The Short Version
- • We only collect what we need to run Loft
- • Our primary database is hosted in the EU (Ireland)
- • Some providers may process data outside the UK/EU with safeguards
- • We never sell your personal information
- • You can delete your account anytime
Who We Are
Loft (Loft Meetups Ltd, United Kingdom) is the data controller for personal data processed through the Loft app and website. We operate under UK GDPR and, where applicable, the EU GDPR.
What We Collect
Account Information
- • Email address (for login and notifications)
- • Name (your public identity)
- • Date of birth (to verify you're 18+)
- • Gender (for group matching preferences)
- • Optional profile fields (bio, pronouns, languages, going-out style)
- • Profile photo (optional)
Location Data
- • City (to show relevant events)
- • Pre-meet locations (when you set a meetup spot)
We do not do continuous background location tracking. We use one-time location checks when you request them and we store your selected city/area in your profile.
Group Chat Messages
- • Messages you send in pre-meet groups
- • Timestamps of messages
Messages are visible only to group members. We may review messages if reported for safety violations.
Technical & Service Data
- • App analytics events and usage metadata
- • Crash/error diagnostics and session replay samples
- • Device push-notification tokens
- • OAuth tokens for connected ticketing accounts (when you connect them)
How We Use Your Data (Legal Bases)
- 1.Service delivery (contract): account access, event discovery, groups, chat, and profile features
- 2.Safety (legitimate interests/legal obligations): moderation, reporting, abuse prevention, and legal compliance
- 3.Notifications (contract/consent): in-app and push notifications about your events and groups
- 4.Product improvement (legitimate interests): analytics, diagnostics, and performance monitoring
Who Sees Your Data
We never sell your personal data.
- • Other users: See the profile information your visibility settings allow
- • Group members: See your profile and messages in shared groups
- • Service providers: Supabase, PostHog, Sentry, Google Firebase Cloud Messaging, Google Places, and mapping/place data endpoints
- • Law enforcement: Only with valid legal requests
International Transfers
Our core application database is hosted in the EU region (Ireland, eu-west-1). Some supporting providers may process data outside the UK/EU. Where required, we use appropriate transfer safeguards (such as standard contractual clauses) and vendor controls.
How Long We Keep Data
- • Account data: Until you delete your account
- • Messages/reports/moderation data: Retained while needed for safety, abuse prevention, and legal obligations
- • Connected ticketing tokens: Until disconnected, replaced, expired, or account deletion
- • Device notification tokens: Until removed, replaced, stale, or account deletion
- • Analytics/crash logs: Retained according to provider retention settings and our operational needs
Age Requirement
Loft is strictly for users aged 18 and over. We collect date of birth during sign-up to verify this. If we discover an account belongs to someone under 18, we will immediately suspend and delete it.
Cookies & Analytics
We use local storage/session storage and similar technologies for authentication, app state, and analytics. We use PostHog for product analytics and Sentry for crash/error diagnostics (including sampled replay). We do not sell personal data or run third-party ad networks.
Your Rights (UK/EU GDPR)
You may have rights to access, correct, delete, restrict, object to processing, and data portability, plus the right to withdraw consent where processing is based on consent.
You can contact us at support@loftevents.org to exercise these rights. You may also complain to the UK Information Commissioner's Office (ICO) or your local EEA supervisory authority where applicable.
Policy Updates
We may update this policy occasionally. If we make significant changes, we'll notify you via email or in-app notification. Continued use of Loft after changes constitutes acceptance of the updated policy.
Questions?
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
support@loftevents.org