Privacy Policy

Who processes your data

NOW + LiveCity is operated by Michal Horňák, Slovak Republic. For privacy questions, contact info@nowlivecity.com.

Data we use

• Account: an account identifier and information required for Sign in with Apple on iPhone or Google sign-in on Android.
• Profile: display name, city, interests and an optional profile photo.
• Activities: title, category, time, capacity, visibility, note and meeting place.
• Community: attendance, invitations, connections, saved activities, availability, arrival status and kudos.
• Content: chat messages, memory photos and captions, reports and blocks.
• Notifications: notification preferences and a device identifier when remote notifications are enabled.
• Operations: essential technical records used for security, diagnostics and abuse prevention.

Institution registration

Registration for cultural centres, galleries, cinemas and other institutions is being prepared in the TEST version; new applications are currently disabled. An application will include the organization name and type, city, official website, and a contact person's name and email. We use these details to process the request and verify the representative's authority. Submission or an authority declaration in the form does not replace review by a NOW administrator.

Contact names and emails are not public. Representatives can access their own applications; authorized NOW administrators can access the details needed for review. An approved organization's name, type, city and official website may be public. Another representative gains access only after the specific NOW account accepts an invitation.

You can withdraw a pending application. Withdrawal, approval or rejection clears its contact fields from the live database; a status and decision record remains. Membership and invitation data are used to manage access, while change records help review decisions and prevent removed access from being granted again through an old request. An invitation's seven-day validity is its acceptance window, not a record deletion period. Separate retention periods for these records will be added before registration opens. Backup copies follow the process described below.

User age

NOW accounts are for people aged 16 or older. Before sign-in, the app uses your date of birth to check this threshold. The date itself is not added to your profile or sent to the server; the device only keeps a record that the check passed. Reporting and blocking are available; we will complete further protections for users aged 16 or 17 before public launch. If we learn that an account is used by someone under 16, we restrict access and handle the data under applicable rules.

Location, photos and calendar

Your iPhone location is optional. The app uses it on your device to show distance from activities and does not display it to other people. The meeting location selected by an activity host is stored on the server.

On Android, access to your phone's location is optional. If you allow it, the app uses your location on the device to filter activities by distance; it does not send your phone's current location to the server or show it to other people. The map displays meeting places entered by activity hosts. Coordinates of an entered meeting place may be stored on the server according to the activity settings. Android map tiles are loaded from MapTiler (OpenStreetMap map data), which may receive your IP address and technical connection data as part of the network request.

You deliberately choose photos through the system photo picker on iPhone or Android. Your profile photo is visible under the profile access rules; activity memories are limited to authorised participants. NOW writes an activity to your calendar only when you ask and does not read your calendar.

Why we use data

We process data to create and operate your account, show relevant activities, coordinate participants, deliver the notifications you choose, provide support, moderate content and keep the service safe. We process data needed for accounts and core features to provide the service; security and abuse prevention are based on legitimate interests; and any processing required by law is based on legal obligations. If a new optional feature requires consent, we will ask for it separately and provide a way to withdraw it. Signing in is not treated as blanket consent to all processing.

We do not sell personal data or use it for advertising profiles.

Service providers

We use trusted providers to operate the service: Supabase for authentication, databases and file storage; Websupport to send sign-up, email confirmation and password recovery emails; OpenAI (Sites) to host the website; Cloudflare for the website, operational monitoring and encrypted backups, and Cloudflare Turnstile to protect sign-up and sign-in from automated abuse (it processes technical device and connection data during the check); GitHub Actions to create automated backups; Apple for sign-in, system notifications, maps and calendar features on iPhone; Google for Android sign-in and Firebase Cloud Messaging for remote notifications in supported Android versions; and MapTiler for Android map tiles (map data © OpenStreetMap contributors). Providers process data only as needed to deliver their services and under their contractual and legal obligations.

When remote notifications are enabled, Google Firebase processes a technical installation identifier and a delivery address for the device. NOW links that address to the signed-in account. The delivered message contains technical identifiers and an expiry time, without chat text, names, activity titles or location. The app loads details only after verifying sign-in. We do not use Firebase Analytics. You can disable notifications in the app or device settings.

If you choose to open directions in Google Maps, you pass the meeting destination to Google by deliberately opening that service. The website does not use advertising tracking.

Retention

We keep account data and content while you use the account or until you delete it. We may retain safety reports for as long as needed to investigate incidents, prevent abuse and meet legal duties. After account deletion, data is removed from the live service; technical completion may continue on the server. Encrypted backup copies expire through the rolling recovery cycle and are used only to restore the service. If a backup is restored, deletion requests are applied again.

Your choices and rights

• You can edit or remove profile details and your photo in the app.
• You can change location, photo, calendar and notification permissions in your device settings when your app version uses them.
• You may request access, correction, deletion, restriction, portability or object to processing.
• You may complain to the Slovak Data Protection Authority.

Exercise these rights at info@nowlivecity.com. We may reasonably verify that a request relates to your account before disclosing or deleting data.