; GDPR Art. 6(1)(b)).
• To keep records the law requires — for example of payments (legal obligation; Art. 6(1)(c)).
• To keep people safe, handle reports and notices and prevent abuse: reporting, blocking, rate limits, audit and security logs (our legitimate interest in a safe service and in establishing or defending legal claims; Art. 6(1)(f)).
• To keep Party for adults: the age check (performance of a contract, and our legitimate interest in protecting minors; Art. 6(1)(b) and (f)).
• With your consent: optional location access, optional notifications, optional profile details, sharing Apple’s age range and adding tickets to Apple Wallet. You can withdraw consent at any time in the app, in Wallet or in your device settings (Art. 6(1)(a)).
• One decision is automated: if the date of birth you enter, or the age range Apple shares, shows that you are under 18, the account is refused automatically, because Party is only for adults. You can give your view and ask for a person to review it at support@partyapp.io, for example if you mistyped the year. Rate limits that briefly stop a repeated action also apply automatically. Anything else that restricts your account is decided by a person.

Who can see what

• Your email address is never shown to other users. Nobody sees your date of birth: Party does not keep it.
• Hosts and their event team see your name and RSVP for their event.
• Other guests see you on a guest list only if the host enabled the list and your own privacy setting allows it.
• Private event addresses are disclosed only to confirmed guests and the event team.
• Someone you report is not told who reported them, unless a court or authority obliges us to disclose it.
• Platform administrators can access account and moderation data to operate the service. They do not see private event addresses in the admin tools.

Location

• Location access is optional. Party asks for it only when you tap “Use my location” or turn on “near me”, only while the app is open, and never in the background.
• Your exact position stays on your device. Searches carry it rounded to about a kilometre and it is not saved. If you choose a town, or tap “Use my location” to pick one, Party saves that town (coordinates rounded to about 100 metres) and your search radius with your account.
• On the website, the first list of events is centred on the approximate town your internet connection suggests. This comes from our hosting provider, is rounded to about a kilometre and is not stored. The country of your connection and your browser’s languages also decide which language the website opens in; every language has its own address (for example /fr/ for French), and you can pick another one at the bottom of every page.
• Without location access everything still works: search for any town or postal code instead.

Events from other sources

Besides events created on Party, we list public events from Eventfrog through its official interface: title, time, venue, organiser and a link, and for Eventfrog events an image. No data about you is sent to them. Booking and tickets for those events happen on Eventfrog’s site, under its terms and privacy policy. When you open such a link you leave Party.

Usage statistics

Party counts how often things happen — for example event pages viewed, events saved or shared, booking links opened, RSVPs and check-ins. These counts contain no user ID, device ID, advertising ID or IP address. Party contains no advertising or tracking software and does not track you across other apps or websites.

Cookies and storage on your device

The website sets cookies only for the language: party_lang when you pick a language (kept for a year), and party_lang_s while you read pages in a language other than German (until you close the browser) — so the next page is in that language too. It contains no tracking or advertising technology. If you sign in on the website, your session is kept in your browser’s local storage, and the website remembers the area you last browsed. Both are needed for those functions and stay on your device until you sign out or clear your browser data. The app keeps your session in your device’s secure storage (the Keychain on iOS).

Where the website offers sign-in with Google or Apple, their buttons are loaded from Google’s and Apple’s servers when you open the sign-in form, so Google and Apple see your IP address and browser. If you use one, Google or Apple may set its own cookies, under its own privacy policy.

Service providers and transfers abroad

• Supabase (Supabase, Inc., USA) — database, sign-in and file storage. Your data is stored in Zurich, Switzerland. Supabase and its sub-processors may access it from other countries, in particular the USA and Singapore, under the EU Standard Contractual Clauses in Supabase’s data processing agreement.
• Cloudflare (Cloudflare, Inc., USA) — hosting of the website and forwarding of email sent to partyapp.io addresses, on a worldwide network. Cloudflare is certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework and the UK extension; Standard Contractual Clauses apply in addition.
• Resend (Resend, Inc., USA) — sending email (sign-in codes, confirmations, replies to notices). Emails are sent from the EU (Ireland). Resend is certified under the EU-U.S. Data Privacy Framework and the UK extension and bound by its data processing agreement.
• OpenFreeMap — map tiles. Your device loads them directly, so the service sees your IP address; it keeps no user data and sets no cookies.
• Photon by komoot (komoot GmbH, Germany) — place search. The text you type is sent to it and is not linked to your account.
• Apple — on iOS, turning coordinates into a town name uses Apple’s geocoding service. Apple also provides Sign in with Apple, the age range on iPhones where Apple applies age rules, Apple Wallet, and the Apple Push Notification service, which delivers Party’s notifications and Live Activity updates to your iPhone and for that receives the push token and the content of the notification.
• Google — only if you sign in with Google.
• For your account with Apple or Google, and what you share through it, Apple and Google are controllers in their own right, under their own privacy policies.
• Stripe (Stripe Payments Europe, Ltd., Ireland, and Stripe, Inc., USA) — payments, payouts and the identity checks they require. Stripe also acts as a controller in its own right for fraud prevention and its legal obligations.
• Switzerland, the EU/EEA and the UK recognise each other’s level of data protection as adequate. For the USA, the safeguards are named above.

Retention

• Account and content: until you delete them or your account.
• Reports, notices and the moderation decisions about them: three years after the decision, then deleted. Reports you filed are kept without your name if you delete your account.
• Notifications: 120 days. Security events: 180 days. Contact form messages: one year after they arrive.
• Audit records of sensitive actions are kept without your identity after account deletion.
• Records of purchases, refunds and payouts: ten years, as accounting law requires; after account deletion without your profile.
• Age check: when and how you confirmed it, for as long as the account exists. An account refused as under 18 is deleted after 30 days — at once if the date shows a child under 13; what remains is a one-way code made from the email address (and the Apple or Google account id), which cannot be turned back into the address and only stops the same account from simply being created again with another date. Support can lift a refusal after a review.
• Apple token: until you delete your account, when it is used once to end Party’s access at Apple and then deleted.
• Wallet registrations: until you remove the pass from Wallet, the ticket is removed or you delete your account. A device with no pass left is removed within a minute.
• Push and Live Activity tokens: until you sign out on that device or delete your account; a token Apple reports as no longer valid at once, one not used for 180 days after that. A Live Activity’s token one day after its party; the record of which notifications were sent goes with the notification (120 days).
• Technical logs at our hosting providers: a few days. Backups are overwritten on their normal schedule.

Deleting your account

You can delete your account yourself at any time, in the app (You › Settings › Delete account) or on the website at /delete-account. Deletion is immediate and permanent: your profile, saved location, saved events, RSVPs, tickets, messages, photos, friendships and blocks are removed, and events you host are cancelled and your guests are told. If you signed in with Apple, Party also ends its access at Apple; if you signed in with Google, the app ends Party’s access at Google. Tickets you added to Apple Wallet stay on your device until you remove them, but their codes no longer work. What remains carries no link to your profile: counts, records of payments where paid entry was used (amount, date and the payment provider’s reference), and audit records of sensitive actions without your identity.

Your rights

You can access your data and receive it in a machine-readable format (Settings › Export my data, a JSON file), correct it in your profile, and delete your account as described above. You can also ask us to restrict processing, object to processing based on our legitimate interests, and withdraw consent at any time. Write to support@partyapp.io; we answer within 30 days. You can lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), with the data protection authority where you live or work in the EU/EEA, or in the UK with the Information Commissioner’s Office (ICO).

Children

Party is only for adults (18+). Everyone confirms their date of birth when they create an account, and an account under 18 is refused, as described above. This is a declaration, not an ID check. We do not knowingly process data of minors beyond that refusal; if we learn that an account belongs to a minor, we close it.

Changes

We update this policy when Party changes and tell you about material changes in the app.