Privacy Policy
1. Controller
The controller responsible for the processing of personal data in connection with RESVP is:
Jeremy Senktas
Stargarder Str. 26
33699 Bielefeld
Germany
Email: support@getresvp.app
In this Privacy Policy, “RESVP”, “we”, “us”, and “our” refer to the controller identified above.
2. Scope of this Privacy Policy
This Privacy Policy explains how personal data is processed when you use the RESVP iOS application, the website at getresvp.app, and related support services.
RESVP is a location-based music discovery and social application. Users can share music and moods connected with their current area, discover nearby activity, interact with other users, and exchange messages.
3. Categories of personal data
Depending on how you use RESVP, we may process the following categories of personal data:
a. Account and authentication data
This may include your user ID, email address, authentication provider, authentication tokens or identifiers, account creation date, and account status.
If you use Sign in with Apple, Apple may provide an identifier, your name, and either your email address or an Apple private relay address, depending on the choices you make with Apple.
Passwords are handled through the authentication provider and are not stored by us in readable form.
b. Profile data
This may include your username, display name, profile image, biography, and other information you choose to make available through your profile.
Public profile information may be visible to other RESVP users.
c. Music and activity data
This may include songs, artists, artwork references, streaming links, moods, timestamps, likes, resonates, comments, replies, and other interactions with content.
d. Location data
When you grant location permission, RESVP may process your device location to provide nearby music discovery and location-related sharing.
RESVP is designed to associate shared content with an approximate geographic zone rather than publicly displaying your precise coordinates. Location zones are currently based on areas of approximately 750 metres. Depending on your position within a zone and the information shown in the app, other users may still be able to draw approximate conclusions about your location.
You should only share when you are comfortable revealing your approximate area. You can disable location access at any time in your iOS settings, although location-dependent features may then be unavailable.
e. Communications and user-generated content
This may include direct messages, song messages, comments, replies, reports, support messages, and other content you submit.
Direct messages are intended for the participants in the relevant conversation. They are not end-to-end encrypted. They may be stored and processed by our infrastructure and may be accessed when reasonably necessary for security, support, abuse prevention, enforcement of our Terms, or compliance with legal obligations.
f. Subscription and transaction data
When you purchase or restore a subscription through Apple, we may receive transaction and entitlement information such as product identifier, subscription status, purchase or renewal date, expiration date, trial or offer status, and an app-specific purchaser identifier.
We do not receive or store your complete payment-card information. Payments are processed by Apple.
g. Technical and security data
This may include device and operating-system information, app version, language, time zone, IP address, request timestamps, crash or diagnostic information, security events, and information required to prevent misuse and operate the service.
h. Website and support data
When you visit getresvp.app, hosting providers may process technical request data such as IP address, date and time, requested page, referrer information, browser information, and server logs.
If you contact us, we process your contact details, message, and any information you provide to respond to your request.
4. Purposes and legal bases
We process personal data for the following purposes and legal bases:
- To create and administer your account, provide app functionality, display content, enable interactions, manage subscriptions, and provide support: performance of a contract or steps requested before entering into a contract under Article 6(1)(b) GDPR.
- To process location after you grant the relevant iOS permission and to provide optional location-based functionality: performance of the service requested by you under Article 6(1)(b) GDPR and, where legally required, your consent under Article 6(1)(a) GDPR.
- To operate, secure, troubleshoot, and improve RESVP, prevent fraud and abuse, enforce our Terms, and protect users and the service: our legitimate interests under Article 6(1)(f) GDPR.
- To comply with tax, accounting, regulatory, law-enforcement, and other legal obligations: Article 6(1)(c) GDPR.
- To send optional communications or use optional analytics where consent is legally required: Article 6(1)(a) GDPR. You may withdraw consent at any time with future effect.
Where processing is based on legitimate interests, those interests include maintaining a secure and functional service, understanding technical performance, preventing misuse, protecting legal rights, and responding to users.
5. Public content and other users
Your public profile, shares, moods, comments, replies, and social interactions may be visible to other users. Information that you make public may be copied, captured, or shared by others outside our control.
Please do not publish personal or sensitive information that you do not want others to see.
Blocking another user limits interactions within the functionality provided by RESVP, but it cannot guarantee that previously shared or externally copied information will disappear.
6. Service providers and recipients
We use service providers where necessary to operate RESVP. These may include:
- Google Firebase and Google Cloud for authentication, databases, file storage, backend functions, security, diagnostics, and related infrastructure;
- Apple for Sign in with Apple, StoreKit and App Store subscriptions, Apple platform services, and music-related integrations used by the app;
- RevenueCat for subscription entitlement and purchase-status management;
- Cloudflare for website hosting, content delivery, network security, and related technical services;
- professional advisers, authorities, courts, or law-enforcement bodies where disclosure is required by law or reasonably necessary to establish, exercise, or defend legal claims.
These providers process data under their own terms or on our behalf, depending on the service and legal context.
We do not sell your personal data.
7. International data transfers
Some recipients or their affiliated infrastructure may be located outside Germany or the European Economic Area.
Where personal data is transferred to a country without an adequacy decision, we rely on an applicable transfer mechanism, such as the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where required. A provider may also rely on an applicable adequacy framework or other legally recognised transfer mechanism.
You may contact us for further information about the safeguards relevant to your data.
8. Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.
In particular:
- account and profile data is generally retained while your account remains active;
- public content and communications are generally retained until deleted, removed, or no longer required to provide the service;
- subscription and transaction records may be retained for the duration required to administer entitlements and comply with legal, tax, accounting, fraud-prevention, and dispute-resolution obligations;
- support correspondence is retained for as long as necessary to handle the request and any related legal issues;
- technical, security, and server logs are retained for a limited period appropriate to security, troubleshooting, and abuse prevention;
- reports, moderation records, and evidence of misuse may be retained where necessary to protect users, enforce our Terms, prevent repeat abuse, or establish, exercise, or defend legal claims.
When you delete your account, we initiate deletion or anonymisation of personal data associated with it, subject to technical processing time and data that must be retained for legal, security, fraud-prevention, dispute-resolution, or backup purposes. Residual copies may remain temporarily in protected backups until they are overwritten in the ordinary backup cycle.
Content involving other users may require limited residual records to preserve conversation integrity, enforce safety measures, or document transactions. Deleted messages may be represented by a neutral deletion notice rather than disappearing without a trace from the conversation.
9. Account deletion
You can request deletion through the account-deletion function available in the app or by contacting support@getresvp.app.
Deleting your RESVP account does not cancel an Apple App Store subscription. Subscriptions must be managed separately through your Apple account settings.
10. Your data protection rights
Subject to the applicable legal requirements, you may have the right to:
- obtain information about and access your personal data;
- correct inaccurate or incomplete personal data;
- request deletion of personal data;
- request restriction of processing;
- receive data you provided in a structured, commonly used, machine-readable format and, where applicable, transmit it to another controller;
- object to processing based on legitimate interests;
- withdraw consent at any time with future effect; and
- lodge a complaint with a data protection supervisory authority.
To exercise your rights, contact support@getresvp.app. We may need to verify your identity before completing a request.
You may lodge a complaint with a supervisory authority, including the authority responsible for North Rhine-Westphalia:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW) https://www.ldi.nrw.de/
You may also contact the supervisory authority in the EU or EEA country of your habitual residence, place of work, or the place of the alleged infringement.
11. Children and minimum age
RESVP is intended only for users aged 16 or older.
If we learn that personal data has been submitted by a person below the minimum age contrary to our Terms, we may suspend or delete the account and take appropriate steps to remove the data.
If you believe that a person below the minimum age is using RESVP, contact support@getresvp.app.
12. Security
We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
No internet-based service can guarantee absolute security. You are responsible for protecting access to your device and account and for notifying us if you suspect unauthorised use.
13. Automated decision-making
We do not currently use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you within the meaning of Article 22 GDPR.
14. Changes to this Privacy Policy
We may update this Privacy Policy when the service, providers, or legal requirements change.
We will publish the updated version with a revised effective date. Where required, we will provide additional notice or request consent.
15. Contact
For privacy questions or requests:
Jeremy Senktas
Stargarder Str. 26
33699 Bielefeld
Germany
Email: support@getresvp.app