Who we are

LIIVRR is operated by Liivrr (Pty) Ltd, a private company registered in South Africa. Contact us at info@liivrrapp.com with any question about this policy or to exercise any of the rights described below.

What we collect

We only collect what the app needs to run:

• Email address and password — to create, secure, and sign in to your account. Your password is hashed by our authentication provider; we never see or store it directly.
• Full name, username, city and avatar photo — shown to other users so people can recognise who they're talking to, and used to personalise which venues and events you see.
• Precise device location — used while the app is open to show nearby venues and distances. That everyday use stays on your device. Your location is sent to and stored on our servers only when you check in at a venue, when you share your live location with your circle, when you turn on Discoverable Nearby, or when you choose to attach location to a Moment — each described in detail below.
• Photos and videos you post ("Moments"), chat messages (event chat, direct and group messages, live-stream chat), follows and circle connections, check-ins, live location shares, live streams and live chat, and saved Moments.
• Energy — an in-app activity ledger built from what you do (posting, checking in, watching live), used to show your standing and to spend during a live stream.
• Reviews you write about an event, and venue booking details you enter.
• Concierge and help questions — the text (or, for voice, the transcript) of what you ask our concierge or help assistant.
• Push notification token — issued through Apple/Expo so we can send notifications you've allowed.
• Creator subscriptions — which tier you're on, its status and dates, and billing identifiers from our payment provider (never your card number); bank details if you request a payout, removed when your account is deleted; multistream destinations (YouTube/Twitch) if you set one up, also deleted with your account.
• RSVPs, ticket and order records, reports you file or that are filed about you, blocks, and door-scan records when a ticket is scanned at a venue.
• Account deletion requests — a record that you asked and how we handled it (see "Deleting your account" below).
• Events you list — any signed-in account can list a night at a real venue. The listing is public and carries your username, name and photo as the person who listed it, so nobody mistakes it for the venue's own announcement. A venue's own organiser is shown as the venue instead.

We do not collect anything beyond this list today. If that changes, we'll update this policy before the change ships.

Location: what stays on your device, and what we store

LIIVRR asks for your device's precise location to show you nearby venues and real distances. That everyday use stays on your device: the coordinates used to sort the map are held in memory on your phone and never sent to our servers. LIIVRR only ever requests location while the app is open and in use; it does not track your location in the background.

Four things you can choose to do that send or store your location on our servers:

• Check-ins. Your GPS coordinates at that moment are saved with the check-in, so it can be verified as real. Kept as long as your account exists.
• Location shares. Sharing your live location with your circle saves your positions for the length of the share, visible to the people you chose. Deleted automatically 24 hours after the share ends.
• Discoverable Nearby, off by default. While it's on and the Nearby tab is open, your phone sends a rough position to our servers every few minutes. Other people who also have it on, and who are 18 or over, can see your name, photo, how far away you are, and, if you're checked in somewhere, the name of that venue — and you see the same about them. Turning the toggle off removes you from that list immediately. Positions sent for this purpose are not kept as a history.
• Moments, off by default. A Moment can carry no location (default), the real venue you posted from, or your device's precise coordinate at the moment you posted, only if you turn that option on. A Moment's coordinate is deleted along with the Moment.

Story and Moment photos

When you post a photo, LIIVRR strips the photo's embedded metadata (this can include GPS location, device make and model, and camera settings) on your device, before it's ever uploaded.

Controlling what the app can access

LIIVRR uses these device permissions, each of which you are asked to allow by iOS: location (nearby venues, check-ins, location shares), camera and microphone (Moments and live streams), your photo library (choosing photos and videos to post), and notifications. Each is optional; if you say no, the features that need it won't work but the rest of the app does. You can change or withdraw any permission at any time in your iPhone's Settings → LIIVRR. Turning Discoverable Nearby off, or stopping a location share, is also done inside the app.

Who else sees your information

We use a small number of service providers to run LIIVRR. None of them may use your data for their own purposes — each processes it only to provide their service to us.

• Supabase — our database, authentication, and file storage.
• Mapbox — renders the map in the Explore tab.
• Paystack — processes ticket purchases and creator subscriptions. Your card details go to Paystack, never to LIIVRR.
• Mux — live video streaming for broadcasts.
• Anthropic (Claude) — powers the concierge planner and help assistant.
• OpenAI — speech-to-text for the voice concierge.
• ElevenLabs — text-to-speech for the voice concierge.
• Expo — delivers push notifications through Apple's and Google's services.
• Apple and Google — if you choose "Sign in with Apple" or "Sign in with Google".
• Sentry — crash and error reporting. Reports contain technical details only (the error, app version, device model and OS, and recent in-app actions leading up to it) and are never linked to your account.
• PostHog — product analytics, where switched on.

How long we keep your information

• Moments become permanently inaccessible to everyone, including you, 24 hours after posting, and the file is then removed from storage.
• Kept Moments. A Moment you choose to Keep stays in your own My Moments for as long as your account exists. By default it's visible only to you and to someone with an open circle request with you, as a preview. If you choose to feature a kept Moment as one of your Top Moments (up to six), it becomes visible to anyone, including signed-out visitors — that's the point of the feature, and you choose each one individually. If you'd rather a kept Moment stayed private, don't feature it.
• Chat messages, RSVPs, follows, saved Moments, reviews, bookings, and Energy are kept for as long as your account exists, and deleted with it.
• Check-ins (including GPS coordinates) are kept for as long as your account exists, and deleted with it.
• Location shares are deleted automatically 24 hours after the share ends.
• Live streams: the record of a stream is kept for as long as your account exists; the video itself is handled by Mux.
• Ticket, order, and creator earnings records are kept as financial records, including after an account has been anonymised — see "Deleting your account" below.
• Record of deletion requests: we keep a record that you asked and how we honoured it, holding the date, outcome, and an internal account number, not your name or email.

Your rights under POPIA

As a South African resident, you have rights under the Protection of Personal Information Act (POPIA), including the right to access, correct, object to the processing of, and request deletion of your personal information.

• Correct your name, username, and city directly in the app: You tab → Edit profile.
• Request deletion of your account directly in the app: You tab → Delete my account. A person reviews every request, so it isn't instant.
• For anything else — access requests, objections, or anything not yet covered by an in-app control — email info@liivrrapp.com.

If you believe we've mishandled your personal information and aren't satisfied with our response, you can lodge a complaint with South Africa's Information Regulator (Woodmead North Office Park, 54 Maxwell Dr, Woodmead, Johannesburg, 2191 · enquiries@inforegulator.org.za · 010 023 5200).

Deleting your account

When you request deletion (You tab → Delete my account), a person reviews the request and then acts on it; it is not instant. If your account has never bought or reserved a ticket and has no creator earnings or payout records, we delete it outright.

If your account has ever bought or reserved a ticket, or earned or requested money as a creator, we anonymise it instead: everything that identifies you (email, phone, password, name, username, city, avatar, Moments, check-ins, location shares, chat, follows, Energy, reviews, bookings, and more) is removed, and you can no longer sign in. What survives is the financial and audit record, kept without your name, bank details, or other identifying content — the order and ticket rows, and, for creators, earnings and payout amounts with bank details erased. We keep transaction records for business and tax reasons. We use the word "anonymise" rather than "delete" because the underlying record still exists so that payment records attached to it stay intact; under POPIA that is anonymisation, not erasure.

If you want confirmation of what was done, email info@liivrrapp.com.

Security

• All traffic between the app and our servers is encrypted (TLS).
• Our database enforces row-level security, so the database itself refuses to let one person's data be read by another.
• Event tickets are cryptographically signed and single-use at the door.
• No administrative database key is ever included in the app you download — only a public, restricted key is.

Payments

Payments are handled by Paystack, for buying a ticket to a paid event and for subscribing to a creator. Your card details go to Paystack, never to LIIVRR. What LIIVRR keeps is the payment reference, amount, currency, status, and date attached to your order or subscription. Approved creators can request payouts of what they've earned; in this phase, payouts are queued and paid manually by LIIVRR.

International data transfers

Because we use Supabase, Mapbox, Paystack, Mux, Anthropic, OpenAI, ElevenLabs, Expo, and (where switched on) Sentry and PostHog, your personal information may be processed on servers located outside South Africa. We choose providers with strong security practices, and each processes your data only to provide their service to LIIVRR.

Age requirement

LIIVRR is intended for people 18 and older — it's a nightlife app centred on venues, events, and alcohol-serving establishments. Stated honestly: LIIVRR's sign-up flow does not currently verify anyone's age. We are working on a real age-verification step at sign-up.

Children's privacy

LIIVRR is not directed at children and is intended for users 18 and older. We do not knowingly collect personal information from children. If we become aware that a child's information has been collected, we will delete it.

Changes

We'll update the "Effective" date above whenever this policy changes materially, and we will update this page before any change to how we collect or use your information takes effect.