Privacy Policy
Last updated: October 2, 2026
Plotify is built so that as little about you as possible leaves your device. You can browse, save, and ask to come to a party without an account.
What stays on your device
- Your age. An optional birth year you enter, and, if you choose to share it, the age range Apple provides (for example "13 to 17" or "21 and over", never your birthday). Both stay on your device and are used only to hide age-restricted parties and events and to check age at ticket checkout. Neither is an ID check.
- Your location. If you allow it, used to sort what's near you and center the map. Never transmitted. The app keeps only the most recent rough location (about a kilometer), for at most six hours, on this device. Change or revoke it under Account, then Privacy, then Location.
- Your contacts. If you allow it, read on your device so you can pick people to invite. Never uploaded or matched against other users.
- Friends, direct messages, and party chats. Stored on your device today.
- Parties you host. Stored on your device. An invite link carries the party's details inside the link itself, never the exact address; the address goes only to guests you approve.
- Filters and preferences. Stored on your device.
- Crash reports. Collected by iOS and stored on your device. Plotify never transmits them; you can view, share, or delete them under Account, then Diagnostics.
What Plotify's servers store
- Your account, if you make one. You sign in with Apple or Google; we receive an account identifier and, if the provider shares it, an email address (Apple lets you hide yours). We never see a password.
- Your @handle and display name, which other people see on your parties.
- Saved plots, so they survive a new phone.
- Reports. When you report something, we receive a copy of what you reported, who wrote it as shown in the app, your reason and note, your account if you're signed in, and a random per-install identifier used to stop report flooding. Moderators read these to act on them.
- Ticket sales. For each sale: the party, the ticket tier, the price and service fee, the buyer's and host's accounts, and any referral code. Card details are handled entirely by Stripe and never reach Plotify.
- Host payouts. Hosts who sell tickets set up a Stripe account. Stripe collects the identity and bank details it needs for payouts under Stripe's privacy policy; Plotify stores only the Stripe account ID, whether payouts are enabled, and payout records.
Who can see what
- Friends and messages are mutual-consent only. Nobody can message you or see your plans unless you accepted their friend request. There is no public profile, no user search, and no directory.
- Your going/maybe status is visible only to accepted friends, and only while "Share my plans with friends" is on. There is no public attendee count.
- Party addresses never travel in invite links and are never shown to anyone the host hasn't approved.
- Blocking someone cuts off messages, profile visibility, and suggestions in both directions, immediately.
Who we share data with
- Stripe, to process ticket payments and host payouts.
- Supabase, which hosts Plotify's database and servers.
- Apple and Google, only to sign you in, when you choose them.
- Law enforcement and the National Center for Missing & Exploited Children, when the law requires it or when content involves the exploitation of a minor.
That's the whole list.
What Plotify does not do
- No advertising, ad identifiers, or ad networks.
- No third-party analytics or tracking SDKs.
- No sale or sharing of personal data, for money or for advertising. Ever.
- No fabricated social signals: every "X is going" is a real person.
Event data
Event listings come from public sources (venue calendars and ticketing APIs) and contain no information about you.
How long we keep it
Account data is kept until you delete your account. Ticket sale and payout records are kept as long as tax and payment law requires, even after an account is deleted, with the buyer's account link removed. Reports are kept as long as needed to act on them and to protect users.
Deleting your data
Account, then Delete account, permanently removes your account and the data attached to it from Plotify's servers, except sale records the law requires us to keep. Data stored only on your device is removed by deleting the app.
Children and teens
Plotify is not for children under 13. If we learn an account belongs to someone under 13, we delete it. Teens 13 to 17 can use Plotify; they never see parties or events marked 18+ or 21+ once their age is known, and they cannot buy tickets to them.
Your rights
Wherever you live, you can ask for a copy of your data, ask us to correct it, or ask us to delete it, by contacting us below. California residents have these rights under the CCPA; we don't sell or share personal information, so there is nothing to opt out of.
Changes
Material changes to this policy will be listed in the App Store release notes of the version that makes them.