Access is an app for booking tables and guest lists at real nightlife venues, sharing a table with other verified guests, and showing a pass at the door. This policy explains what Access collects, why, who sees it, how long it is kept and what you can do about it. It is written first for guests in Sweden and the rest of the EU and applies wherever Access is offered; where local law gives you more rights, you have them.
Who is responsible
The controller of your personal data is [Company name — REPLACE-ME], [registered address — REPLACE-ME], [organisation number — REPLACE-ME] ("Access", "we"). Contact us about privacy at privacy@REPLACE-ME.
Each venue is responsible for what it does with the guest details it receives from Access for a booking it accepted, and for its own door and ID checks.
What we collect and why
| Information | Why |
|---|---|
| Account: first and last name, date of birth you enter, @username, phone number, and an email address if you add one or sign in with Apple or Google | To create and run your account, sign you in, refuse accounts for anyone under 18, and let friends find you by @username. |
| Phone verification codes | To confirm the number is yours. Codes expire and are deleted. |
| ID verification: the result, your verified date of birth, and a reference to the selfie taken during the check | Venues require a verified adult before a seat, guest list or door pass. Each night's door age is checked against your verified date of birth. The document and selfie are captured and held by our ID-verification provider, not by Access. |
| One-account check: keyed one-way codes made from your ID document number and national ID number | So one real person has one Access account and a banned person cannot sign up again. These codes cannot be turned back into the number or your name. |
| Door photo (optional) | Only if you turn it on, door staff at a venue you booked can see the selfie from your ID check to match you to your pass. Off by default; you can turn it off at any time. |
| Bookings, holds, guest-list and Ask Access requests, door check-ins, receipts | To deliver what you booked, confirm your arrival, settle payments, handle refunds and disputes, and keep the records the law requires. |
| Payment cards | Card details go straight to our payment provider. Access keeps only the provider's reference and the card type, never the full card number. |
| Table chat messages (text only) | To let your table and its promoter talk. Every message is screened automatically for solicitation; a hit is flagged for a person to review and never blocks or bans anyone on its own. |
| Safety reports, blocks and ratings | To review reports about people or messages, keep you from being seated with someone you blocked, and keep the community safe. |
| Friends: friend requests, and people you sat with in the last 90 days | So you can add people you know and ask them to a table. |
| Taste signals: venue types and vibes you pick, venues you heart, and when you open a venue or table page | To order your Tonight feed and show why each venue is there ("Because you like rooftops"). See Personalize Tonight. |
| Taps from Access to a venue's or event's own website | So Access can show partners how many visits it sends them. Only the site's address is kept, not the page. |
| Device push token and notification settings | To send notifications you have allowed. |
| "Special guests at my venues" setting | Off until you turn it on. If on, you get at most one push a day, never overnight, when a special-guest night, rave, concert or festival is announced at a venue you hearted. We keep which event we told you about so you are never told twice. |
Used but not stored
- Your contacts. If you choose Check contacts on the Friends screen, Access sends your contacts' phone numbers once to find who is on Access. The numbers are matched in memory and not stored or logged, in any form. Names never leave your phone. You can turn off "Let people who have my number find me on Access" on the Friends screen.
- Your rough location. If you allow location, the app rounds it to about a kilometre on your phone and sends it with the Tonight request to show what is near you. It is used for that one answer and never stored or tied to your account. Access never guesses your location from your IP address. The map itself uses Apple Maps on your phone.
Personalize Tonight
Personalize Tonight is on by default and can be turned off in Settings > Tonight. Turning it off deletes the venue views and hearts Access recorded for ordering Tonight and stops recording; Tonight is then ordered by popularity and distance only. Your taste data is used only to order your own feed. It is never sold, never shared with venues, promoters or advertisers, and never used for admission, pricing or ID decisions.
Legal bases (EU and UK)
- Contract: your account, bookings, payments, passes, chat and support.
- Legal obligation: accounting, tax and payment records, and age rules for licensed venues.
- Legitimate interests: safety reports and screening, the one-account check, fraud prevention, Personalize Tonight (which you can switch off), and counting visits we send to partners.
- Consent: contacts and location permissions, push notifications, special-guest alerts and the door photo. You can withdraw consent at any time in the app or in iPhone Settings.
[Legal bases to be confirmed by counsel — REPLACE-ME]
Who sees your information
- Venues. When you ask for a table or guest list, the venue sees your name or initial, whether your ID is verified, your party size, your note and your past arrivals there. After the venue accepts, you complete the names and ages of your party and the accepted booking appears on that venue's service list for the night. At the door, staff see your pass and whether you meet that night's door age, and your selfie only if you turned on the door photo. Venues never read table chat.
- Your table and its promoter. People at your table see your first name and last initial, membership tier, star rating and reliability, how many nights you have been out with Access, when you joined, whether your ID is verified, and your Instagram handle if you added one. They can read the table chat. A promoter sees the guests they brought in, for their credit.
- Friends and search. Others can find you by @username and see your first name and last initial. Blocked people never see you there.
- Access staff. Only authorised staff, and only as needed: to support you, review a report, resolve a payment or meet a legal duty. Access reads a chat only when a message in it is reported.
- Service providers who process data for us under contract:
- Stripe — card payments, refunds and saved cards, and ID verification (Stripe Identity).
- Twilio — text messages with sign-in and verification codes.
- Resend — email, such as email verification codes and booking requests sent to venues.
- Apple — Sign in with Apple, push notifications and maps; Google — Sign in with Google.
- [Hosting and database provider(s) — REPLACE-ME]
- Authorities, when the law requires it, or to protect someone's safety.
Access does not sell personal data, does not share it with advertisers or data brokers, and does not track you across other companies' apps or websites.
Some providers process data outside the EU/EEA. Where they do, we rely on [transfer safeguard, for example EU Standard Contractual Clauses — REPLACE-ME].
How long we keep it
| Information | Kept for |
|---|---|
| Account profile | While your account is open. Removed when you delete it (see below). |
| Table chat | Archived 24 hours after the night; the message text is deleted 30 days later, unless an open safety report still needs it. |
| Venue views and hearts (Personalize Tonight) | 180 days at most. Deleted at once when you turn Personalize Tonight off or delete your account. |
| Ask Access request details (your note, contact details, party names) | Removed 90 days after the request closes. |
| After-party address and note | Erased 18 hours after the start time, or at once if the host calls it off. |
| Contacts' numbers, rough location | Not stored. |
| Payments, receipts and bookings | [period required by accounting law — REPLACE-ME; in Sweden, seven years], with your name removed after account deletion. |
| One-account check codes | Kept after deletion, so a banned person cannot return. They cannot identify you. |
| ID-verification record, safety reports and ratings | [period — REPLACE-ME], linked only to the anonymised account after deletion. |
Deleting your account
In the app: Profile > Settings > Delete account. It takes effect at once and signs you out everywhere. It removes your name, phone, email, @username, date of birth, saved cards, push tokens, taste data and preferences, friends and invites, the after parties you host, the notes, contact details and party names on your Ask Access requests, and your door-photo setting. Taps to partner sites stay only as anonymous counts.
What remains, with your profile anonymised: payment and booking records the law requires, the one-account check codes, ID-verification and safety records, and, for a banned account, a one-way code of the phone number. If you are captain of a live table, or a hold or payment is still open, the app asks you to finish it first.
Your rights
You can ask to see, correct, export or delete your data, to restrict or object to how we use it, and withdraw any consent. Most of this is in the app; for the rest, write to privacy@REPLACE-ME. We answer within one month. You can also complain to your data-protection authority; in Sweden that is the Swedish Authority for Privacy Protection (IMY).
Age
Access accounts are for people 18 and over. Each venue and night may require a higher age, checked against your verified date of birth.
Changes
We will update this page and its date whenever what Access does with your data changes. [How significant changes are announced — REPLACE-ME]