Privacy Policy
Still to finalise before launch: add the Companies House registration number for Global Web Products Ltd, and have this policy reviewed by a qualified adviser. It is a solid, accurate starting draft, not legal advice.
This policy explains what personal data Partymetro (“we”, “us”) collects, why, and what rights you have. Partymetro is operated by Global Web Products Ltd, a company registered in England and Wales. It is written for the UK GDPR and the Data Protection Act 2018. If you have any question, email [email protected].
The short version
Partymetro is built to be private by default. You are invisible to others until you deliberately choose to share, you decide who sees you and at what precision, and your live location is held only transiently and then discarded. We do not sell your data and we do not show you advertising.
Who we are
Partymetro is a private social app for sharing presence, planning events and trips, and coordinating with people you know. It is operated by Global Web Products Ltd, a company registered in England and Wales, registered office 69 Godmans Lane, Marks Tey, Colchester CO6 1NQ, United Kingdom. We are the “controller” of the personal data described here, and our servers are hosted in the United Kingdom.
What we collect
Account
- A device key. Your device generates a cryptographic key pair; we store the public half to recognise your device. This is how you sign in — we do not require an email address or password.
- Display name, an optional handle, and an optional home city that you provide.
- Age confirmation. A record that you confirmed you are 18 or over. Partymetro is strictly for adults.
Location and presence
- Precise location is collected only while you are actively sharing (“going live”), and only from the app in the foreground. When you are Ghost — the default — no location is collected.
- Viewers only ever receive your location at the precision you chose (exact, neighbourhood, or city); coarser precisions are computed on our server so a precise position is never sent to someone not entitled to it.
- Live coordinates are held transiently in an in-memory store with a 24-hour expiry and are not written to our long-term database. Turning on Ghost or Panic Ghost removes your shared position.
- Trips (future locations you choose to share, at day-level granularity) and event check-ins you make.
Things you create
Events and their details, RSVPs, trips, reviews, shared expenses, and messages you send. Invite links you create are unguessable tokens that let someone open an event or trip page without an account.
Technical data
Like any internet service, our hosting and security providers process your IP address, device/OS type, and request logs to deliver and protect the service.
How we use your data, and our legal bases
- To provide the app — accounts, presence, plans, messaging (legal basis: performance of our contract with you).
- Location sharing happens on your explicit, revocable instruction each time you go live (legal basis: consent, and performance of the contract). You can withdraw it instantly with Ghost.
- To keep the service safe and working — preventing abuse, debugging, securing accounts (legal basis: our legitimate interests in a safe, functioning service).
Who we share it with
We do not sell your personal data and we do not use it for advertising. We share it only with service providers that help us run Partymetro, acting on our instructions:
- Fasthosts (UK) — server hosting.
- Cloudflare — content delivery, TLS, and protection against attacks.
- OpenFreeMap / OpenStreetMap — map tiles and address look-ups; when the app draws a map or resolves an address, the relevant map request is served through these.
We may also disclose data if required by law, or to protect the rights and safety of our users and the public.
International transfers
Our servers are in the UK. Some providers above may process limited technical data (such as an IP address or a map tile request) outside the UK; where they do, appropriate safeguards such as the UK International Data Transfer Agreement or adequacy decisions apply.
How long we keep it
- Live coordinates: transient, with a 24-hour expiry, and reconstructed from your next update — not archived.
- Account, events, trips and content: kept while your account exists, and deleted when you delete your account (see below).
- Logs: kept only as long as needed for security and operations.
Deleting your account
You can delete your account and its data at any time from within the app, or by request — see Delete your account. Deletion removes your account, your events and trips, your RSVPs and messages, and your device key.
Your rights
Under UK data protection law you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. To exercise any of these, email [email protected]. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk), though we’d appreciate the chance to help first.
Security
Traffic is encrypted in transit. Sign-in uses device-held keys rather than passwords, precise location is minimised and held only transiently, and access to our systems is restricted. No system is perfectly secure, but privacy is a design goal of this product, not an afterthought.
Children
Partymetro is only for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor is using the service, contact us and we will remove the account.
Changes
We may update this policy; we’ll change the date above and, for material changes, tell you in the app.
Contact
Privacy questions: [email protected]. General support: partymetro.com/support.