Skip to content
OTT

Privacy Policy

Last updated: July 2026

Who we are

OTT ("Out Tonight") is the data controller for personal data processed through the OTT app. Contact: privacy@outtonight.app.

Data we collect

  • Account data: email, display name, avatar, home city.
  • Usage data: venues viewed, offers claimed, reviews posted, favourites.
  • Location: only when you tap "Near me" — used in your browser to sort venues by distance, never stored.
  • Technical data: device type, browser, IP (for security and analytics).

Lawful basis (UK GDPR)

  • Contract: to provide the service (claims, wallet, account).
  • Legitimate interests: improving the app, fraud prevention.
  • Consent: optional email digest and location access.

How we use your data

  • Authenticate you and run your wallet of claimed offers.
  • Show venues, offers and events relevant to your city.
  • Send the optional "Tonight's Offers" email digest if you opt in.
  • Provide aggregated, anonymised stats to venue owners (e.g. profile views, QR redemptions).

Sub-processors we share data with

  • Lovable Cloud (backend hosting, database, file storage, edge functions — EU region).
  • Cloudflare (CDN, DDoS protection, edge runtime).
  • Stripe (payment processing for venue subscriptions — buyers' card data is handled by Stripe directly, never stored by OTT).
  • Resend (transactional + auth emails).
  • Google AI / OpenAI (only for generating city imagery and "Plan my night" suggestions — no personal data is sent).

All sub-processors are bound by data-processing agreements. We never sell your data and we don't run third-party advertising trackers.

Retention

We keep account data while your account is active and for up to 12 months after deletion for legal and fraud-prevention purposes. Anonymised analytics may be kept longer.

Your rights

Under UK GDPR you have the right to access, rectify, delete, restrict or port your data, and to object to processing. To exercise any right, email privacy@outtonight.app. You may also complain to the ICO (ico.org.uk).

Cookies & local storage

We only use storage that's strictly necessary to run the app — no advertising trackers, so no cookie banner is required under PECR. Specifically:

  • Authentication session — keeps you signed in (Lovable Cloud auth cookie).
  • Age confirmation — remembers you're over 18 so we don't ask every visit.
  • Selected city — remembers your home city.
  • Recently viewed venues — for the "Recently viewed" rail on the home page.
  • Favourites cache — for snappier loads when you re-open the app.

Changes

We'll post material changes here and update the date above.

Data Protection contact

To exercise any right or raise a concern, email dpo@outtonight.app.

← Back home