Party

Privacy Policy

Last updated 2026-10-12

This text describes how Party works and applies as written. It has not yet been reviewed by a lawyer and will be replaced by a reviewed version.

Party helps people host and attend real events. This policy explains what personal data Party processes, why, and the choices you have. It is written for Switzerland (FADP) and anticipates the GDPR.

Who is responsible

The controller is Leo Heinz Sommerhalder, Switzerland, a private individual (Party is not a registered company; the postal address is provided on request). Contact for privacy requests: support@partyapp.io.

What we process

• Account: email address, authentication data (handled by our authentication provider; passwords are stored only as salted hashes), creation and last sign-in time.
• Profile: name, username, optional photo, bio, the town you choose and music interests you add.
• Discovery location: the town or postal area you choose (name and coordinates rounded to about 100 metres) and your search radius, so Party can show events near it. Only you can see it. If you tap “Use my location”, the surrounding town is saved, not your position.
• Events you host: details you enter, including the exact address, which is stored separately and shown only to confirmed guests and your event team unless you mark it public.
• Participation: your RSVPs, +1 count, waitlist position, tickets, check-in time, and messages or photos you post in an event.
• Purchases: when you buy a ticket for an event with paid entry — the event, the number of tickets, the amount and currency, the time and status of the payment, and any refund or dispute. You enter your card or other payment details on the page of our payment provider Stripe; Party never receives or stores them.
• Hosts who charge for entry: Stripe verifies your identity and holds your bank details directly. Party stores only the reference of your Stripe account, its country and currency, and whether it may take payments and be paid out.
• Social graph: friends, follows, blocks, and an optional “I’m out tonight” status that expires automatically.
• Safety and operations: reports you file, moderation decisions, security events, and audit records of sensitive actions.
• Device: your device’s position is used on your device and sent only as a search parameter for “near me”, rounded to about a kilometre; we do not store a location history.

Why we process it

• To provide the service you asked for (contract): accounts, invitations, guest lists, tickets and door entry, and — where entry is paid — purchases, payouts and refunds.
• To keep the records of payments that the law requires (legal obligation).
• To keep people safe and prevent abuse (legitimate interest): reporting, blocking, rate limits, audit logs.
• With your consent: optional location access, optional notifications, optional profile details.

Who can see what

• Your email address is never shown to other users.
• Hosts and their event team see your name and RSVP for their event. For a paid ticket the host also sees the number of tickets and the amount — never your payment details.
• Other guests see you on a guest list only if the host enabled the list and your own privacy setting allows it.
• Private event addresses are disclosed only to confirmed guests and the event team.
• Platform administrators can access account and moderation data to operate the service. They do not see private event addresses in the admin tools.

Location

• Location access is optional. Party asks for it only when you tap “Use my location” or turn on “near me”, only while the app is open, and never in the background.
• Your exact position stays on your device. Searches carry it rounded to about a kilometre and it is not saved. If you choose a town, or tap “Use my location” to pick one, Party saves that town (coordinates rounded to about 100 metres) and your search radius with your account.
• On the website, the first list of events is centred on the approximate town your internet connection suggests. This comes from our hosting provider, is rounded to about a kilometre and is not stored.
• Without location access everything still works: search for any town or postal code instead.

Events from other sources

Besides events created on Party, we list public events from Eventfrog (through Eventfrog’s official interface): title, time, venue, organiser name and a link. Booking and tickets for those events happen at Eventfrog or the organiser, under their terms and privacy policies. When you tap such a link you leave Party.

Usage statistics

Party counts how often things happen — for example event pages viewed, events saved or shared, booking links opened, RSVPs and check-ins. These counts contain no user ID, device ID, advertising ID or IP address. Party contains no advertising or tracking software and does not track you across other apps or websites.

Processors

Party uses infrastructure providers to host the database, authentication and files (Supabase), the website (Cloudflare) and transactional email (Resend). Payments for tickets, payouts to hosts and the identity checks they require are handled by Stripe, which also processes this data as a controller in its own right for fraud prevention and its legal obligations. Map tiles are loaded from OpenFreeMap. When you search for a town or postal code, the text you type is sent to the Photon geocoder (Komoot, on OpenStreetMap data) to look it up; it is not linked to your account. On iOS, turning coordinates into a town name uses Apple’s geocoder. A current list with locations and transfer safeguards must be completed before launch.

Retention

• Account and content: until you delete them or your account.
• Records of purchases, refunds and payouts: ten years, as accounting law requires. If you delete your account they are kept without your profile.
• Notifications: 120 days.
• Security events: 180 days.
• Audit records of sensitive actions are kept without your identity after account deletion.

Deleting your account

You can delete your account yourself at any time, in the app (You › Settings › Delete account) or on the website at /delete-account. Deletion is immediate and permanent: your profile, saved location, saved events, RSVPs, tickets, messages, photos, friendships and blocks are removed, and events you host are cancelled and your guests are told. Tickets you paid for are lost with the account and are not refunded; if you host events with paid entry, every buyer is refunded in full. What remains carries no link to your profile: counts, records of payments (amount, date and the payment provider’s reference), and audit records of sensitive actions without your identity.

Your rights

You can access and export your data (Settings › Export my data), correct it in your profile, and delete your account as described above. You may also object to processing or lodge a complaint with the Swiss FDPIC or your local authority.

Children

Party is intended for adults (18+). We do not knowingly process data of minors.