House of Heron
Privacy Policy
Last updated: 12 July 2026
Who we are
House of Heron is a free music community, open to everyone (the “Service”), available on the web and as a mobile app. This policy explains what personal data we collect, why, and the choices you have. Questions: info@houseofheron.club.
What we collect
- Account details you give us: email address, first and last name, display name, optional bio and avatar.
- Location — only if you choose to appear on the member map. We store your city and a rounded, approximate centroid, never your precise GPS coordinates. You can enter a city manually or, with your permission, have the app derive it from your device; in either case only the city is kept.
- Community content you create: posts, comments, poll votes, event RSVPs, reports, and the avatar/media you upload. Direct messages are relayed in real time and are not stored on our servers.
- Notification tokens — if you enable push notifications, the device token needed to deliver them.
- Technical data used to run and protect the Service: IP address (for rate‑limiting and abuse prevention), timestamps, and basic device/app information.
How we use it
To operate the community; authenticate you; show you and (if you opt in) other members on the map; send transactional email (confirmation, password, event invites) and push notifications; prevent abuse and keep the Service secure; and comply with legal obligations. We do not sell your personal data, and we do not use it for third‑party advertising.
Legal bases (EEA/UK/Switzerland)
We process data to perform our contract with you (running your account), on the basis of your consent (e.g. location on the map, push notifications — which you can withdraw at any time), and for our legitimate interests in securing and improving the Service.
Who we share it with
We use a small set of processors that handle data on our behalf:
- Supabase — database, file storage, and real‑time messaging.
- Vercel — application hosting.
- Resend — transactional email delivery.
- Apple Push Notification service / Google Firebase Cloud Messaging — delivering push notifications.
- OpenStreetMap — map tiles for the member map.
How long we keep it
We keep your data while your account is active. When you delete your account, we remove your profile, posts, comments, RSVPs, uploaded media, and notification tokens. Minimal records may be retained where required by law (e.g. security or accounting logs) and backups roll off on their normal cycle.
Your rights & choices
You can access and correct most of your data directly in Account. You can control whether you appear on the map, and turn notifications on or off. Depending on where you live you may also have the right to access, port, restrict, or object to processing, and to lodge a complaint with your data‑protection authority. To make a request not covered in‑app, email info@houseofheron.club.
Deleting your account
You can permanently delete your account and its associated data at any time from Account → Danger zone → Delete my account. This is immediate and irreversible.
Security
Data is encrypted in transit (TLS). Passwords are stored only as salted hashes, never in plain text. Access to production systems is limited. No system is perfectly secure, but we work to protect your data.
Children
The Service is not directed to children under 16, and we do not knowingly collect their data.
Changes
We may update this policy; we’ll change the “last updated” date above and, for material changes, let members know in‑app.