GDPR

How the UK GDPR and EU GDPR apply to RedCurtain, and what you can ask of us.

Data controller

NeonTanuki Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Company number 17138911. Contact: hello@redcurtain.app.

What personal data we process

Very little, and none of your diary.

• Your account: the identifier Apple gives us when you use Sign in with Apple, and your name and email address only if you chose to share them.
• Your diary: your tickets, photos, Memories and awards are stored in a private database in your own iCloud account. Apple hosts it as part of iCloud; we have no access to its contents.
• Usage data: anonymous information about which features are used, not linked to your account and containing nothing you have logged.
• This website: ordinary technical data involved in serving it, such as an IP address in a transient server log, not linked to your account or used to build a profile.

Lawful basis

We use your account identifier to provide the service you signed up for, including syncing your diary between your devices (performance of a contract, Article 6(1)(b)). Usage data and website logs are processed in our legitimate interest in improving, operating and securing RedCurtain (Article 6(1)(f)). We do not rely on consent for tracking, because there is no tracking.

Your rights

Under the UK and EU GDPR you have the right of access, rectification, erasure, restriction, portability, and objection, as well as the right not to be subject to automated decision-making. RedCurtain is built so that you can exercise the practical ones yourself, in the app, at any time:

• Access and portability: export every ticket to CSV from Settings within the app.
• Rectification: edit any show, theatre, rating, note or Memory directly.
• Erasure: delete individual entries, or delete your account from Settings within the app to remove your synced diary and end our use of your account identifier.

For anything else, or to make a formal request, email hello@redcurtain.app. We respond within one month.

International transfers

Your diary is stored by Apple in iCloud, which may store data outside the UK and EEA under Apple's own safeguards. We do not transfer it ourselves. This website is served by Cloudflare, which may serve requests from data centres outside the UK and EEA under standard contractual clauses.

Retention

Your diary stays in your iCloud account until you delete it or delete your account. We keep your account identifier, and your name and email address if you shared them, for as long as your account exists. Usage data is kept only as long as it is useful for improving the app. Transient technical logs from our website provider are retained for a short period for security and reliability, then discarded.

Complaints

If you are unhappy with how we have handled your data, please tell us first at hello@redcurtain.app. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) in the UK, or to your local supervisory authority in the EEA.