Legal

Privacy Policy

Effective date: October 18, 2026

Tixxy ("we", "us") helps you track events and tickets, and coordinate with friends about who's going. This policy explains what we collect and why.

What we collect

• Account info — email address, and (if you sign in with Apple or Google) your name, in order to create and secure your account.
• Profile info — username, display name, and avatar photo you choose to add.
• Content you add — events and tickets you save (venue, date, seat, notes), and any ticket photos you upload from your camera or photo library.
• Google Calendar (optional) — if you connect Google Calendar, the access Google grants tixxy, stored encrypted, and for each show you add, the ID of the calendar entry tixxy created and a link to it. See Google Calendar below.
• Social info — your friends list, event invitations you send or receive, and who's attending an event, so we can show that to you and to the friends you're connected with.
• Location — if you allow it, your device's current location, used only to suggest nearby cities when you search for events. Your coordinates are turned into a city name by your phone's built-in geocoding service (Apple's on iPhone) and are never sent to our servers; we store only the city name you search for, on your device. If you then search in that city, the city name is sent with the search so we can find events there.
• Feedback — anything you submit through in-app feedback, along with app version and platform, so we can act on it.
• Usage analytics — how the app is used, so we can tell what works and what to fix. This is on by default, and you can turn it off at any time in Settings → Share usage data. When it's on, we record:
  • which screens you open, and which buttons and controls you tap — identified by labels we assign in the app's code, never by the text on screen;
  • internal IDs and counts for what you acted on (for example, an event's internal ID, or how many search results came back);
  • your app version and build number, and whether you're on a phone or tablet.

  These records are linked to your account's internal ID, so we can understand usage over time. They never include anything you type — search terms, event names, notes, seat details or invite links — and never your email address, name or username. Our analytics provider, PostHog, also uses your IP address to estimate your approximate location (country and city), which is stored with these records.

We don't collect advertising identifiers, we don't use analytics for advertising or to track you across other companies' apps and websites, and we don't sell your data.

How we use it

To run the app: authenticate you, show your events and tickets, connect you with friends, and let you search for events. Usage analytics are used only to understand and improve the app. Nothing is used for advertising.

Google Calendar

Connecting Google Calendar is optional. You turn it on in Settings → Google Calendar, or the first time you tap Add to Google Calendar on a show, and Google asks for your permission before tixxy gets any access.

• What tixxy asks for: permission to see, add, change and delete events on calendars you own (Google's calendar.events.owned permission), the narrowest permission that lets tixxy add shows to your calendar. When asking, tixxy passes your email address to Google so it can suggest the right account.
• What tixxy does with it: adds the shows you choose to your primary calendar, with the show's name, artist, date and time, venue, city, your seat and how many tickets you've saved. When you change a show's seat or tickets, tixxy updates that entry, and when you delete the show, tixxy removes it. Tixxy never reads, changes or deletes any other event in your calendar.
• What tixxy stores: the access Google grants (a refresh token, encrypted before it is stored), and for each show you added, the ID of its calendar entry and a link to it. Nothing else from your calendar is stored.
• Who sees it: only you. Your Google Calendar data isn't shown to other tixxy users, isn't shared with our other service providers beyond Supabase storing it, and is never used for advertising or analytics.
• Turning it off: switch off Settings → Google Calendar. Tixxy revokes its access with Google, so it disappears from your Google Account's list of connected apps, and deletes the stored access. Shows already added stay in your calendar until you delete them there. Deleting your tixxy account revokes the access the same way.

Tixxy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar data only to provide the feature described above. We don't transfer it to anyone except as needed to provide that feature or as the law requires, we never use it for advertising, and no person at tixxy reads it unless you ask us to (for example, for support), it's needed for security, or the law requires it.

Sharing

• With other users: friends and people you invite to an event can see the event details and your attendance, per the visibility rules in the app (e.g. pending invitees only see who invited them).
• With service providers:
  • Supabase stores and processes your data (our database, auth, and file storage provider).
  • PostHog receives the usage analytics described above, on servers in the EU, unless you've turned them off.
  • Ticketmaster receives the artist names you search for, and Google (Places) receives what you type into the venue field, so they can return listings and suggestions. These requests go directly from your device, so these companies also see your IP address, but not your account details.
  • Google (Calendar) receives the details of the shows you add to Google Calendar, if you connect it, as described in Google Calendar above.
  • Spotify serves the artist previews shown on event pages. Spotify loads them directly onto your device, so it sees your IP address and device information under its own privacy policy.
• We never sell your data, and only disclose it to comply with the law.

Your choices

You can edit or delete your saved events, tickets, and profile info at any time in the app.

Usage analytics. Turn off Settings → Share usage data and the app sends one final event recording that you opted out, then stops sending usage analytics. The setting is remembered on your device.

Deleting your account. You can delete your account from inside the app: open Settings, tap Delete Account, and type DELETE to confirm. This is immediate and permanent — your account, events, tickets, uploaded photos, friendships, and any invitations you sent are erased, and it cannot be undone. If you connected Google Calendar, tixxy's access to it is revoked with Google too. Friends keep their own copies of events you shared with them. If you can't reach the in-app option, email hello@itstixxy.com and we'll delete your account within 30 days.

Children

Tixxy is not directed at children under 13, and we don't knowingly collect data from them.

Security

Data is encrypted in transit and at rest via our provider (Supabase). No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information.

Changes

If we materially change this policy, we'll update the effective date above and notify you in the app.

Contact

Questions, or want your data deleted? Email hello@itstixxy.com.