Privacy Policy — Festival Toilet App

Last Updated: April 15, 2026

1. Introduction

Welcome to the Festival Toilet App, operated by Asteral Design ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"), available on Android.

By downloading, installing, or using the App, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

2. Information We Collect

2.1 Information You Provide Directly

Account Information: When you create an account, we collect your name, email address, phone number, and password. Phone numbers are verified via OTP during sign-up.
Toilet Reviews & Feedback: Ratings across categories (cleanliness, odour, water availability, hand sanitiser, accessibility, locking system, toilet roll, environmental friendliness), along with any photos you upload and your username.
User-Submitted Toilets: If you add a new toilet location, we collect the GPS coordinates, what3words address, toilet type, and associated festival.
User-Generated Content: Posts, comments, likes, and chat messages you create or share within the App's social and messaging features.
Media: Photos and videos you upload for posts, reviews, or chat messages.

2.2 Information Collected Automatically

Location Data: With your permission, we collect precise GPS location data to display nearby toilets on the map, provide directions, and convert coordinates to what3words addresses. Location is collected only when the App is in use and you have granted permission.
Push Notification Tokens: When you enable notifications, we collect your Firebase Cloud Messaging (FCM) token to deliver push notifications about messages, festival updates, and other relevant alerts.
Online Status: Basic presence information (online/offline and last seen) to support chat functionality.

3. How We Use Your Information

We use the information we collect for the following purposes:

Provide and Maintain the App: To create and manage your account, display toilet locations and reviews on the map, deliver festival content (news, events, performances, schedules), and enable chat and social features.
Location Services: To show nearby toilet facilities, provide navigation directions, and resolve coordinates to what3words addresses.
Communications: To send push notifications about messages, festival updates, and other App-related alerts.
Phone Verification: To verify your phone number via SMS one-time passcode during sign-up.
Safety and Security: To detect, prevent, and address fraud, abuse, and technical problems.
Improvements: To improve App features, performance, and user experience.

4. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

4.1 With Other Users

Your username, reviews, ratings, posts, comments, and any content you publish are visible to other App users.
Chat messages are visible only to participants of the respective conversation.

4.2 With Service Providers

We use the following third-party services to operate the App:

Service	Provider	Purpose
Firebase Authentication	Google LLC	Phone number verification (SMS OTP)
Cloud Firestore	Google LLC	Cloud database for chat, posts, and user data
Firebase Cloud Storage	Google LLC	Media file storage (photos, videos)
Firebase Cloud Messaging	Google LLC	Push notification delivery
Google Maps Platform	Google LLC	Map display and navigation
what3words	what3words Ltd	Location-to-address conversion

These providers process data on our behalf and are bound by their own privacy policies and data protection obligations.

4.3 For Legal Reasons

We may disclose your information if required to do so by law, in response to valid legal process, to protect the rights, property, or safety of our users or the public, or to enforce our Terms of Service.

5. Data Storage and Security

Cloud Storage: Your account data, posts, messages, and media files are stored on Google Firebase infrastructure (Cloud Firestore and Firebase Cloud Storage), hosted on servers managed by Google LLC.
Backend Server: Account details, festival data, toilet information, reviews, and feedback are stored on our secure backend servers.
Local Storage: Certain data is stored locally on your device, including your login session, notification preferences, and cached images. This data is cleared when you log out or uninstall the App.
Security Measures: We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS) and secure token-based authentication.

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Account Deletion

You can permanently delete your account and all associated data through the App. Account deletion removes your profile information, posts, chat history, and authentication credentials from our servers and Firebase. This action is irreversible.

6.2 Location Permissions

You can grant or revoke location access at any time through your device's system settings. The App will request permission before accessing your location.

6.3 Camera and Photo Library

Camera and photo library permissions are requested only when you initiate an action that requires them (e.g., uploading a review photo or sharing media in a post). You can revoke these permissions at any time through your device settings.

6.4 Push Notifications

You can enable or disable push notifications through your device's notification settings.

6.5 Data Access

If you are in the EEA, UK, or another jurisdiction with applicable data protection laws, you may request access to, correction of, or deletion of the personal data we hold about you by contacting us at the address below.

7. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us immediately.

8. Third-Party Links and Services

The App may contain links to third-party websites or services (such as Google Maps for directions or festival websites). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the App.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the App's services. If you delete your account, we will delete or anonymise your personal information within a reasonable timeframe, except where retention is required by law or for legitimate business purposes.

Locally cached data is automatically cleared upon logout or app uninstallation.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App and updating the "Last Updated" date at the top of this document. Your continued use of the App after such changes constitutes your acceptance of the revised Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Festival Toilet App
Email: jameswaudby@thefestivalapps.com

This Privacy Policy is effective as of April 15, 2026.