Afterlight: Concert Diary Privacy Policy
Last updated: February 12, 2026
Overview
Afterlight: Concert Diary is a concert logging app that helps you build a visual diary of every live show you attend. This policy explains what data we collect, how we store it, and what control you have over it.
Afterlight is developed by Maxwell Young, operating as Ninety Nine Digital, based in Auckland, New Zealand.
Data We Collect
We collect the following data to provide the core app experience:
- Concert logs: Artist name, venue, date, your ratings, and personal reflections
- Photos: Ticket stubs and poster images you choose to upload
- Account email: Used for authentication and account recovery
We do NOT collect location data, contacts, browsing history, or any data beyond what you explicitly enter into the app.
How Your Data Is Stored
Your concert logs, photos, and account data are stored in Supabase, a cloud database platform, to enable cross-device sync and backup. Data is encrypted in transit and at rest. Your photos are stored in Supabase Storage with access restricted to your account.
Camera & Photo Access
Afterlight requests camera permission solely for scanning ticket stubs and concert posters. Photos are processed on-device for OCR (using OpenAI) and then uploaded to your personal concert log. We do not access your camera or photo library for any other purpose.
Third-Party Services
We do not use advertising networks, analytics trackers, or data brokers. The following third-party services are used to provide core functionality:
- Supabase: Cloud database and file storage for your concert logs and photos
- Setlist.fm: Used to retrieve setlist data for concerts you log
- Spotify: Optional integration to import listening history and link artists to your concert diary
- OpenAI: Used for OCR processing when scanning ticket stubs and posters
These services receive only the minimum data required to perform their function. We do not share your personal information with any third party for marketing or advertising purposes.
Data Selling
We do not sell, rent, or trade your personal data to anyone, ever.
Your Rights
- Access: All your data is visible within the app
- Export: You can export your full concert diary at any time from settings
- Deletion: You can delete your account and all associated data from settings, or by contacting us directly
- Portability: Exported data is provided in a standard format you can take elsewhere
Data Retention
Your data is retained as long as your account is active. If you delete your account, all concert logs, photos, and personal data are permanently removed from our servers within 30 days.
Children's Privacy
This app is intended for general audiences. We do not knowingly collect data from children under 13.
Changes to This Policy
We may update this policy from time to time. Any changes will be posted on this page with an updated date. Continued use of the app after changes constitutes acceptance of the revised policy.
Contact Us
If you have any questions about this Privacy Policy, please contact us at privacy@ninetynine.digital