Privacy Policy

2.1 Data You Provide

• Registration data: name, email (from Apple ID or Google account)
• Profile data: name, role, bio, websites, social networks
• Profile photo
• Concert content: title, description, program, venue, date, photos
• Communications: messages sent to support

2.2 Automatically Collected Data

• Device data: device type, OS version
• Identifiers: Firebase ID, APNs push token
• Usage data: viewed concerts, saved events, articles read
• Location: only with your permission
• Diagnostics: anonymized crash reports

2.3 Data from Third Parties

• Apple Sign In: name, email (or relay address)
• Google Sign In: name, email, profile photo

Within the “Today’s Activity” community section (formerly “SvětKomunity”), we collect:

• Posts: text, photos, videos, and shared content
• Comments: your responses to others' posts
• Reactions: emoji reactions and likes on posts and comments
• Mentions: @mentions of other users in posts and comments
• Metadata: creation time, author information

3.1 Content Moderation

App administrators have access to all “Today’s Activity” content for the purposes of:

• moderating and removing inappropriate content,
• handling reported posts and comments,
• ensuring a safe environment for all users.

3.2 Content Deletion

You can delete your content at any time. Administrators may delete any content violating the Terms of Service without prior notice.

3.3 Community Section Data Storage and Retention

• Data is stored in Cloud Firestore (EU region eur3) and on CDN server cdn.promusica.cz (Czech Republic).
• Photos and videos are processed (max 1600x1600 px, WebP, EXIF data removed).
• Data is retained for the duration of your account or until manually deleted.
• Upon account deletion, all data is permanently removed within 30 days.

3.4 MyPassport — Personal Musical Collection

MyPassport is a personalized collection of your music-related activity and achievements within the ProMusica app.

Data processed in MyPassport:

• Stamps: information about every concert you have attended. The system records which specific concerts you have visited (title, date, venue, composers, orchestra, concert hall).
• Points and Titles: a numeric score based on the number of attended concerts and frequency of attendance (default titles: Visitor → Patron of the Arts → further levels).
• Badges (Achievements): recognitions for reaching certain milestones (e.g. 10 concerts of a given composer, 5 concerts in a single hall, 20 concerts in a month).
• Statistics and overview: automatically derived data — most frequently attended composers, most-visited concert halls, cities visited, musical era, most-played orchestra.
• Travel map: a geographic visualization of the cities and halls you have visited, derived from your concert data.

If you enable Passport sharing, other users will be able to see:

• your nationality and number of stamps,
• your Points and current Title,
• the Badges you have earned,
• your Statistics (most frequently attended composers, halls, cities),
• your Travel map.

Maintenance of MyPassport data: Stamps and their associated data are created when you add a concert to your collection via the “I attended this concert” feature or by linking your tickets (where available). Points and badges are updated automatically. If you remove a concert from your collection, your Points and badges are recalculated (and may decrease); the stamp for that concert is removed. Travel maps and statistics are generated from your stamps and are automatically updated whenever your collection changes.

• Retention of the Passport: Data in MyPassport is retained for the duration of your account. Upon account deletion, your Passport and all associated data (stamps, points, badges, statistics, map) are irreversibly deleted within 30 days and will no longer be available to other users.

3.5 Listeners' Leaderboard

The ProMusica app maintains a public Listeners' Leaderboard, which ranks active users by the number of concerts attended and points earned.

Data displayed in the Leaderboard:

• User name (the display name from your profile)
• Profile photo (your public profile picture)
• Number of stamps (concerts attended in the selected period)
• Points (your current score from MyPassport)
• Current Title (e.g. Visitor, Patron of the Arts)

Eligibility: The Leaderboard includes only active users with at least one stamp (at least one attended concert). Your name, photo, number of stamps, and points are automatically publicly visible in the Leaderboard provided you have at least one stamp and your Passport is set to public. If your Passport is set to private, you do not appear in the Leaderboard. The Leaderboard can be filtered by period: Week, Month, or All Time. Data is updated daily (the calculation runs overnight).

3.6 Following Artists and Ensembles (Social Graph)

The app allows you to follow your favorite composers, orchestras, and musical ensembles (“Following”).

Data processed:

• List of followed artists: which composers, orchestras, and ensembles you follow.
• Follow data: when you started following and who you currently follow.

• Retention: Following preferences are retained for the duration of your account. Upon account deletion, your list of followed artists is irreversibly deleted within 30 days.

In the SvětHudby section, we process:

• Articles: text, HTML content, excerpts, tags, and categories
• Media content: cover images, videos (HLS/MP4)
• Metadata: author, publication date, update date, reading time

4.1 Article Data Storage

• Articles are stored in Cloud Firestore (EU region eur3).
• Images and videos are stored on CDN server cdn.promusica.cz in the Czech Republic.
• Article images undergo the same processing as other photos (resizing, WebP conversion, EXIF removal).

4.2 Reader Data

• We do not store per-user article reading history.
• We do not store bookmarks or favorite articles.
• Article search is performed locally in the app (client-side) — search queries are not stored on the server.

4.3 Right to Edit and Remove

• The operator reserves the right to edit, update, or remove any article at any time without prior notice.
• Articles are retained indefinitely until removed by the editorial team.

All permissions are optional. You can change them in your device Settings.

Our processing of your data relies on the following legal bases under Regulation (EU) 2016/679 (GDPR):

Contract performance (Art. 6(1)(b) GDPR)

• Registration and account management
• Displaying concerts
• Operating the “Today’s Activity” community section
• Displaying the SvětHudby magazine
• The MyPassport feature — tracking attended concerts and generating stamps and statistics
• The Leaderboard feature — as a gamification element contributing to user engagement

Consent (Art. 6(1)(a) GDPR)

• Location processing — mapping concert locations and providing nearby concert recommendations
• Marketing notifications — push messages about new concerts, articles, and community updates
• Publishing your Passport as public (where you have enabled this) — including visibility in the Leaderboard
• Publishing your list of followed artists in your profile

Legitimate interest (Art. 6(1)(f) GDPR)

• Improving and personalizing the App — analyzing usage patterns and preferences
• Security and abuse detection — behavioral analysis to prevent fraud and abuse, including manipulation of points and stamps
• Community moderation and safety — addressing breaches of the Terms of Service
• Anonymized analytics

Legal obligation (Art. 6(1)(c) GDPR)

• Data retention required by Czech or EU law (e.g. for tax or consumer-protection purposes)

• Providing and personalizing services
• Creating and managing accounts
• Displaying relevant concerts
• Operating the “Today’s Activity” community section and displaying posts
• Displaying articles and content in the SvětHudby section
• Moderating user content
• Account-related communications
• Improving and developing the App
• Security and abuse prevention

Transfers to the USA are protected by EU Standard Contractual Clauses (EU SCC) and EU-US Data Privacy Framework certification.

• Encrypted communication (HTTPS/TLS)
• Encrypted storage (Firebase/Google Cloud)
• Secure authentication via Apple ID and Google
• Regular security audits
• Restricted data access

Data is retained for the following periods:

• Account and profile: for the duration of the account
• Concerts (data about concerts you have followed): 2 years after the event date
• “Today’s Activity” community section (posts, comments, videos): for the duration of the account or until manually deleted
• SvětHudby (articles): retained indefinitely until removed by the editorial team
• Photos and videos: for the duration of the account/concert/post/article, or 2 years after a concert is removed from the database
• MyPassport (stamps, points, badges, statistics, travel map): for the duration of the account; upon account deletion, irreversibly deleted within 30 days
• Leaderboard (aggregated account data shown in the Leaderboard): for as long as your Passport is set to “Public”; if you switch to “Private”, the data is hidden from the Leaderboard, but your MyPassport data is preserved
• Following artists: for the duration of the account
• Backups: max. 30 days after deletion

In accordance with Regulation (EU) 2016/679 (GDPR), you have the following rights:

Right of access (Art. 15 GDPR)

You have the right to obtain a copy of all the data we process about you — including registration data, MyPassport data (stamps, points, badges, statistics), community section data, your list of followed artists, and any other data. Submit your request to [email protected].

Right to rectification (Art. 16 GDPR)

You have the right to update inaccurate data in the App — you can edit your profile and your posts in the community section. You may also remove specific concerts from your MyPassport collection (which will update your points and badges). Submit your request to [email protected].

Right to erasure — “Right to be forgotten” (Art. 17 GDPR)

You have the right to request deletion of your account and all associated data, subject to the following:

• Account deletion: Settings → Delete Account. All your personal data, including posts in the “Today’s Activity” community section, will be irreversibly removed within 30 days.
• SvětHudby articles created by the editorial team (not by you) will remain, without your name.
• MyPassport (your stamps, points, badges, travel map, statistics) will be completely deleted.
• Your name and photo will no longer be visible in the Leaderboard.
• Your community posts will be deleted, but discussions or comments by other users referencing you may partially remain (shown as “Deleted user”).

Submit your request to [email protected].

Right to restriction of processing (Art. 18 GDPR)

You have the right to restrict the processing of certain data. For example:

• You can opt out of marketing notifications (Settings → Notifications).
• You can disable location processing (Settings → Permissions).

Submit your request to [email protected].

Right to data portability (Art. 20 GDPR)

You have the right to receive your data in a structured, commonly used, and machine-readable format (e.g. CSV or JSON). Submit your request to [email protected]. The export will be prepared within 30 days.

Right to withdraw consent (Art. 7(3) GDPR)

If you have given consent to processing (e.g. for marketing, location, or Passport sharing), you may withdraw it at any time:

• Marketing notifications: Settings → Notifications
• Location: Settings → Permissions
• Passport sharing: Settings → Passport → Visibility management → “Private”
• Manual withdrawal: [email protected]

Right to lodge a complaint (Art. 77 GDPR)

You have the right to lodge a complaint with the supervisory authority: Czech Data Protection Office (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

We do not knowingly collect data from children. If we discover that we have obtained data from a child, we will delete it immediately.

The mobile app does not use cookies. We use Firebase Analytics for anonymized statistics. We do not use cross-app tracking.

We will notify you of significant changes via push notification and in the App. By continuing to use the App, you agree to the updated Policy.