Effective from: November 1, 2026
This privacy policy explains which personal data we process when you use the MyParty app, the web app (app.myparty.software) or the website (www.myparty.software) (together the "Service"), why we do so and what rights you have. It is based on the Swiss Federal Act on Data Protection (FADP) and – where applicable – the EU General Data Protection Regulation (GDPR).
1. Controller
MyParty GmbH, Hofstrasse 14, 6416 Steinerberg, Switzerland
Email: info@myparty.software
You can reach us at this address with any questions about data protection and to exercise your rights.
2. The essentials at a glance
- We only process the data we need for the Service.
- We do not sell data, show no advertising and use no analytics or tracking tools in the app or on the website. The only exception: for the newsletter, we measure whether it is opened.
- The website and the web app set no tracking cookies.
- We only use your location, push notifications and the newsletter with your consent, which you can withdraw at any time.
- You can delete your account in the app at any time and request a copy of your data.
3. What data we process and why
For each category of data, this shows why we need it, the legal basis (under the GDPR) and how long we keep it.
Account
Email address, name, username, date of birth (for business accounts, optionally the founding date instead), account type (person, artist, business), settings such as language, currency and notifications
- Purpose: Creating and managing the account, ensuring the minimum age
- Legal basis: Contract (Art. 6(1)(b))
- Retention: Until the account is deleted
Sign-in
One-time code, session data including IP address and device/browser (user agent)
- Purpose: Secure sign-in, preventing misuse
- Legal basis: Contract; legitimate interest in security (Art. 6(1)(f))
- Retention: Code: 10 minutes. A session expires 30 days after its last use; we delete expired sessions the next time you sign in, at the latest together with your account
Last use
The time you last used the Service
- Purpose: Proof that you kept using the Service after an announced change of the Terms of Use
- Legal basis: Legitimate interest (Art. 6(1)(f))
- Retention: Until the account is deleted
Profile and content
Profile picture, bio, links, photos, for business accounts e.g. opening hours, address and accepted payment methods; events you create
- Purpose: Display in the Service
- Legal basis: Contract
- Retention: Until you delete them or your account
Interactions
Likes, event views, invitations as co-organizer
- Purpose: Features of the Service, statistics for organizers (as totals only)
- Legal basis: Contract
- Retention: Until the account is deleted, statistics only in aggregated form
Device location
- Purpose: Showing events near you
- Legal basis: Consent (Art. 6(1)(a))
- Retention: Only used for the search and not stored in your account. As the app sends the coordinates with the search request, they can appear in the server logs (see below, 30 days at most)
Camera and photos
- Purpose: Uploading pictures
- Legal basis: Consent
- Retention: We only receive the pictures you select yourself
Push notifications
Device token, platform, app and operating system version, device model, device language
- Purpose: Sending notifications (e.g. likes, changes to events)
- Legal basis: Consent
- Retention: Until you sign out on the device or delete your account. If you turn off notifications in the device settings, the device token remains stored, but we no longer send notifications to that device
In-app notifications
- Purpose: Notification center
- Legal basis: Contract
- Retention: 90 days
Transactional emails
Email address, language
- Purpose: Sign-in codes, security and account notices, moderation decisions, information about changes to the Terms of Use or this privacy policy
- Legal basis: Contract; legal obligation (Art. 6(1)(c))
- Retention: Sending logs at the email service provider as per section 5
Newsletter and software updates
Email address, language, subscription status, whether a newsletter was opened; with an account also your name
- Purpose: News about MyParty and new features; measuring how many newsletters are read
- Legal basis: Consent (sign-up in the app settings or via the form on the website)
- Retention: Until you unsubscribe. After that, your address stays stored as unsubscribed at the email service provider so that you no longer receive the newsletter; we delete it on request. If you have an account, we delete the contact together with the account
Reports
Reported content, reason, comment, who reported it
- Purpose: Reviewing violations, protecting users
- Legal basis: Legitimate interest (Art. 6(1)(f))
- Retention: Up to 12 months after the review is completed
Moderation decisions
Measure taken, reasons, affected account or event
- Purpose: Making decisions traceable, recognizing repeated violations, handling review requests
- Legal basis: Legitimate interest; legal obligation (Art. 6(1)(c))
- Retention: As long as the affected account or event exists; if we delete an event because of a violation, we keep that decision for 12 months
Blocked email addresses
The email address of an account deleted while it was banned, only in hashed (unreadable) form
- Purpose: Preventing a ban from being circumvented by deleting the account and signing up again
- Legal basis: Legitimate interest
- Retention: Until the ban ends; for permanent bans up to 2 years after the account was deleted
Acceptance of legal documents
Version, time, IP address, user agent
- Purpose: Proof of which terms you accepted
- Legal basis: Legitimate interest; legal obligation
- Retention: Until the account is deleted
Inquiries to us
Content of your message, contact details
- Purpose: Answering inquiries
- Legal basis: Contract; legitimate interest
- Retention: Up to 24 months after completion
Server logs
IP address, time, requested address including search parameters (for a nearby search also the coordinates), device/browser (user agent), error messages
- Purpose: Operation, security, troubleshooting
- Legal basis: Legitimate interest
- Retention: 30 days at most, then deleted automatically
Required for an account are your email address, name, username, account type and – except for business accounts – your date of birth. Without them we cannot create an account for you. All other information is optional.
You can use the web app without an account to view shared events. In that case we only process the technical data from the server logs.
Newsletter: You can subscribe in the app settings or – also without an account – via the form on the website. You can unsubscribe at any time via the unsubscribe link in every email or in the app settings. Transactional emails (e.g. sign-in codes or notices about changed terms) are necessary to operate your account and cannot be unsubscribed from.
Open rate: Our newsletters contain an invisible pixel through which our email service provider Bird records whether and when you opened a newsletter. Clicks on links are not recorded. Transactional emails contain no such pixel. You can prevent this by turning off the automatic loading of images in your email program or by unsubscribing from the newsletter.
4. What others can see
Your username, name, profile picture, bio, links and your published events and photos are visible to other users. Events can be shared via links and can then also be viewed without an account; public event pages can also be found through search engines. We may also show published events and public profiles of business accounts on our website, in the newsletter or on our social media channels to promote the Service; you can object to this at any time (see Terms of Use, section 6). Your date of birth and your email address are not public.
5. Recipients and service providers
We only share personal data where this is necessary for the Service. Our service providers process the data on our behalf and according to our instructions:
- PlanetScale, Inc. (USA): Database. Data location: Germany (Amazon Web Services data center in Frankfurt)
- BunnyWay d.o.o. (Bunny CDN): Fast delivery of images. Data location: EU, worldwide network
- Hetzner Online GmbH: Servers of the app, web app and website; storage of images. Data location: Germany (Nuremberg)
- Bird (MessageBird B.V.): Sending emails (transactional and newsletter). Data location: EU
- Google Ireland Limited (Google Workspace): Mailbox info@myparty.software: inquiries and support. Data location: EU and USA
- Apple Inc. (Apple Push Notification Service): Push notifications on iOS. Data location: USA
- Google LLC (Firebase Cloud Messaging): Push notifications on Android. Data location: USA
We also disclose data where we are legally obliged to (e.g. on the order of an authority or a court), where it is necessary to protect people or to enforce our rights, or in the course of a sale or restructuring of our company; in that case we will inform you beforehand.
When you download the app, the privacy policies of Apple or Google apply. We have no influence on the data processed by the app stores.
6. Transfers abroad
Our servers, our database and stored images are located in Germany. Switzerland recognizes the EU as providing an adequate level of data protection. Some service providers are based in the USA or belong to a US group (PlanetScale, Apple, Google) and may, in individual cases, e.g. for support or maintenance, access data from the USA. For transfers to the USA, we rely on the recipient's certification under the Swiss-U.S. or EU-U.S. Data Privacy Framework or on the European Commission's standard contractual clauses (in the version recognized by Switzerland). We will provide further information on request.
7. Deletion
- Deleting your account: You can delete your account in the app at any time. You can undo the deletion within 30 days. After that, we delete or anonymize your data and content, including the moderation decisions about your account, and delete your contact at our email service provider Bird. Bird only keeps a suppression record for addresses that unsubscribed from the newsletter or could not be delivered to, so that nothing more is sent to them. If your account is banned at that time, we only keep your email address in hashed form until the ban ends (see section 3).
- Exceptions: Data we have to keep for legal reasons or as proof (see section 3) is only deleted once the period stated there has expired.
- Backups: Deleted data may remain in encrypted database backups for up to 7 days until these are deleted automatically. It is not used any further.
8. Children and young people
The Service may be used from the age of 13. Young people under 18 need the consent of their parents or legal guardian. If we learn that an account belongs to a person under 13, we delete it. Parents can contact us at any time at info@myparty.software to request information or to have their child's account deleted. If the GDPR applies to a person under 16, we only obtain consents (e.g. for the newsletter) where this is permitted under the applicable law.
9. Your rights
In particular, you have the right to:
- access your data and receive a copy of it;
- receive your data in a common, machine-readable format (data portability);
- rectification of incorrect data – much of it you can change directly in the app;
- erasure of your data;
- restriction of processing and to object to processing based on our legitimate interest;
- withdraw a consent with effect for the future, e.g. in the app or device settings.
To do so, write to us at info@myparty.software, ideally from your account's email address. We may ask for proof of identity and usually respond within 30 days. Access is free of charge.
You can also lodge a complaint with a supervisory authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch), in the EU with the data protection authority of your country of residence.
10. Security
We protect your data with appropriate technical and organizational measures, including encrypted transmission (HTTPS), passwordless sign-in, restricted access rights and two-factor authentication for our administrators. Nobody can guarantee complete protection.
11. No automated decisions
We do not make decisions that are based solely on automated processing and significantly affect you. Moderation decisions are made by people.
12. Changes
We adapt this privacy policy when the Service or the law changes. We will inform you about material changes in advance by email and in the app. You can always find the current version at https://www.myparty.software/privacy-policy.