Privacy Policy

SwipeTix (“SwipeTix,” “we,” “us”) operates the SwipeTix web application at swipetix.app, a discovery service for shows at small music venues in the Denver and Boulder metro areas. For privacy law purposes we are the controller of the personal data described here.

SwipeTix is currently in private beta. Features and data practices may change; we will update this page and its “last updated” date when they do.

We collect only what the product needs to work. Specifically:

• Email address — when you sign in or join the waitlist. This is your account identifier.
• Precise location (latitude and longitude)— only if you tap “Use my location” and grant your browser's permission prompt. See section 3, which explains this in detail.
• Your preferences — the genres you pick, your maximum ticket price, your search radius, and which nights you can go out.
• Your swipes — which shows you saved (swiped right) or passed on (swiped left), so we can show you your saved shows and improve recommendations.
• Basic technical data — our host (Vercel) logs IP addresses, browser type, and request times as part of serving and securing the site. We use these for security and debugging, not to profile you.
• Optional note— anything you type into the “what brings you here” field on the waitlist form.

We do not collect payment information, contacts, photos, microphone or camera access, or advertising identifiers. We do not use third-party analytics or advertising trackers, and we do not embed social media pixels.

Location is the most sensitive thing we handle, so here is exactly how it works.

• It is strictly opt-in.We never request location on page load. Nothing happens until you tap the “Use my location” button, and your browser or phone then shows its own permission prompt, which you can decline.
• What we store.A single pair of coordinates — your chosen “home base” — attached to your account. We overwrite it each time you set it again.
• What we do NOT store. We do not keep a location history, we do not track you in the background, and we do not record your location as you move. Location is read once, when you ask for it.
• What we use it for. One purpose only: calculating how far each venue is from you, so the feed can rank and filter shows by distance. It is never used for advertising or shared with venues.
• If you decline. The app works fine. We fall back to downtown Denver as a default home base, and you can keep using every feature.
• How to revoke it. Clear the permission in your browser or phone settings at any time, and email us to erase the stored coordinates.

Colorado and California residents: precise geolocation is classified as sensitive data under the Colorado Privacy Act and as sensitive personal information under the CCPA/CPRA. We treat it that way: we process it only with your affirmative opt-in consent, only for the distance-sorting purpose described above, and we do not sell it or use it for targeted advertising or profiling.

• To authenticate you and keep you signed in.
• To rank and filter the show feed by your genres, price, distance, and nights.
• To save the shows you swipe right on and show them back to you.
• To email you about your waitlist invite or important account and service notices.
• To debug, secure, and improve the service.

We do not use your data to train machine-learning models. Our AI usage (Google Gemini) processes publicly available venue web pages during our show-scraping pipeline — never your personal data.

Where the GDPR or UK GDPR applies, we rely on: consent for precise location and marketing email; contract for the account and core features you asked us to provide; and legitimate interests for security, abuse prevention, and service improvement.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We use a small number of service providers (processors) who handle data on our instructions:

• Supabase — our database host (United States). Stores your account, preferences, home coordinates, and swipes.
• Vercel — application hosting and request logs.
• Resend — sends the waitlist and account emails. Receives your email address only.

We may also disclose data if legally required, or to protect the rights and safety of our users or the service. If SwipeTix is ever acquired, we will notify you before your data is transferred to a successor.

We keep account data while your account exists. If you delete your account we remove your email, preferences, home coordinates, and swipes within 30 days, except where we must retain something to comply with the law. Waitlist entries are kept until you ask us to remove them or we retire the waitlist. Server logs roll off on our hosts' standard schedules.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you, and get a portable copy.
• Correct anything inaccurate.
• Delete your data.
• Withdraw consent — including revoking location access — at any time.
• Opt out of the sale or sharing of personal data, and of targeted advertising and profiling (we do none of these).
• Appeal a decision we make about your request, and to contact your state attorney general if you disagree with the outcome.

To exercise any of these, email hello@swipetix.app from your account address. We respond within 45 days. We will not discriminate against you for exercising a privacy right.

All traffic is encrypted in transit over HTTPS. Sign-in uses a signed, HTTP-only session cookie, so it cannot be read by scripts in your browser. Data at rest lives in our database provider's managed, access-controlled infrastructure. No system is perfectly secure, and we cannot guarantee absolute security — but we limit what we collect precisely so there is less to lose.

SwipeTix is not directed to children under 13, and we do not knowingly collect their personal data. Some venues we list are all-ages; that does not change this policy. If you believe a child under 13 has given us data, email us and we will delete it. Users between 13 and 18 should have a parent or guardian review this policy.

We will post any changes here and update the date above. For material changes affecting how we use location or share data, we will give you notice in the app or by email before the change takes effect.