Skip to main content
ninetynine
digital

Afterlight: Concert Diary Privacy Policy

Last updated: June 11, 2026

Overview

Afterlight: Concert Diary is a concert logging app that helps you build a visual diary of every live show you attend. Your diary is local-first: it lives on your device, works offline, and requires no account, email, or password.

Afterlight is developed by Maxwell Young, operating as Ninety Nine Digital, based in Auckland, New Zealand.

Where Your Data Lives

  • Concert logs: Artist name, venue, date, ratings, and reflections are stored only on your device
  • Photos: Images you attach are copied into the app's private storage on your device and are never uploaded
  • Backups: Your device backup (e.g. iCloud) may include this data, under your own Apple account

We do not collect location data, contacts, browsing history, or any data beyond what you explicitly enter into the app.

The Optional Friends Feature

If you choose to claim a username in the Friends tab, your concert log entries (artist, venue, date, rating, reflection — not photos) are synced to our backend (Convex) so people who follow you can see your shows and the app can find nights you shared. This is opt-in: until you claim a username, nothing leaves your device. No email or password is collected — your username is the only identifier.

Camera & Photo Access

Afterlight requests camera permission solely for scanning ticket stubs and concert posters. Scanned images are sent to OpenAI for text extraction only, then discarded by that service per its API data-use policy. Photo library access is used only when you choose to attach a photo to a concert memory.

Third-Party Services

We do not use advertising networks or data brokers. The following services are used to provide core functionality:

  • Setlist.fm: Receives artist/venue/date search queries to find shows and setlists
  • Deezer: Receives artist name lookups to display artist images
  • OpenAI: Receives ticket/poster photos you choose to scan, for text extraction only
  • Convex: Hosts the optional Friends sync described above

These services receive only the minimum data required to perform their function. We do not share your personal information with any third party for marketing or advertising purposes.

Data Selling

We do not sell, rent, or trade your personal data to anyone, ever.

Your Rights

  • Access: All your data is visible within the app
  • Export: You can export your full concert diary (JSON or CSV) at any time from Profile
  • Deletion: Deleting the app removes all on-device data. Synced Friends data can be deleted instantly in-app (Profile → Leave Friends & delete account) — this removes your account, synced nights, follows, and blocks from our servers immediately
  • Contact matching: The optional "find friends from contacts" feature hashes phone numbers and emails on your device (salted SHA-256); only hashes are compared, raw contact details never leave your phone, and you are only discoverable if you opt in yourself
  • Web profiles: Your profile is visible on the web only if you turn on "Web profile: public" in settings — off by default
  • Moderation: Reports and blocks are stored so we can act on objectionable content within 24 hours; shared text is screened before reaching any feed
  • Portability: Exported data is provided in a standard format you can take elsewhere

Data Retention

On-device data is yours and persists until you delete entries or the app. Synced Friends data is retained while your username is active and permanently removed within 30 days of a deletion request.

Children's Privacy

This app is intended for general audiences. We do not knowingly collect data from children under 13.

Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date. Continued use of the app after changes constitutes acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@ninetynine.digital