Nocturify Privacy Policy

Version: 1.0

Effective:

Version: 1.0 Last updated: 8 August 2026

This Privacy Policy explains how Nocturify collects, uses, stores, shares and protects personal data when You use the Nocturify mobile application, website and related services.

Nocturify is designed around privacy by design and data minimisation. We aim to collect only information reasonably necessary to operate the platform, personalise Your experience, maintain trustworthy nightlife information, provide community features and improve the service.

1. Who is responsible for Your data?

Nocturify is currently operated by:

MB Bereisa Solutions Company code: 306983763 Registered address: Vingių g. 25, Padvarių k., LT-97157 Kretingos r., Lithuania

For privacy questions, requests concerning Your personal data or general user support, contact:

support@nocturify.com

MB Bereisa Solutions acts as the data controller for personal data processed through Nocturify unless otherwise stated.

2. Who can use Nocturify?

Nocturify is intended only for persons aged 18 or older.

When creating an account, You are required to confirm that You are at least 18 years old.

For an ordinary consumer account, Nocturify does not require You to provide a full legal name, full date of birth, identity document, home address or telephone number solely to establish Your identity or confirm Your age.

If we become aware that an account belongs to a person who is not eligible to use Nocturify, we may restrict or delete the account where appropriate.

3. Personal data we collect

The information we process depends on how You use Nocturify.

3.1 Account and authentication information

When You create or manage an account, we may process:

You may also be able to authenticate through third-party identity providers such as Google or Apple. When You use one of these providers, Nocturify receives information necessary to authenticate and maintain Your account according to the information and permissions made available through that provider.

Google and Apple may separately process information relating to Your use of their authentication services according to their own privacy terms.

Passwords are handled through our authentication infrastructure and are not stored by Nocturify as readable plain-text passwords.

3.2 Profile and preference information

You may provide information used to personalise Nocturify, including:

Optional preference information helps Nocturify personalise Your experience and may also contribute to aggregated audience insights as described in this Privacy Policy.

For an ordinary consumer account, Nocturify does not require You to publicly disclose Your real identity.

3.3 Favorites and account activity

When You use Nocturify, we may process information about features and actions associated with Your account, including:

These records are not intended to create a public profile of Your nightlife activity.

4. Private-by-default consumer information

Nocturify is designed so that ordinary consumers do not receive unrestricted access to other consumers’ private account information.

Other consumers are not provided access through normal Nocturify functionality to information such as another user’s:

If Nocturify introduces an intentionally public community feature in the future, the information made public and the applicable privacy controls will be clearly identified.

5. Location and GPS information

Nocturify uses location only for specific product functions.

Depending on the feature You use and the permissions You grant, location may be used to:

Nocturify currently uses foreground location access. We do not intentionally track Your location continuously in the background.

GPS-verified reports

When You submit a live venue report, Nocturify may temporarily use Your device coordinates and location accuracy to determine whether You are sufficiently close to the selected venue.

The current reporting process uses those coordinates for verification and records whether the report passed GPS verification. The current report-submission process does not intentionally store the raw submitted GPS coordinates in the resulting report record.

Nocturify is therefore not designed to create a continuous historical record of Your movements.

You may deny location permission. Some location-dependent functionality may then be unavailable or less accurate, while other parts of Nocturify remain usable.

Additional information is provided in the Nocturify Location & GPS Disclosure.

6. Reports and community activity

Nocturify allows eligible users to submit information about current venue conditions.

A report may include structured information such as:

Reports are associated with an account internally so that Nocturify can enforce security, reporting limits, NightMiles rules, abuse prevention and data integrity.

Community information may be validated, combined or aggregated before being presented to other users or venues.

Nocturify is designed to show useful nightlife signals without unnecessarily identifying the individual users who contributed those signals.

7. NightMiles

NightMiles is Nocturify’s community participation and rewards system.

When You earn or use NightMiles, we may process account-linked records necessary to:

NightMiles records are not intended to function as a public record of Your nightlife activity.

8. Aggregated insights for venues

Nocturify may use community reports, venue interactions, preferences and other platform activity to create aggregated statistics and insights for venues and venue partners.

These insights may include, for example:

For example, a venue may be able to understand that a certain percentage of qualifying users prefer a particular music style, or that a certain proportion of verified reports during a period described the venue as crowded.

These analytics are intended to describe audiences, groups and trends rather than individual consumers.

Nocturify does not provide venues with the underlying individual user profiles used to calculate these aggregated statistics.

Through venue analytics, venues do not receive unrestricted access to individual users’:

Nocturify may apply minimum audience thresholds, aggregation, de-identification or similar privacy safeguards where appropriate to reduce the risk that an aggregated statistic could be used to identify a particular individual.

Where an audience segment is too small to provide an appropriate level of privacy, Nocturify may withhold the statistic or display that there is not enough data.

Commercial relationships with venues do not give venues unrestricted access to consumer personal data.

Venue partnerships, advertising relationships or other commercial arrangements also do not change the underlying factual nightlife information presented by Nocturify.

9. AI-powered features

Nocturify includes or is developing AI-assisted features such as:

Our guiding principle is:

Nocturify determines the facts. AI explains the facts.

Authoritative venue information, opening status, live activity, events, recommendations and other factual product states are determined by Nocturify’s systems and verified data rather than being invented by a language model.

At the date of this Privacy Policy, external AI-provider generation is disabled in the production environment.

Before external AI-provider processing is enabled, Nocturify intends to minimise the information provided to such services. The current architecture is designed to avoid sending information such as Your email address, direct account identifier, password or raw GPS coordinates merely to generate AI explanations.

Where AI processing materially changes in the future, this Privacy Policy and the Nocturify AI Transparency information will be updated as appropriate before the new processing is introduced.

When You create an account or when material legal terms require renewed acceptance, Nocturify may record:

These records allow Nocturify to establish which version of its terms and disclosures applied when You used the service.

11. Why we process personal data

We process personal data for purposes including:

We do not sell Your personal data.

Under the General Data Protection Regulation (GDPR), the legal basis depends on the processing activity.

Performance of a contract

We process information where necessary to provide the Nocturify service You request, including account functionality, preferences, favorites, reports, NightMiles and core platform features.

Legitimate interests

We may process information where necessary for legitimate interests such as:

Where we rely on legitimate interests, we consider whether those interests are overridden by Your rights and freedoms.

Consent

Where applicable, we rely on Your consent for optional device permissions or other processing that legally requires consent.

For example, Your device operating system may ask You to grant location permission before Nocturify can access foreground location.

You can withdraw device permissions through Your device settings.

Legal obligations

We may process or retain information where necessary to comply with obligations imposed by applicable law.

Accepting or acknowledging this Privacy Policy does not mean that consent is the legal basis for every processing activity described in it.

13. Who we share personal data with

We may share or make personal data available where necessary for operating Nocturify, complying with law, protecting the service or using service providers acting on our behalf.

This may include providers used for:

Nocturify currently uses Supabase as a core backend infrastructure provider for database, authentication, storage and server-side functionality.

Authentication may also involve Google or Apple when You choose to use those sign-in methods.

Service providers process information according to their role, applicable contractual terms and applicable data-protection requirements.

Nocturify does not currently use third-party advertising or marketing-attribution SDKs in the mobile application.

If we introduce advertising, analytics, attribution or similar technologies in the future, including technologies used for platforms such as Meta or other advertising services, we will update this Privacy Policy and implement any notice, consent or other controls required by applicable law before using them where required.

We do not sell Your personal data to venues, advertisers or other third parties.

14. International data transfers

Some service providers may process personal data using infrastructure located outside Lithuania or elsewhere within or outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, we will use an applicable lawful transfer mechanism where required, such as:

The exact infrastructure and transfer safeguards may depend on the provider and service configuration in use.

15. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including providing the service, protecting the platform, resolving disputes, enforcing agreements and complying with applicable legal obligations.

Different categories of information may require different retention periods.

Account-linked consumer data is generally removed when an eligible consumer account is deleted, subject to technical, security, fraud-prevention, legal or record-retention requirements that may apply to particular information.

Operational, security, legal or audit information may need to be retained for longer where deletion would undermine legitimate security, legal or accountability requirements.

Nocturify will maintain and review more specific operational retention rules where fixed retention periods are appropriate.

16. Account deletion

You can request deletion of an eligible consumer account through the account settings available in Nocturify.

Deleting an eligible consumer account removes the authentication identity and account-linked consumer records according to Nocturify’s deletion rules.

Certain operational accounts, including accounts connected to venue ownership, moderation, founder administration or other retained operational records, may require a separate assisted deletion or de-identification process so that Nocturify does not improperly destroy legally or operationally necessary records.

If self-service deletion is unavailable for such an account, contact:

support@nocturify.com

Deletion of an account does not necessarily require deletion of information that Nocturify is legally required or otherwise lawfully entitled to retain.

17. Data security

Nocturify uses technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

Current measures include, where applicable:

No security system can guarantee absolute security.

You should protect Your account credentials and contact us if You suspect unauthorized account activity.

18. Your rights

Subject to the GDPR and applicable law, You may have the right to:

These rights may be subject to applicable legal limitations or exceptions.

To exercise Your rights, contact:

support@nocturify.com

We may need to verify Your identity before completing a request.

In Lithuania, the competent supervisory authority is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija). The Inspectorate provides procedures for complaints and data-subject requests. (⁠Valstybinė duomenų apsaugos inspekcija)

19. Profile images

Nocturify does not currently operate a general public consumer-profile feature.

Profile images are intended for account/profile functionality and are not intended to create public consumer profiles.

Nocturify is implementing the appropriate storage and delivery controls for profile images before Closed Beta.

Do not upload a profile image that You do not have the right to use.

Venue images and public venue information are different from personal profile images and may intentionally be displayed publicly as part of venue discovery.

20. Automated processing and recommendations

Nocturify may use automated systems to rank, filter or recommend nightlife options based on factors such as:

These systems are intended to support nightlife discovery.

Nocturify does not currently use such automated processing to make decisions that produce legal effects or similarly significant effects concerning You within the meaning of Article 22 GDPR.

21. Changes to this Privacy Policy

We may update this Privacy Policy when Nocturify changes, our processing activities change or legal or regulatory requirements require an update.

The current version and effective date will be displayed with the Privacy Policy.

Where a material change requires renewed acceptance, Nocturify may ask You to review and accept the updated version before continuing to use relevant services.

Previous acceptance records may be retained where necessary to establish which version applied at a particular time.

22. Contact us

For questions about this Privacy Policy, Your personal data, account deletion or Your privacy rights, contact:

MB Bereisa Solutions Company code: 306983763 Vingių g. 25, Padvarių k. LT-97157 Kretingos r. Lithuania

Email: support@nocturify.com