Privacy Policy
TheFestival App
Last Updated: April 14, 2026
1. Introduction
Welcome to The Festival App , operated by Asteral Design ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"), available on iOS and Android.
By downloading, installing, or using the App, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: When you create an account, we collect your name, email address, phone number, and profile photo. You may sign up using email/password, phone number with OTP verification, Google Sign-In, or Sign in with Apple.
- Profile Information: Display name, bio, profile picture, and festival interest categories (e.g., Music, Food, Art, Culture, Dance, Comedy).
- User-Generated Content: Posts, comments, reactions, chat messages (in group and direct chats), job listings, and any other content you create or share within the App.
- Media: Photos and videos you upload for your profile, posts, or chat messages.
- Festival Attendance: When you mark a festival as attended, we collect the photo you submit and your location at the time of verification.
- Contact Information for Jobs: If you post a job listing, you may provide contact details such as email or phone number.
2.2 Information Collected Automatically
- Location Data: With your permission, we collect precise GPS location data to display nearby festivals and events on the map, enable location sharing with other users, verify festival attendance, and provide reverse geocoding (city/country). Location is collected only when the App is in use and you have granted permission.
- Device and App Information: We collect your app version and package name for display in settings and to generate appropriate app store links. Firebase may automatically collect basic device identifiers for crash reporting and analytics purposes.
- Push Notification Tokens: When you enable notifications, we collect your Firebase Cloud Messaging (FCM) token to deliver push notifications about chat messages, festival updates, and other relevant alerts.
- Usage Data: Firebase Analytics (integrated at the platform level) may collect anonymized usage statistics such as session duration, screen views, and crash reports to help us improve the App.
2.3 Information from Third-Party Services
- Google Sign-In / Sign in with Apple: When you authenticate using a third-party provider, we receive your name, email address, and a unique identifier from that provider. We do not receive or store your third-party account password.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Provide and Maintain the App: To create and manage your account, deliver festival content (news, events, performances, toilets, maps), enable chat and messaging features, and facilitate social interactions (posts, reactions, comments, follows).
- Location Services: To show festivals and events on the map, enable location sharing with friends or in chat rooms, verify attendance at festivals, and provide directions to venues and facilities.
- Communications: To send push notifications about messages, festival updates, and other App-related alerts you opt into.
- Personalization: To tailor festival recommendations based on your selected interest categories and followed festivals.
- Leaderboard and Badges: To calculate contributor rankings based on festival attendance and activity, and to award badges.
- Safety and Security: To detect, prevent, and address fraud, abuse, security issues, and technical problems.
- Improvements: To analyze anonymized usage patterns and improve App features, performance, and user experience.
4. How We Share Your Information
We do not sell your personal information. We may share information in the following circumstances:
4.1 With Other Users
- Your display name, profile photo, posts, comments, reactions, and any content you publish are visible to other App users.
- If you share your location, it becomes visible to selected users or all festival attendees, depending on your sharing settings.
- Chat messages are visible to participants of the respective chat room or direct conversation.
4.2 With Service Providers
We use the following third-party services to operate the App:
| Service |
Provider |
Purpose |
| Firebase Authentication |
Google LLC |
User account management and sign-in |
| Cloud Firestore |
Google LLC |
Cloud database for app data |
| Firebase Cloud Storage |
Google LLC |
Media file storage (photos, videos) |
| Firebase Cloud Messaging |
Google LLC |
Push notification delivery |
| Firebase Analytics |
Google LLC |
Anonymized usage analytics and crash reporting |
| Google Maps Platform |
Google LLC |
Map display and location services |
| Google Fonts |
Google LLC |
Font rendering |
These providers process data on our behalf and are bound by their own privacy policies and data protection obligations.
4.3 For Legal Reasons
We may disclose your information if required to do so by law, in response to valid legal process, to protect the rights, property, or safety of our users or the public, or to enforce our Terms of Service.
4.4 Business Transfers
If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change.
5. Data Storage and Security
- Cloud Storage: Your account data, posts, messages, and media files are stored on Google Firebase infrastructure (Cloud Firestore and Firebase Cloud Storage), hosted on servers managed by Google LLC.
- Local Storage: Certain data is stored locally on your device using SharedPreferences, including your login session, notification preferences, display name, profile photo URL, FCM token, recent search history, and cached notification data. This data remains on your device and is cleared when you log out or uninstall the App.
- Security Measures: We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), Firebase Authentication with secure token management, and platform-level security configurations. We enforce HTTPS-only connections and do not permit cleartext traffic.
- Password Handling: For email/password accounts, passwords are processed through Firebase Authentication. We do not store plaintext passwords.
While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Your Rights and Choices
6.1 Account Deletion
You can permanently delete your account and all associated data through the App's Settings screen. Account deletion is processed via our secure backend and removes your authentication credentials, profile information, and associated data. This action is irreversible.
6.2 Location Permissions
You can grant or revoke location access at any time through your device's system settings. The App will request permission before accessing your location and provides an "incognito" mode to hide your location from other users.
6.3 Camera and Photo Library
Camera and photo library permissions are requested only when you initiate an action that requires them (e.g., uploading a profile photo or sharing media). You can revoke these permissions at any time through your device settings.
6.4 Push Notifications
You can enable or disable push notifications within the App's settings or through your device's notification settings.
6.5 Data Access and Portability
You may request access to, correction of, or a copy of the personal data we hold about you by contacting us at the address below.
6.6 Opt-Out
You may opt out of non-essential data collection by:
- Disabling analytics collection in your device settings (where supported by the platform).
- Revoking individual permissions (location, camera, photo library, notifications) through your device settings.
- Deleting your account entirely.
7. Children's Privacy
The App is not intended for children under the age of 13 . We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us immediately.
8. Third-Party Links and Services
The App may contain links to third-party websites, applications, or services (such as Google Maps for directions, app store listings, or URLs shared in posts). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the App.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States (where Google's Firebase infrastructure operates). By using the App, you consent to the transfer of your information to these countries, which may have data protection laws different from those in your jurisdiction.
10. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the App's services. If you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements).
Locally cached data (search history, notification cache) is automatically cleared upon logout or app uninstallation.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App and updating the "Last Updated" date at the top of this document. Your continued use of the App after such changes constitutes your acceptance of the revised Privacy Policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
This Privacy Policy is effective as of April 14, 2026.