Ticket Snap

This Privacy Policy explains how DEEPEYES UK ("we", "us", or "our") collects, uses, and protects your personal data when you use the Ticket Snap iOS application (the "App"). We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

DEEPEYES UK is the data controller for personal data processed through Ticket Snap. If you have any questions about this policy or how we handle your data, please contact us at support@deepeyes.co.uk.

2. Data We Collect

We collect the following categories of personal data:

• Account data — your email address and display name, provided when you sign in (via Apple Sign In or Google Sign In).
• Ticket data — the PDF files you upload, and the booking information extracted from them (event name, date, venue, seat, and QR/barcode data).
• Usage data — anonymised analytics such as feature interactions and crash reports, used to improve the App. This data cannot be used to identify you.
• Device data — basic device identifiers and OS version, collected automatically to support crash diagnostics.

We do not collect payment card details. Any subscription billing is handled entirely by Apple and subject to Apple's own privacy policy.

3. How We Use Your Data

We use your personal data only for the following purposes:

• To create and manage your account and authenticate you securely.
• To process your uploaded PDF tickets, extract the relevant booking details, and generate a mobile-ready QR code.
• To store your ticket archive so you can access past and upcoming tickets at any time.
• To enforce the weekly upload limit applicable to the free plan.
• To send transactional communications (e.g. account verification emails). We do not send marketing emails.
• To diagnose crashes and improve App stability and performance.

4. Legal Basis for Processing

Under UK GDPR, we process your data on the following legal bases:

• Contract performance — processing your ticket data is necessary to provide the core service you have requested.
• Legitimate interests — crash analytics and performance monitoring, balanced against your rights and expectations.
• Legal obligation — where we are required to retain records by applicable law.

5. Data Storage & Security

Your account and ticket data are stored in Google Firebase (Firestore and Firebase Storage), which provides industry-standard encryption at rest and in transit. PDF files are processed to extract booking information and the QR/barcode, and are then permanently deleted from our servers — we do not retain your original PDF. Extracted ticket data (event details and QR code) is stored in your personal archive within Firebase.

Access to your data is restricted to authenticated requests associated with your account. We do not allow any third party to access your personal ticket data.

6. Data Retention

We retain your account data and ticket archive for as long as your account remains active. If you request deletion of your account, all associated personal data will be permanently erased within 30 days. Anonymised crash and analytics data may be retained for up to 24 months for diagnostic purposes.

7. Your Rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Restriction — ask us to restrict processing of your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email us at support@deepeyes.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Third-Party Services

The App uses the following third-party services, each with their own privacy policies:

• Google Firebase — cloud storage, database, authentication, and crash analytics.
• Apple Sign In / Google Sign In — identity providers for account creation and login.
• Sentry — error monitoring and crash reporting (anonymised).
• Apple App Store — subscription billing and distribution.

We do not sell, rent, or share your personal data with any other third parties.

9. Children's Privacy

Ticket Snap is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify you within the App. Continued use of the App after any update constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, please contact us:

• Email: support@deepeyes.co.uk
• Subject line: "Privacy — Ticket Snap"