Privacy policy
Last updated 26 October 2026
We keep what it takes to sign you in and get you through the door: your email, name, phone, date of birth and your wallet's public key. Your location never leaves your phone. We don't sell your data or use it for ads. You can delete your account in the app at any time.
Who we are
Nightstub is an app for finding and buying tickets to nights out in Morocco. "We" in this policy means the Nightstub team. For anything about your data, write to support@nightstub.app.
What we collect and why
| Data | Why we need it |
|---|---|
| Email address | To send your sign-in code and to identify your account. If you use Sign in with Apple, we get the address Apple shares, which can be a private relay address. |
| Name | Venues check the name on a ticket at the door. |
| Date of birth | Nightlife events are 18+. We check your age when you set up your profile. |
| Phone number | So friends who have your number can find you, if you turn that on, and so we can reach you about a ticket. |
| Wallet public key | Your phone creates a wallet to hold tickets. We keep only its public key, which proves a ticket is yours. The private key stays in your phone's Keychain and is never sent to us. |
| Signed-in devices | A device name such as "iPhone, iOS 26" and when each was last used, so you can see and sign out your devices. |
| Security log | Sign-ins, sign-outs, failed codes and account changes, with the IP address they came from, to stop abuse and investigate account problems. |
We don't collect your location: the app uses it on your phone only, to show how far events are. We don't use advertising trackers or sell personal data. The beta takes no payments, so we hold no card details.
Where it's kept and who helps us
- OVHcloud hosts our server and database in France.
- Cloudflare runs our domain, sends sign-in emails, and stores encrypted-at-rest database backups in Western Europe.
- Apple distributes the beta through TestFlight and provides Sign in with Apple, under Apple's own privacy policy.
These providers process data only to run Nightstub for us. Some of this happens outside Morocco, in the European Union.
How long we keep it
- Account data: until you delete your account.
- Sign-in codes: stored only in a scrambled form that can't be turned back into the code, and valid for 10 minutes.
- Security log: 1 year.
- Backups: up to 30 days, after which they're deleted automatically.
Deleting your account
In the app, open You, then Delete account. This signs out every device and immediately removes your email, sign-in methods, name, phone and date of birth. We keep an empty record with no personal details so that past orders stay consistent. Copies in backups disappear as those backups expire, within 30 days. You can also ask us by email.
Your rights
Under Moroccan Law 09-08 on the protection of personal data, and the GDPR where it applies to you, you can ask to see the data we hold about you, correct it, delete it, or object to how we use it. Write to support@nightstub.app and we'll answer within 30 days. You can also complain to Morocco's data protection authority, the CNDP (cndp.ma), or to your local authority in the EU.
Age
Nightstub is for people aged 18 and over. We don't knowingly collect data from anyone younger.
Changes
If we change this policy, we'll update the date at the top. If a change affects how we use data you've already given us, we'll tell you in the app first.