NightLive — Privacy Policy

Last updated: 4 September 2026

1. Who we are

NightLive is operated by an individual trader based in the United Kingdom. For any privacy query or request, contact support@nightlive.co.uk.

2. What we collect

• Your university email address — used to verify you're an Exeter student, and as your account identifier.
• Your phone number — collected at signup, used as a basic identity/anti-abuse signal.
• Your date of birth — collected once at signup, used only to confirm you are 18 or older.
• Ticket images you upload — stored to allow the buyer to view the ticket they purchased, and to check for duplicate/fraudulent listings. A seller's access to an image is removed once that ticket is sold.
• Transaction and listing data — what you've listed, bought, and the associated prices and dates.
• Reports you submit — if you report a problem with a purchase, we store the report, any evidence you choose to provide, and its resolution.

We do not collect or store your payment card details — these are handled entirely by Stripe, our payment processor.

3. Who we share data with

We use a small number of third-party services to operate NightLive, each acting as a data processor on our behalf:

• Supabase — hosts our database and handles authentication.
• Stripe — processes payments and payouts, and handles the identity verification required for sellers to receive money.
• Resend — sends account verification emails.
• Expo — delivers push notifications, if you've enabled them.
• Cloudflare — provides bot and abuse protection on our sign-up form (Cloudflare Turnstile), which involves processing limited technical signals about your device/browser to distinguish genuine users from automated abuse.

We do not sell your data to advertisers or third parties, and we do not use it for advertising.

4. Why we process your data

• To verify you're eligible to use NightLive (a current Exeter student, 18 or older)
• To facilitate ticket transactions between buyers, sellers, and event organizers
• To detect and prevent fraud and abuse (duplicate ticket detection, reported violations, bot protection)
• To process payments and payouts
• To contact you about your account, a transaction, or a report you've made

5. How long we keep it

We retain account and transaction data for as long as your account is active, and for a reasonable period afterward to meet financial record-keeping obligations and to resolve any outstanding disputes or reports.

You can delete your account and personal data at any time directly within the app (Profile → Delete my account), or by contacting support@nightlive.co.uk. On deletion, your personal identifying details are anonymised; certain transaction records are retained in anonymised form for financial and legal record-keeping.

6. Your rights

Under UK GDPR, you have the right to: - Access the personal data we hold about you - Request correction of inaccurate data - Request deletion of your data, subject to our legal obligation to retain certain transaction records - Object to or restrict certain processing

To exercise any of these rights, email support@nightlive.co.uk or use the in-app account deletion option.

7. A note on phone number verification

Your phone number is currently collected but not verified by SMS. We may introduce SMS verification in future if it becomes necessary — this policy will be updated if so.

8. Children's privacy

NightLive is not intended for use by anyone under 18. We verify age at signup and do not knowingly collect data from anyone under 18.

9. Changes to this policy

We may update this policy from time to time. Continued use of the app after an update means you accept the revised policy.

10. Contact

support@nightlive.co.uk