Privacy Policy

Oso Plaza ("we," "us," "our") is the live-music social app that lets you check into shows and collect the room of everyone else who came. This policy explains what we collect, why, and what you can do about it. It applies to the Oso Plaza iOS app and osoplaza.com.

What we collect

Account & profile

• Email address (used to sign in; passwords are stored hashed by our auth provider, never visible to us).
• Profile details you choose to enter: handle, display name, avatar photo, account type, scene tags (music genres), social handles, anthem (a Spotify track you pick).

Content you create

• Photos, videos, posts, comments, stories, and room messages.
• Check-ins (which shows you went to, and the public RSVPs you make).
• Follows, likes, blocks, and reports you file.
• Direct messages and group messages you send.

Device permissions (only when you grant them)

• Location: used in-session to surface shows near you in Discover. We do not store your precise coordinates persistently.
• Camera & photo library: used when you choose to add a photo or video to a story, memory, or post.
• Microphone: used only when you record a video for a story.
• Push notifications: we store an anonymous push token from Apple so we can deliver notifications you've opted in to.

Automatically collected

• App version and operating system version for crash and compatibility diagnostics.
• Basic outbound click events on "Get tickets" buttons (which show, when), so we can measure interest in shows.

What we don't collect

• We do not access your contacts.
• We do not collect health, fitness, or financial information.
• We do not track your background location.
• We do not sell your personal information to third parties.
• We do not use advertising identifiers for ad targeting.

How we use information

• Provide the core app experience: showing shows, surfacing your room, delivering notifications you've opted in to, displaying your profile.
• Keep the community safe: review reports, action policy violations, prevent spam and abuse.
• Improve the product: diagnose crashes, fix bugs, understand which features are used.

Who we share with

We share information only with vendors that operate the app on our behalf:

• Supabase — our database, authentication, and storage provider.
• Expo (Push) — delivers push notifications.
• Spotify — used to fetch track previews and artist info when you pick an anthem or view a show. No personally identifying data is sent to Spotify beyond what's needed for the API call.
• Ticketmaster Discovery API — used to surface live show data. No personal data is sent.

We may share information when required by law (subpoena, court order), when needed to protect the safety of users or the public, or when investigating fraud or abuse.

What other users see

Your profile is public by default — your handle, display name, avatar, scene tags, anthem, and posts/photos with "public" visibility can be seen by anyone using the app (including signed-out guests browsing Discover). Check-ins to a show are visible to other people who shared that show. Direct messages are visible only to the conversation participants.

Your choices

• Edit or delete content: any post, photo, story, comment, or room message you create can be deleted from inside the app.
• Privacy of memories & posts: set individual items to "private" so only you can see them.
• Block users: blocking hides their content and prevents contact.
• Report content: every photo, post, story, comment, profile, and DM has a Report option. Admins review reports within 24 hours.
• Notification preferences: Settings → Notifications lets you opt out of any notification type.
• Delete your account: email support@osoplaza.com from your account email and we will permanently delete your account and all associated content within 30 days.

Data retention

We keep your data for as long as your account is active. When you delete your account, we permanently remove your profile, posts, photos, stories, messages, and reactions within 30 days. Some aggregated/anonymized analytics may be retained longer.

Security

Data is encrypted in transit (HTTPS) and at rest on our infrastructure. We use industry-standard access controls. No system is perfectly secure — if we discover a breach affecting your data, we will notify you in accordance with applicable law.

Children

Oso Plaza is not directed at children under 13 and we do not knowingly collect personal information from them. The App Store age rating for Oso Plaza is 12+ due to user-generated content. If you believe a child under 13 has provided us information, email support@osoplaza.com and we will delete it.

International users

Oso Plaza is operated from the United States. By using the app you consent to the transfer of your information to the U.S. for processing.

Changes to this policy

We may update this policy. We'll post the new version here and update the "Last updated" date above. Material changes will be communicated in the app.

Contact

Questions, requests, or concerns about this policy or your data: support@osoplaza.com.