Privacy Policy

Last updated: July 6, 2026

Served ("Served," "we," "us," or "our") operates the Served mobile application and the website at servedapp.us (together, the "Service"). This Privacy Policy explains what we collect, how we use and share it, how long we keep it, and the choices and rights you have. By using the Service, you agree to this Policy.

1. Information you provide

• Account details — full name, username, email address, and password, or an Apple sign-in identifier
• Profile information — bio, profile photo/avatar, and an optional Instagram handle
• Phone number — used to verify your account and, if you host events, to message your guests
• Content you create — event RSVPs and tickets, ratings and reviews, photos you add to event albums, direct and group messages, and events you create or host
• Payment details — when you buy a ticket, your card information is collected and processed directly by our payment processor (Stripe). We do not receive or store full card numbers; we retain a record of the purchase (amount, event, and a payment reference)
• Communications — messages you send us for support

2. Information collected automatically

• Location — with your permission, we collect your device's location, including GPS coordinates, to show nearby venues and events and rank recommendations by distance (for example, our For You tab only shows venues within 50 miles of you). You can disable location access any time in your device settings; without it, you can still search venues by city
• Device push token — to deliver push notifications
• Usage information — basic information about how you interact with the Service (such as events you view, RSVP to, or rate), used to operate and improve it
• Device and log information — such as device type, app version, and IP address, used for security and reliability

3. Sign in with Apple

If you sign in with Apple, we receive a unique identifier and, on first sign-in, the name and email you choose to share (which may be a private relay address). We use this only to create and secure your account.

4. Payments

Ticket payments are processed by Stripe, Inc. Your card details are entered into and handled by Stripe under Stripe's own privacy policy; Served never receives your full card number. Event organizers receive payouts through Stripe Connect. We keep purchase records (such as the event, amount, and payment reference) to provide your tickets, support you, and meet record-keeping obligations.

5. How we use your information

• Create, secure, and operate your account and profile
• Provide core features — events, RSVPs, tickets, ratings, photo albums, friends, and messaging
• Process ticket purchases and deliver tickets and receipts
• Send transactional and event-related notifications and, where you've opted in, reminders and re-engagement nudges
• Show nearby and relevant venues and events
• Keep the Service safe — prevent fraud, abuse, and violations of our Terms
• Comply with legal obligations

We do not sell your personal information, and we do not use it for cross-app advertising or tracking.

6. How we share information

We share information only as needed to run the Service:

• With other users — your profile, content, and ratings/reviews are visible to others as part of how the Service works, and for events you host, information needed to manage your guests. Ratings and reviews are public or semi-public by design.
• Service providers — Supabase (database, authentication, and storage hosting), Stripe (payments and payouts), Twilio (SMS verification and event texts), Resend (transactional email), Apple Push Notification service (notifications), and Google Places (venue and place search). Each receives only the data needed to perform its function.
• Legal and safety — when required by law, to enforce our Terms, or to protect the rights, safety, and property of users, the public, or Served.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not share your information with advertisers or data brokers.

7. Photos and camera

With your permission, the App accesses your camera and photo library so you can set a profile photo and add photos to event albums and ratings. Photos added to a shared event album are visible to others with access to that event and, by design, are automatically deleted approximately 24 hours after the album is opened. You may delete photos you added at any time.

8. Contacts

If you choose to use "Find friends from contacts," the App reads the phone numbers in your device's address book and sends them to our servers to check which of your contacts already have a Served account. We use this only to show you those matches — we do not store your contacts, and numbers that don't match an existing account are discarded, not retained or used for any other purpose. This feature is optional; you can decline the permission request or turn it off later in your device's Settings.

9. Data retention

We keep your information while your account is active and as needed to provide the Service. Event album photos are deleted automatically about 24 hours after the album is opened. When you delete your account, we delete your personal information within 30 days, except where we must retain certain records (for example, transaction records) to comply with law, resolve disputes, or prevent abuse.

10. Your choices and rights

You can:

• Access, update, or correct your profile information in the App
• Delete your account at any time from within the App, which removes your personal data as described above
• Control location and notification permissions in your device settings
• Manage notification types in the App's settings

Depending on where you live (for example, California, the EEA, or the UK), you may have additional rights to access, correct, delete, or port your data, or to object to or restrict certain processing. We honor these rights and won't discriminate against you for exercising them. To make a request, contact us at the email below; we may need to verify your identity first.

11. Children

The Service is intended for users 17 and older and is not directed to children under 17. We do not knowingly collect personal information from anyone under 17. If we learn we have, we will delete it promptly.

12. Security

We use industry-standard safeguards, including encrypted connections (HTTPS/TLS) and database row-level security, to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. International users

Served is operated from the United States, and your information is processed and stored in the United States and by the providers listed above. By using the Service, you understand your information may be transferred to and processed in the United States, which may have different data-protection laws than your country.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will update the date at the top of this page and, where appropriate, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

15. Contact

Questions, or want to exercise a privacy right or request deletion of your data? Contact:
support@servedapp.us