Privacy Policy

1. Overview

Townbeat ("we", "the app") is a social event discovery platform. This Privacy Policy explains what personal data we collect, why, and the rights you have. By using the app, you agree to this policy.

2. Data We Collect

Account: username, first/last name, email, phone number.

Profile: bio, city, profile photo.

Location: used to show nearby venues and validate check-ins (while-in-use only).

Content: comments, travel-companion posts, check-in photos, direct messages (not end-to-end encrypted; readable server-side).

Device: FCM token (push), OS version, device model (diagnostics).

Usage: events you join, like, save, and venues you check in to.

3. Purpose

• Create and manage your account

• Show events and venues near you

• Enable social interactions with users you follow

• Run the check-in + rewards system

• Detect fake accounts and mock locations (security)

• Manage VIP subscriptions

• Deliver important announcements

4. Data Sharing

We do NOT share your personal data with third parties for marketing. Shared with:

• Firebase (Google LLC) — auth, database, push, hosting

• Google Places — nearby venue data (location goes through a proxy; API keys are never leaked to the client)

• Legal obligations (court orders, lawful requests)

5. Data Retention

We retain data while your account is active. When you delete your account:

• Profile, comments, check-ins, messages, and photos are permanently deleted within 24 hours.

• Reports and legal records (fraud, violations) may be retained anonymized for up to 1 year.

To delete your account: Settings → Delete Account.

6. Your Rights (GDPR & KVKK)

• Access your data

• Request correction

• Request deletion (via the in-app flow)

• Object to processing

• Data portability

Requests: info.townbeat@gmail.com

7. Age Requirement — 15+

Per Türkiye's social media regulations, Townbeat is not available to users under 15. Age confirmation is required at registration. Accounts identified as belonging to users under 15 are deleted immediately. Parents/legal guardians may report such accounts to info.townbeat@gmail.com.

8. User-Generated Content Moderation

Townbeat enforces a zero-tolerance policy for objectionable user-generated content (comments, messages, posts, profiles). Strictly prohibited:

• Harassment, bullying, threats, hate speech

• Sexual content, obscenity, child exploitation material

• Violence, terrorism propaganda

• Fraud, fake profiles, identity theft

• Spam, unauthorized commercial promotion

• Copyright infringement

Report & review:

• Every UGC element (comment, DM, post, user, event) can be reported in-app with a single tap.

• Reports are reviewed within 24 hours with appropriate action (content removal, account suspension, or permanent ban).

• For urgent matters, email info.townbeat@gmail.com directly.

• An automated profanity filter runs in real time.

• Users you block can no longer see your profile, comments, or messages.

9. Security

We use Firebase Security Rules for access control, App Check for bot protection, HTTPS for transport, and Firebase Storage rules for file access. No system is 100% secure — please use a strong password.

10. Changes to this Policy

When we update this policy, we change the "Last updated" date and announce material changes via in-app notification or email.

11. Contact

Questions: info.townbeat@gmail.com

Data Controller: Townbeat Team