Privacy policy

• Account: your name, and the email address or phone number you sign in with.
• Preferences: interests, home area and saved events, if you add them.
• Tickets: what you bought, when, and check-in at the door. Card details go to Paystack and never reach Burty.
• Activities: plans you host or join and your group chat messages.
• Hosts and venues: business details, team members and payout bank details (account number and name).
• Nina: the messages you send her, so she can answer.
• Burty Passport: your check-ins (tickets scanned, activities you came to, verified venues you checked in at) and points. When you check in at a venue we use your location once to confirm you are there; we keep only whether you were nearby, not where you were. Other people only see your @username, level, badges and totals, and only if you turn on a public Passport or leaderboards.
• Usage: anonymous page and search statistics with no name, email or phone attached.

• To provide what you asked for (contract): sign-in, tickets, reminders, payouts, chat.
• To keep people safe and prevent fraud (legitimate interest): moderation, reports, blocking.
• To meet legal duties: tax and financial records for paid orders.
• Marketing emails only with your consent, which you can withdraw at any time.

Only with the services that run Burty for us, under contract:

• Supabase (database and sign-in) and Vercel (hosting)
• Paystack (payments and payouts)
• Brevo (emails and sign-in codes)
• Anthropic (Nina, and reading flyers and menus)

Organisers see the names of people with tickets to their events so they can run the door. Members of an activity see each other's names. Some of these services store data outside Nigeria; we rely on their contractual safeguards, as the NDPA allows.

• Account data: until you delete your account.
• Paid orders: six years, with your name removed if you delete your account (tax and accounting rules).
• Reports: up to two years, for safety.
• Check-ins: while your account is open; deleting your account deletes them. Burty uses combined, anonymous check-in data to improve the service and to show venues how busy they are (never fewer than 5 people in a group).

You can ask to see, correct, move or delete your data, object to how we use it, or withdraw consent.

• Change your name and preferences on your account page.
• Delete your account and data yourself: Delete my account.
• For anything else, contact us (below). We reply within 30 days.

You can also complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

We only use the cookies needed to keep you signed in and remember your theme. No advertising cookies.

Burty, Lagos, Nigeria. Data protection contact: privacy@burtyapp.com