Privacy Policy

What we collect

You give us directly:

• Account: your email address and password (used to sign in; passwords are stored hashed by our authentication provider), and the invite code you used.
• Profile: a username, and optionally a display name, bio, profile photo, banner, graduation year and home state. Your profile is visible to other members.
• Birthday: your date of birth, which you give once when you join. Only you can see it. We use it to confirm you are old enough to use Palm Radar and, if you verify as a student, that you are eligible for student status. If you are under 13 we do not store it.
• Your show log: for each show or place you log, the artist and venue, date, star ratings, your written review, setlist, photos and videos, how you got there, seat or section, what you paid (owner-only), and private notes (owner-only). You choose for each entry whether it is private, friends or public.
• Social activity: who you follow, followers, likes, comments, saves, reports and blocks, upcoming shows you plan to attend, and posts to artist, venue or collective pages you manage.
• Music taste: genres, artists, venues and collectives you tell us you like. If you connect Apple Music on iPhone, we read the artists in your library and your recently played songs when you connect or refresh, to build this list. It is visible only to you and used only to personalize your feed.
• Verification (optional): a school (.edu) email address and graduation year if you verify student status (open to members 30 and under, with a graduation year no more than six years away). The email is used to confirm you are a student and is not shown to other members. Student status ends automatically after your graduation year.
• Website forms: if you send an application, concert photos or a message through a form on palmr.fm, we keep what you send (such as your name, email address, message and any files) so we can review it and reply to you. You do not need a Palm Radar account to use these forms.
• Show emails (optional): if you sign up on palmr.fm to hear about new Palm Radio shows, we keep your email address and when and how you agreed. We only email you after you confirm through the link we send, only about shows, and every email has an unsubscribe link. We never sell or share the list.
• Artist press kits and fan lists (optional): if you sign up on an artist's press kit page on palmr.fm, we keep your email address and when and how you agreed, and after you confirm through the link we send, that artist can see your email address and email you news about their shows and music. Every email has an unsubscribe link, and unsubscribing removes you from their list. We do not sell these lists. Booking requests that venues and collectives send to artists inside the app are visible to the sender and the artist.

From your device, only with your permission:

• Photos: access to your photo library so you can attach photos and videos to a show or import past shows. If you import, the photo dates and locations are checked on your device to suggest venues, and only the photos you choose are uploaded.
• Ticket photos and PDFs: if you scan a ticket, the image is sent to our server and to our AI provider (see below) to read the artist, venue and date, and is saved with your show if you save it.
• Contacts (optional): if you use "find friends from your contacts," phone numbers are turned into one-way hashes on your device before being sent to us. We do not receive contact names or raw numbers. We store the hashes so we can tell you when someone from your contacts joins, and your own hashed number so others can find you. You can turn this off in Settings, which deletes your stored contact hashes.
• Location (optional): your approximate location, only while the app is open, to show shows near you. We do not track your location in the background.

Collected automatically: like most services, our servers and providers log basic technical data, such as IP address, device type and app version, for security and to keep the service running. The app does not use analytics or advertising trackers. When you open an artist press kit page on palmr.fm, we add one to a visit counter for that artist, grouped by day and the nearest city your connection suggests. The counter does not record who you are or your IP address, and artists see only the totals. The palmr.fm website uses Vercel Web Analytics to count page visits and a few actions, such as sending an application or clicking an RSVP link. It sets no cookies, does not identify you or follow you across other sites, and is not used for advertising. The Palm Radar app sets no tracking or advertising cookies. The palmr.fm website sets a cookie only if you join Palm Radio Reserve, which is covered by Palm Radio's own Privacy Notice. The game on palmr.fm saves your best scores and display settings in your own browser so they are there next time. They stay on your device and are never sent to us.

How we use it

• to run the app: your account, your archive, your profile, ratings and feeds
• to personalize what you see, using who you follow, what you log, and the taste you tell us about
• to keep the community safe: screening content, handling reports, and preventing fake reviews and abuse
• to email you about your account, such as sign-in confirmation and verification codes
• to fix bugs and improve the app
• to build aggregated, de-identified insights about a venue, artist or collective, and to offer paid, clearly labeled promotion, as described in "How Palm Radar makes money" below

We do not sell the reviews, ratings, photos or other content you write or upload, and we do not sell your account, contact or location information. There are no third-party ads and no advertising or tracking SDKs in the app.

How Palm Radar makes money

Membership is free. We plan to make money from the venues, artists and collectives on Palm Radar, not by selling your personal information to outside companies or data brokers, and not by showing you third-party ads. Two ways, so far:

• Venue, artist and collective insights: we may build and sell a venue, artist or collective reports and dashboards about their own shows and audience, for example how many people came, average ratings by category, or what other venues and genres their audience also likes. These are built from many members' activity combined, not any one member's. We take reasonable steps to aggregate and de-identify this data so it does not reasonably identify a specific member, and we do not include a review, rating or attendance you marked private or friends-only, your private notes, or what you paid.
• Paid promotion: a venue, artist or collective can pay to be featured or boosted, for example in Discover, search or a feed. This is always labeled as sponsored or promoted, is separate from your own personalized recommendations, and never changes anyone's star ratings or hides, reorders or edits an honest review.

Palm Radar does not sell tickets or process ticket payments. A ticket link takes you to palmr.fm, the venue, the promoter or a ticketing company, outside the app, and any purchase there is with that outside site, under its own terms and privacy practices, not ours. Palm Radio, the live-events collective, may sell merchandise, tickets and a paid membership on palmr.fm. Those are separate from Palm Radar, sold only on the website, and covered by Palm Radio's own Privacy Notice. If we ever offer a paid subscription inside the app, we will describe what information that involves here before you can sign up for it.

We may add other ways of making money in the future. If we do, we will update this policy.

Who can see what

Each review is private (only you), friends (members you follow who follow you back), or public (all members). Private notes and what you paid are never shown to anyone else. Public reviews, and photos or videos you choose to feature, may appear on artist, venue and collective pages and in discovery feeds, credited to you. Your profile, follower counts and who you follow are visible to other members.

Service providers we share data with

We use companies that process data for us, and give them only what they need:

• Supabase: our database, sign-in, and file storage (United States).
• Vercel: hosts the palmr.fm website and counts website visits without cookies.
• Resend: sends our account emails (your email address and the message).
• Anthropic: analyzes ticket photos, featured photos, and the text of public reviews, comments and page posts, to read tickets and to check content against our community guidelines. It also helps our team review applications sent through palmr.fm forms: we send it the name, area, links and answers in an application (not the email address or phone number) so it can write a short summary and a draft reply for a person to read. It never accepts or rejects anyone, and nothing is sent to the applicant unless a person on our team sends it. Under Anthropic's commercial terms, data sent through its API is not used to train its models.
• Google: place search when you enter a venue (the text you type), and maps on Android.
• Wikimedia (Wikipedia, Wikidata and Commons) and Setlist.fm: artist, venue and setlist lookups (the name you search for).
• Apple: the App Store and TestFlight, and Apple Music if you connect it.

We may also disclose information if required by law, to protect someone's safety, or as part of a sale or reorganization of the business.

How long we keep it

We keep your account data until you delete your account. When we remove text or a post for breaking our guidelines, we keep a short excerpt and the reason for up to 90 days so we can review mistakes and repeated abuse. Backups may keep deleted data for a short additional time.

Your choices and rights

• Delete your account and its data yourself: open the menu, then Settings, then Delete my account.
• Change who can see any review, un-feature photos, or turn featuring off, in the app.
• Turn off contact matching, location, photo, and Apple Music access in your device settings or in the app.
• Ask to see, correct, or export your data, or ask us to delete it, by writing to privacy@palmr.fm.

California residents have the right to know what personal information we collect, to delete it, to correct it, to opt out of any sale or sharing of personal information, and not to be discriminated against for using these rights. The venue, artist and collective insights described in "How Palm Radar makes money" are built from data that is aggregated and de-identified rather than tied to you individually, so we do not believe they are a "sale" or "share" of personal information as those terms are defined in California law; we do not sell or share your individual reviews, ratings, attendance or account information. Write to privacy@palmr.fm to make a request or ask a question about this; we may need to confirm it is you.

Children

Palm Radar is not for children under 13, and we do not knowingly collect their information. If you think a child has given us information, write to privacy@palmr.fm and we will delete it.

Security

We protect your data with encryption in transit, access controls on every table in our database, and limits on who can view sensitive information. No system is perfectly secure. If you find a security problem, please tell us at security@palmr.fm. If a breach affects your personal information, we will tell you as the law requires.

International use and changes

The Service is run from the United States and currently intended for use in the United States, so your information is processed and stored there. We may update this policy, and will change the date at the top and take reasonable steps to let you know of material changes.

Contact us

Questions about this policy or your data: privacy@palmr.fm.