Privacy Policy

Introduction

Tourniq provides tools for concert, tour and team coordination. This policy explains how personal data is handled in our mobile app and related website. Tourniq is the service provider and data controller. Contact privacy@tourniq.app for privacy requests. This notice informs you about processing; reading it or continuing to use the service does not replace consent where consent is required.

Information We Collect

When creating an account, users may provide full name, username, email address, phone number, profile photograph, biography, professional role, experience details, country and city information, social media handles, and team affiliation information. Certain users may additionally provide artist-specific or management-specific profile details for professional visibility purposes.

Operational & Concert Coordination Data

• Concert schedules and tour itineraries
• Venue information and transportation plans
• Pickup locations and accommodation details
• Setlists and technical rider information
• Soundcheck timelines and setup coordination status
• Team attendance records and production scheduling data
• Pickup-stop selections and saved pickup point preferences for recurring journeys
• Internal operational notes
• Team rehearsal schedules, locations, participant lists and attendance responses

Community Restaurant Recommendations

• Users may recommend restaurants near concert venues and accommodations by submitting a place name, map location, optional address, a 1–5 rating, recommendation text and tags.
• Recommendations are visible to all signed-in Tourniq users together with the author's name and profile photo. Users who have blocked each other do not see each other's reviews.
• Users can edit or delete their own review at any time; a place with no remaining reviews is removed. Reviews can be reported for moderation.

Private & Sensitive Information

Users may voluntarily provide additional private information including emergency contact details, medical condition information, allergy information, blood type, dietary preferences, vehicle plate information, visa information, frequent flyer membership information, and accommodation information. Tourniq treats such information with elevated security restrictions and applies access controls intended to limit visibility to authorized parties only.

Chat and Communication Data

• Chat messages and shared media
• File attachments and voice recordings
• Team announcements and operational coordination discussions
• Read receipts and communication timestamps

Location Information

• The Tourniq app does not collect your device location on iOS or Android and does not request location permission. Saved venue, hotel and pickup-point coordinates can be displayed on maps.
• Drivers use the separate Tourniq Driver app. During an active journey, the driver’s location shared from that app is shown in Tourniq to authorized team members and assigned passengers only.
• Live journey location is restricted to authorized participants. Location is not used for advertising or sold. Device permissions can be withdrawn in system settings.
• The ‘At the airport’ action shares a temporary attendance status with the relevant team. It does not detect airport arrival or collect GPS location; automatic airport geofencing has been removed.

Device & Technical Information

Tourniq may automatically collect technical information including device type, operating system version, app version, push notification tokens (including Live Activity push tokens used to display real-time concert-day and service status on the Lock Screen and Dynamic Island), diagnostic logs, crash reports, network metadata, performance analytics, and session activity. This is used for platform reliability, security monitoring, and technical troubleshooting.

How We Use Information

• Providing concert coordination tools and enabling team collaboration
• Enabling real-time service/transportation tracking and live concert-day status updates
• Managing invitations, memberships, and operational notifications
• Verifying artist identities and maintaining system integrity
• Improving application stability and conducting internal analytics
• Preventing abuse, fraud, and facilitating future networking features

Data Storage & Infrastructure

Service providers support hosting, authentication, storage, notifications and email: Supabase, Cloudflare, Expo, Resend, Apple and Google. Vercel hosts the public website. Weather and place searches can send a city, venue coordinates or a search query to the relevant external provider, including Open-Meteo for weather. Opening a third-party map is subject to that provider’s policy. Infrastructure may process data outside your country; applicable transfer requirements must be met.

Security Measures

• Row-level access restrictions and signed URL protection
• Authentication systems and permission-based access controls
• Encrypted network communication and private storage architecture
• Infrastructure monitoring, audit logging, and access limitation systems

Data Sharing

Tourniq does not sell personal information to advertisers or unrelated third parties. Certain information may be visible to team members, authorized managers, concert organizers, or verified operational participants — including a driver's live location, which is shown to authorized team members and assigned passengers only while a journey is active. Users are responsible for exercising caution when sharing information within collaborative environments.

Data Retention

Data is retained for the relevant service purpose and applicable legal obligations. Account deletion first disables the account and clears selected profile fields and push tokens; final removal is a separate administrative process. Shared team records and messages may remain for other participants. Deletion-request records, necessary security records and backups may have different retention periods. We do not promise immediate removal of every record or a fixed 90-day deletion period. Contact privacy@tourniq.app for the status and scope of your request.

Your Rights

Depending on your jurisdiction, you may have rights including access requests, correction requests, deletion requests, data portability requests, objection rights, or consent withdrawal rights. Requests may be submitted to privacy@tourniq.app, support@tourniq.app, or info@tourniq.app.

Children

Tourniq is not intended for children under the age of 16 unless explicitly authorized through professional or educational organizational structures.

Policy Updates

We publish material changes with an updated date and provide additional notice or seek consent when required. Earlier processing remains subject to the rules applicable at that time.

Processing purposes and legal grounds

• Account access, team coordination and requested services: processing necessary to establish or perform the service relationship, where applicable.
• Security and abuse prevention: legitimate interests, subject to a balancing of users’ rights; legal records where required by law.
• Optional permissions and any processing requiring consent: the applicable consent or other lawful condition must be established separately. Uploading health information does not itself replace a required explicit consent. Do not upload unnecessary sensitive data about yourself or others.
• Under Turkish Law No. 6698, you can request information on processing, recipients, correction, deletion where its conditions apply, notification of corrections/deletions to recipients, object to adverse solely automated results and seek compensation for unlawful processing. Other applicable laws may provide additional rights. Contact privacy@tourniq.app.

Widgets, notifications and device storage

Widgets and notifications can display concert names, venues, dates, weather and journey details on the home or lock screen. People with access to your screen may see them. Control visibility using device notification settings and remove widgets when needed. Snapshots and downloaded files may remain locally until replaced or removed. Usage events and session identifiers are processed in our Supabase infrastructure for product analysis; they may be linked to your account.

Connect and applications

Profile visibility, listings, applications, offers and restaurant reviews can make information visible beyond your concert team. Application details are shared with the listing owner and authorized reviewers. Share only information necessary for the opportunity; do not include identity, health or bank documents in public listings.