Privacy Policy

1. Who we are

Noctua ("we", "us", "our") is a nightlife discovery platform focused on Barcelona. We operate the website and application available at noctuaapp.com. For any privacy-related queries, contact us at info@noctuaapp.com.

2. Data we collect

We collect the following categories of data:

• —Account data: Email address and encrypted password when you register.
• —Usage data: Pages visited, clubs and events viewed, and search queries.
• —Favorites: Clubs, events, and club nights you choose to save.
• —Contact messages: Any messages you send us through the Contact page.
• —Device data: Browser type, device type, and approximate location (country/city level) for analytics.

3. How we use your data

We use the data we collect to:

• —Provide and operate the Noctua platform.
• —Save and display your favorite clubs, events, and club nights.
• —Respond to messages and support requests.
• —Improve the platform based on usage patterns.
• —Send important service communications (no marketing without consent).

4. Legal basis (GDPR)

We process your data under the following legal bases as defined by the General Data Protection Regulation (GDPR): contract performance (to provide the service you signed up for), legitimate interests (to improve and secure the platform), and consent (for any optional communications). You can withdraw consent at any time.

5. Data storage and security

Your data is stored securely using Supabase, which provides industry-standard encryption at rest and in transit. We do not sell your personal data to third parties. Access to personal data is restricted to authorised personnel only.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, all associated personal data will be permanently removed within 30 days. Contact messages are retained for up to 12 months for support purposes.

7. Your rights

Under GDPR, you have the right to:

• —Access the personal data we hold about you.
• —Request correction of inaccurate data.
• —Request deletion of your data ('right to be forgotten').
• —Object to or restrict processing of your data.
• —Receive a copy of your data in a portable format.
• —Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at info@noctuaapp.com.

8. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. No third-party ad networks have access to your data.

9. Third-party services

We use Supabase for authentication and database services. Supabase processes data in accordance with GDPR. We do not share your personal data with any other third parties unless required by law.

10. Google Sign-In

Noctua allows users to sign in using their Google account via Google OAuth 2.0. When you choose to sign in with Google, we receive the following information from Google:

• —Name: Your display name as registered with Google.
• —Email address: Used to create and identify your Noctua account.
• —Profile picture: Optionally displayed in your Noctua profile.

We do not access your Google contacts, Google Drive, Gmail, or any other Google services. The data received from Google is used solely to create and manage your Noctua account. You can revoke Noctua's access to your Google account at any time via your Google Account settings.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. Continued use of Noctua after changes constitutes acceptance of the updated policy.

12. Contact

For any questions about this Privacy Policy, please contact us at info@noctuaapp.com.