Privacy
The principle
gang does not follow you around. Your precise location only serves to show you what is near you, when you look, and the map between friends during Night mode if you accept it for that night.
Outside Night mode, the gang server does not keep your precise location: it keeps your city, a point rounded to about 1 km.
During Night mode, if you accept it, the server keeps your exact location for the map between friends, and erases it 24 hours after the end of the night.
When a search goes through a third-party service (an address, a place, public nights), it receives a point rounded to about 1 km, never your precise location.
Your location and battery only go to your friends during Night mode, if you accept them for that night: two separate yeses, kept in your consent history.
Who is responsible
gang is operated by Stanislas Molveau, a self-employed worker in Québec (under the name Molveau Studio).
Person in charge of the protection of personal information: Stanislas Molveau, contact@thegangapp.com.
What we collect, and why
Your identity: you sign in with Apple or Google. We keep the identifier that service gives us for you, and your email only if it is verified.
Your profile: your first name, your @ and your date of birth. The date of birth is used to check that you are 14 or older.
What you add to your profile if you want: your interests (the kinds of nights you like) and your Instagram, SoundCloud, Deezer or TikTok links.
Your language and your device's time zone, to write to you in your language and at the right time.
Your profile photo: the one you choose, or your Google photo if you sign in with Google.
Your city: when the app opens with your location, we keep a point rounded to a hundredth of a degree (about 1 km) and the city name.
Your precise location: the app sends it with a search (what is near you, a place) to find what is around. The server uses it for that search and does not keep it.
Your city's name comes from your phone: it sends a point rounded to about 1 km to the system's map service (Apple on iPhone, Google on Android).
If you do not share your location, we guess your city from your connection's IP address. The address is neither logged nor kept.
That city comes from the IP Geolocation by DB-IP database (https://db-ip.com), kept on our server: your address is never sent to DB-IP.
During Night mode: your location and battery level, only if you accepted them for that night. They are erased 24 hours after the end.
Your nights: the ones you create or join, your replies and your messages in the night's thread.
What you pick up in a night's lists (to bring, to buy, to do).
Your shared expenses: who paid what, and who owes how much.
Your Interac address, if you give it: it only shows to someone who owes you money.
The photos you add to a night's album, once you have accepted the album's notice. The server rewrites them without their metadata: neither the GPS location nor the device stays in the file.
A photo shows in the album right away, only to the accepted guests of that night.
If you buy a ticket: your order, the email your tickets and receipt go to, and the time your ticket was scanned at the door.
Payment happens on Stripe's page: gang never sees your card number.
If you sell tickets: your Stripe account. gang keeps its status, the display name, your bank's name, the last 4 digits of the account and your GST and QST numbers if you give them. The check of your identity stays with Stripe.
Your feedback (by shaking your device, in Settings or on the website): your text, the screen, the device model and the app version.
On the website, feedback is anonymous: your email only if you give it, so we can answer.
A screenshot attached to feedback is never kept by gang: it arrives in the contact@ inbox, deleted once the feedback is handled.
Your consents: every yes and every no, with the time and the version of the text you read, on every answer for statistics and on every yes for the album.
Your devices: one session per signed-in device, with the name the device gives itself.
Each device's notification token, if you accept notifications.
Your connections: your friends, the people, venues and artists you follow, and your gangs.
Your roles in a night: co-host, door or till, who asked you and your answer.
The people you block.
Your reports, with the fact that you are the one reporting, and your requests to take a photo out of the album. The person concerned never learns who.
Your personalisation profile, only if you accept it: your tastes and affinities, calculated from your nights and your connections (friends, gangs).
If you reply to a night on the website with Apple or Google, a partial account is created: your Apple or Google identity, your verified email, your first name, your Google photo and your reply. It is completed when you open the app with the same identity.
If you reply on the website without an account: your first name and your reply, linked to a key kept in a cookie in your browser.
Who sees what
A night's web page can be seen without an account, by whoever holds its link: the title, the date, the host (their first name, and their photo if they are an adult), the number of replies and up to 12 adult guests who are coming or might come, with their first name and photo, unless the host hides the list.
For a private night, that page also shows the place (a secret place waits for its time); for a public night or one on approval, the address can only be read in the app.
Your profile page on the website can be seen without an account: your first name, your @, your photo if you are an adult and, if your profile is public, the number of nights you have hosted and will host in public.
In the app, a night's album can only be seen by its accepted guests, never through a link.
Before you sign in
The website's map comes from OpenFreeMap: your browser asks it for the map tiles of the area on screen.
Images of public nights, on the website's map and on a night's page, are loaded by your browser. An image comes from our server or from its source (Ticketmaster, Pixabay, Klipy, Giphy, Tenor); in that case, the source sees your IP address.
The website counts its visits with PostHog, without cookies or storage in your browser: nothing links you from one visit to the next.
Google Analytics only counts the website's public pages, with every consent set to "denied": no cookies, no advertising.
Vercel Web Analytics counts the website's traffic, without cookies.
The website sets a cookie when you reply to a night without an account: your guest key, kept 180 days, only for that night.
After signing in with Apple or Google on a night's page, a cookie remembers for 30 days that it is done.
During a sign-in attempt, a cookie protects it for 10 minutes, then it is erased.
The app sends its crash reports to Sentry from launch, without your name or your email.
On iPhone, from launch, the app checks that the Internet connection answers by asking Google for an empty page, which then sees your IP address.
Statistics
At first launch, once your account is created, the app asks whether you accept usage statistics. You can change your mind anytime in Privacy.
Nothing is sent before your yes: what you tap before you answer is never sent, nor kept for later.
If you say yes, these statistics go to PostHog with your account's identifier, a code without your name; never your name, your @, your email, your messages or your photos.
The server also counts two things, a reply on the website and an account created from a link, without a profile: each count carries a random identifier.
On the website, visits are counted without cookies, with no banner to accept.
Who receives your data
The companies listed below receive only what their role needs. We never sell your information and there is no targeted advertising.
Fly.io · Canada (Toronto)
Runs the gang server (the API).
Receives: Everything the app and the site send to the server, and your IP address.
Supabase · Canada
Hosts the gang database.
Receives: Your account, your nights, your replies, your messages, your orders and your consents.
Cloudflare R2 · Automatic region (Cloudflare R2)
Stores files: album photos, profile photos, covers.
Receives: The images you add. Only the gang server reaches them.
Vercel · United States (Washington, iad1)
Hosts the website and counts its visits, without cookies.
Receives: Your IP address, the page you visit, and what you send from the website (your reply and first name, your Apple or Google sign-in, feedback), which the website passes on to the gang server.
Apple · United States
Sign in with Apple. On iPhone: your city's name from your location, and the delivery of notifications.
Receives: What you agree to share when you sign in: an identifier, your email, your first name. On iPhone, your phone sends it a point rounded to about 1 km to find your city's name, and Apple delivers each notification (its text and image).
Google · United States
Sign in with Google, and your Google profile photo if you keep it. On Android: your city's name from your location, and the delivery of notifications. On iPhone: the check of the Internet connection.
Receives: What you agree to share when you sign in: an identifier, your email, your first name, your photo. Your Google photo is loaded from Google by the people who see it. On Android, your phone sends it a point rounded to about 1 km to find your city's name, and Google delivers each notification (its text and image). On iPhone, from launch and before any sign-in, the app asks Google for an empty page to know whether the Internet answers: Google sees your IP address.
Google Places · United States
Finds a place when you create a night.
Receives: The text you type and a point rounded to about 1 km around you, never your precise location. The gang server makes the request: Google does not see your IP address.
Google Analytics · United States
Counts visits to the public pages of the website.
Receives: The page path and your IP address, without cookies and without an identifier.
Mapbox · United States
Finds an address when you create a night.
Receives: The text you type and a point rounded to about 1 km around you, never your precise location. The gang server makes the request: Mapbox does not see your IP address.
Photon (Komoot) · Germany
Finds a place when you create a night.
Receives: The text you type and a point rounded to about 1 km around you, never your precise location. The gang server makes the request: Photon does not see your IP address.
Klipy · United States
Provides GIF covers for a night.
Receives: The word you search (the gang server makes the request). When a GIF shows, your device may load it from Klipy, which then sees your IP address.
Pixabay · Germany
Provides photo covers for a night.
Receives: The word you search (the gang server makes the request). When a photo shows, your device may load it from Pixabay, which sees your IP address.
Giphy · United States
Hosts older GIF covers.
Receives: Your IP address, when your device loads one of these covers.
Tenor · United States
Hosts older GIF covers.
Receives: Your IP address, when your device loads one of these covers.
Ticketmaster · United States
Provide public nights and their images.
Receives: When you look for nights, the gang server may send them your search and a point rounded to about 1 km around you, never your precise location or your name. When an image shows, your device may load it from them, and they then see your IP address.
CARTO · Spain
Provides the app's base maps.
Receives: Your IP address and the map area on screen.
OpenFreeMap (Hyperknot Software Kft.) · Hungary
Provides the website's base maps.
Receives: Your IP address and the map area on screen.
Expo · United States
Carries notifications from the gang server to Apple or Google, which deliver them to your device.
Receives: Your device's notification token and each notification: its text (a message, the sender's first name, a night's title) and the address of its image.
Resend · United States
Sends emails: your tickets and receipts, and to the gang team the feedback you write to us and reports.
Receives: The recipient's address and the content of the email.
The contact@thegangapp.com mailbox (Google Workspace) · United States
Receives what you write to us, your feedback, attached screenshots and reports.
Receives: Your email and what you write, feedback and its screenshot, the identifier of whoever reports.
Stripe · United States
Takes payment for tickets and pays organisers (Stripe Connect).
Receives: When you buy: your card, entered on Stripe's page, and your order. For an organiser: their identity and bank account, checked by Stripe.
Sentry · United States
Receives crash and error reports.
Receives: What crashed, on which device, your account's opaque identifier and your IP address. Never your name, your @ or your email.
PostHog · United States
Usage statistics for the app and the website.
Receives: In the app, only if you say yes: what you tap, linked to your account's identifier, a code without your name. On the website, without cookies: the pages viewed, the opening of a night's page, sending feedback, a venue signing up.
Where your data goes
The gang server runs on Fly.io, in Toronto.
The database is on Supabase, in Canada.
Files are on Cloudflare R2 (automatic region) and the website on Vercel, in Washington (iad1).
The app's crash reports go to Sentry, in the United States.
Statistics go to PostHog, in the United States.
The country of each other company is in the list. Several are outside Québec: your data may therefore be communicated outside Québec.
Any new destination for your data is announced here before it takes effect.
How long we keep each thing
The server does these erasures itself, each time its cleanup task runs, except the rows erased on request or on a stated date.
Your account, after you delete it
- How long
- 30 days, then erased for good with its files
- Why
- Time to change your mind: signing back in cancels the deletion
A device session and its notification token
- How long
- Erased one day after it expires
- Why
- Keeping you signed in on that device
Your location and battery during Night mode
- How long
- 24 hours after the night ends
- Why
- The map between friends during the night, never permanent tracking
Your notification history
- How long
- 60 days
- Why
- Routine cleanup
The first name and reply of a guest who replies on the website without an account
- How long
- 60 days after your reply
- Why
- For that night only, never kept for anything else
A photo in a night's album
- How long
- It leaves the album 30 days after it was added. Its file is erased when its author deletes it or their account is erased
- Why
- Memories among the people of the night, not an endless archive
Feedback you write to us (text, screen, device, version)
- How long
- 12 months, then erased; it goes earlier with your account
- Why
- Fixing what breaks
The log of payment notices received from Stripe
- How long
- 30 days
- Why
- Catching up on a missed notice
The email your tickets are sent to
- How long
- 180 days after the night ends
- Why
- Resending your tickets and answering a card dispute
The log of tickets scanned at the door
- How long
- 180 days after the night ends
- Why
- Proof in case of a dispute
When a door team member downloads a night's ticket list
- How long
- 180 days after the night ends
- Why
- Knowing which device had the list, in case of a dispute
The note you write when you say your ticket was not scanned
- How long
- 180 days after the night ends; the claim itself stays with the order
- Why
- Settling the claim, then answering a card dispute
Your orders, receipts, refunds and claims (amounts, taxes, dates)
- How long
- Kept as accounting records, detached from your name when your account is erased; six years, the tax retention period.
- Why
- Accounting and tax obligations
The GST and QST numbers of an organiser whose account is erased
- How long
- 6 years after their last receipt
- Why
- Tax obligations
Your personalisation profile (your tastes, your affinities)
- How long
- Erased as soon as you withdraw this consent
- Why
- It is a calculation about you: you control it
The emails on the former waitlist
- How long
- Erased on request to contact@thegangapp.com
- Why
- The waitlist no longer exists
An account started on the website and never finished in the app
- How long
- Erased on request at contact@thegangapp.com
- Why
- It only serves to find your reply when you open the app
| Data | How long | Why |
|---|---|---|
| Your account, after you delete it | 30 days, then erased for good with its files | Time to change your mind: signing back in cancels the deletion |
| A device session and its notification token | Erased one day after it expires | Keeping you signed in on that device |
| Your location and battery during Night mode | 24 hours after the night ends | The map between friends during the night, never permanent tracking |
| Your notification history | 60 days | Routine cleanup |
| The first name and reply of a guest who replies on the website without an account | 60 days after your reply | For that night only, never kept for anything else |
| A photo in a night's album | It leaves the album 30 days after it was added. Its file is erased when its author deletes it or their account is erased | Memories among the people of the night, not an endless archive |
| Feedback you write to us (text, screen, device, version) | 12 months, then erased; it goes earlier with your account | Fixing what breaks |
| The log of payment notices received from Stripe | 30 days | Catching up on a missed notice |
| The email your tickets are sent to | 180 days after the night ends | Resending your tickets and answering a card dispute |
| The log of tickets scanned at the door | 180 days after the night ends | Proof in case of a dispute |
| When a door team member downloads a night's ticket list | 180 days after the night ends | Knowing which device had the list, in case of a dispute |
| The note you write when you say your ticket was not scanned | 180 days after the night ends; the claim itself stays with the order | Settling the claim, then answering a card dispute |
| Your orders, receipts, refunds and claims (amounts, taxes, dates) | Kept as accounting records, detached from your name when your account is erased; six years, the tax retention period. | Accounting and tax obligations |
| The GST and QST numbers of an organiser whose account is erased | 6 years after their last receipt | Tax obligations |
| Your personalisation profile (your tastes, your affinities) | Erased as soon as you withdraw this consent | It is a calculation about you: you control it |
| The emails on the former waitlist | Erased on request to contact@thegangapp.com | The waitlist no longer exists |
| An account started on the website and never finished in the app | Erased on request at contact@thegangapp.com | It only serves to find your reply when you open the app |
Your rights
Access: in the app, Settings, Privacy, you download a file with your profile, your Apple or Google sign-ins and their email, your gangs, your replies, your roles in a night, your consents, your personalisation profile, your seller account, your orders, your tickets that got in, your refunds, your claims and your feedback.
The rest (your messages, photos, expenses, lists, connections, blocks, reports) is not in that file yet: write to contact@thegangapp.com and we send it to you.
Withdrawal: you withdraw a consent whenever you want, in the same place. Withdrawing personalisation immediately erases the profile calculated about you.
Correction: you fix your first name and your @ in your profile.
We answer a request for access, correction or deletion within 30 days. Write to contact@thegangapp.com.
Delete your account
In the app: Settings, Privacy, Delete my account. Your sessions end on all your devices.
For 30 days, signing back in cancels the deletion. After that, your account and your files are erased for good, except the receipts of your purchases and refunds, kept without your name for accounting; the email on an order goes 180 days after the night.
Your upcoming tickets are refunded as if you changed your mind, when the night's refund rule still allows it, unless the money has already been paid out to the organiser or is disputed with the bank.
If you sign back in within 30 days, refunds not yet sent are cancelled and your tickets become valid again.
A night you organise goes to your first co-host. Without a co-host, a night that has not started yet is cancelled and its guests are told.
Without a co-host, an upcoming night with paid tickets or contributions stops you from deleting your account: cancel it first, which refunds its buyers.
To delete your account without the app, write to contact@thegangapp.com from the email of your Apple or Google account; it is done within 30 days.
Ages 14 to 17
You must be 14 or older. If your date of birth shows you are under 14, the account is erased on the spot, with the first name, the photo and the email.
On a public page of the website (a night, a profile), the photo of a person aged 14 to 17 is never shown; their first name can be, as a night's host or on their profile.
In the guest list of a night's page seen without an account, a person aged 14 to 17 does not appear.
A question
Write to us at contact@thegangapp.com.