Privacy Policy

1. Information We Collect

Account and profile information

When you sign in with Google or Apple, we receive:

• your email address
• your name, if your provider shares it. Apple lets you edit or remove your name before you share it.
• your profile photo, if your provider shares one
• which sign-in provider you used

A name is optional. Sign-up does not ask for one. If Apple or Google shares your name and it passes our objectionable-word filter, we save it. You can add, change, or remove it in Edit Profile. Without a name, your profile and any new follows show your username. Follow lists and show tags created earlier may keep the name you had then.

We also store:

• your first and last name, if you have one (from Apple, Google, or Edit Profile)
• your username
• a push notification token, when you turn notifications on
• your app settings and your Analytics consent choice
• the time you created your account and the last time you opened the app

Content you create in the app

• tracked events, performers, venues, and songs
• event ratings: what you paid and what the show was worth to you
• event notes
• ticket prices, the fees part of a ticket price (the fees you type, or fees read from a ticket you scan), and your My Max Price for a performer
• companion names and tags you enter about other people, whether or not they use Show Margin
• follow relationships, follow requests, companion invites, and blocks needed to run the social features
• reports you file about a user or content: your reason, any details you add, and a snapshot of the reported content taken at that time
• pre-show spots: if you answer where you went before a show, we store only the Google place identifier of the spot you pick, never the place name or address. Spot counts are shown on venue pages as totals.
• where you watched a show from, if you answer: General Admission, an assigned seat, or a box, suite, or VIP area. For a show you import, this can also include the section and row from your ticket. Your answer is not shown to other people.

Location

• Device location, if you allow it. Depending on the iOS permission you choose, this is precise or approximate. We use it to find events near you and to sort venues by distance. It reaches our servers as your device reports it.
• Locations and postal codes you type in, when you search somewhere else. These are stored on your device as a preference.

Ticket photos you choose to scan

If you use "Scan a ticket" when adding a past or upcoming show, the photo you take or select is sent to our servers and on to Anthropic, our AI provider, to read the show details from it (performers or teams, venue, venue street address, city and state, date, start time, price, and the fees part of that price). This happens only when you choose to scan, after a notice that names Anthropic. Anything visible in the photo is sent too, including names, barcodes, and order numbers. If a venue street address is read from the ticket, the full address is used once to help match the venue and is not saved. The street name (without the house number) and the city are kept in a venue-matching log for about 180 days, then deleted.

Show Margin does not keep the photo. We keep only the extracted details you review and choose to save with your show. When the ticket shows a date, we keep the event date for 24 hours to confirm your ticket if you add the show as upcoming. Nothing else from the scan is kept with it. See section 5 for how long Anthropic keeps it. You can always skip the scan and type the details by hand.

Order history you choose to import

If you use "Import many shows" when logging past shows, you choose screenshots of your ticket order history or a CSV file. This happens only when you choose them, after a notice that names Anthropic. Each screenshot is sent to our servers and on to Anthropic, our AI provider, to read the shows in it (performers or teams, event name, venue, city, state and country, date, start time, number of tickets, price and fees, seat type, section and row, and whether you went). Anything visible in a screenshot is sent too, including names and order numbers.

A CSV file is read on your phone first. Your phone removes columns whose names show order numbers, confirmation codes, barcodes, payment or card details, email addresses, phone numbers, or URLs. In other columns, except performer and event name columns, it replaces long numbers (5 or more digits in a row, or 9 or more joined by dashes or slashes) but keeps dates. This removes most order numbers from a notes column. The rest of each row is sent to Anthropic, up to 25 rows at a time. Other text in the file is sent as it is. This includes a name in a notes column, a web address in a column with another name, an order code that mixes letters and digits, and a number split by spaces.

Our servers do not keep the screenshots or the file. The app can leave a temporary copy in its cache on your phone, which iOS clears over time. Nothing is saved until you check the list and tap Import. Then we keep only the shows you import, the same as shows you log by hand. See section 5 for how long Anthropic keeps what it reads.

Information from third parties

• SeatGeek event and venue data for event discovery and ticket links.
• Google Maps Platform (Places API) place suggestions and names, used when you search for a pre-show spot and to display spot names. Your spot search text is sent to Google. We do not store Google's place names or addresses.
• Apple Music library and recently played data, if you grant access, to suggest performers. This access is read-once: we do not store your library, playlists, or listening history. When you track a song, we store only its title, artist name, album name, and a link to its Apple-hosted artwork.

Usage and diagnostics

See section 4.

Stored on your device

The app keeps your sign-in state, your preferences, your recent searches, and offline copies of your own data on your device so it opens quickly. Deleting the app removes them.

Your clipboard, once, after you install from a profile link

When someone taps the App Store badge on a Show Margin profile page on our website, that page copies the profile link to their clipboard. After you install the app, the first time you finish signing in, the app checks once whether your clipboard holds a Show Margin profile link. On iOS, the system asks you first before the app can read your clipboard. If you allow it and the link is valid, the app follows that profile for you and tells you so. The app reads nothing else from your clipboard, checks only once per install, and does not keep the link after the follow completes. You can unfollow at any time from their profile.

2. How We Use Information

• create and manage your account
• power event tracking, history, ratings, and Margin features
• show events and venues near you
• run follower features, companion tagging, and activity views
• send the push notifications you turn on
• send the notification emails described in section 5, each with its own setting
• improve reliability and performance and inform product decisions
• detect abuse, enforce rate limits, review reports, and protect accounts
• comply with legal obligations

3. What Other Users Can See

New accounts are public. Any signed-in user can open a public profile and see:

Two switches on the Privacy screen hide your upcoming shows or your Top 3 from everyone but you.

A show buddy appears on your list for another person only if that person can see the buddy: the buddy's account is public, or the person follows them. Other buddies are counted in a line such as "2 more buddies aren't shown", without names.

If you make your account private, only followers you approve see the list above. Everyone else sees only your display name, username, profile photo, and how many followers, follows, and show buddies you have, and can still find you by name or username. Followers you already have keep their access when you switch to private; remove any you no longer want.

Signed-in people can find you by searching the name shown on your profile, or your username. Turn off Find Me by Name on the Privacy screen to be found by your username only.

Nobody else can see:

Your event ratings appear on that event's chart without your name, including ratings you submitted before the chart existed. A performer's page shows a chart of the ratings of their shows the same way, drawn from a sample of up to 16 ratings on each side of the chart, so your line may not appear there. Both charts show each rating's Margin ratio only. If your account is public, any signed-in user can see your line. If your account is private, only your approved followers can see your line on an event's chart, and your ratings are left out of performer charts for everyone, followers included. If you block someone or someone blocks you, neither of you sees the other's line on either chart. A change can take up to 30 minutes to reach another person's app. Your ticket price and worth amounts are not shown.

Your ratings, ticket prices and what a show was worth to you feed community statistics for performers, venues and events (average Show Margin, totals, attendance and pre-show spot counts). The fees part of your ticket price feeds fee statistics for events and venues. Where you watched from splits the average Show Margin of venues and performers into General Admission and Seated. We store that split only when each side has at least 5 ratings, and we show it as averages and counts only. These statistics can be read by any signed-in user and include contributions from private accounts. Where few people have contributed, a statistic can reflect one person's entry.

You can block a user to stop all interaction between your accounts. Blocking hides your profiles and content from each other and removes each of you from the other's companion lists. The blocked user is not notified.

4. Analytics and Diagnostics

With your consent, Firebase Analytics records how the app is used: screen views, searches (including the text you searched for), tracking and status changes, rating ratios, and ticket-link taps, together with a device identifier and, when you are signed in, your user id. It does not record ticket prices, fees, notes, or your My Max Price.

The Analytics switch on the Privacy screen controls Firebase Analytics. Turning it off stops collection.

Crash reports and diagnostic logs (handled errors, warnings, and short context strings) go to Firebase Crashlytics whenever they occur. They are not controlled by the Analytics switch. We use them only to find and fix failures.

App versions before 1.1.1 may record the My Max Price value in analytics and show an older scan notice. Update the app to get the current behavior.

5. Third-Party Services

We use these providers to run the app. Each receives only what its job needs. Each provider is bound by its own terms to protect the data it receives at least as well as this policy does.

• Google Firebase for sign-in, database, server functions, analytics, and crash reporting. Your account data lives here.
• Anthropic reads show details from ticket photos you choose to scan and from order history you choose to import. The whole photo or screenshot is sent, including any visible names, barcodes, and order numbers. For a CSV file, the rows are sent after your phone removes order, payment, email, phone, and URL columns and most long numbers. Show Margin does not store them. Under Anthropic's commercial terms they can be kept for up to 30 days and are not used to train models.
• Expo delivers push notifications. Expo receives a device push token and the notification text (a friend's name and the show title for invites, or a follower's first name and username for follow notifications). Push is off until you turn it on.
• Resend delivers our emails. There are four kinds, each with its own switch in Settings and a one-click unsubscribe link: follow requests (the requester's name and username), new followers (their names and usernames), new shows for performers you track (performer, venue, city, and date), and reminders to rate a show you attended (the show, the ticket price you entered, and a companion's first name if you tagged one). Resend receives your email address and the email contents. Open and click tracking are off.
• SeatGeek for event discovery, event details, and ticket links. When you search near a location we send coordinates rounded to about 1 km, or the postal code you entered, never your name, email, or account id.
• Google Maps Platform (Places API) for pre-show spot search.
• Apple for Sign in with Apple and, if you enable it, Apple Music.
• Catalog lookups. To verify performers and venues we send names and, for venues, addresses to MusicBrainz, OpenStreetMap (Nominatim), and Wikidata. No account data goes with them.
• Affiliate links. Ticket links open SeatGeek with a referral identifier that tells SeatGeek the visit came from Show Margin. It carries nothing about you. SeatGeek's own privacy policy applies once you leave the app.

We do not sell personal information and we do not share it for targeted advertising.

App versions before 1.1.1 may record the My Max Price value in analytics and show an older scan notice. Update the app to get the current behavior.

6. Data Retention

• Account data stays while your account exists. An account that has not opened the app for two years is deleted by a weekly job.
• Unfinished sign-ups: if you sign in but do not finish setting up your profile, we delete the account once it has gone about a week without being opened. The deletion job runs weekly, so this usually happens within two weeks.
• Account deletion from Settings removes your profile, your tracked data, your username, your follow relationships and requests, your blocks, companion entries about you on other people's shows, and companion invites you sent. Your sign-in record is deleted at the same time.
• Reports you filed are kept after deletion so moderation history stays complete. Your user id is removed from them; the reason text and the content snapshot remain. Reports other people filed about you keep your name, username, and profile photo link as they were at that time, and they remain after you delete your account.
• Ticket photos, import screenshots, and import files are not stored by Show Margin. Anthropic can keep what it receives for up to 30 days.
• Ticket scan dates (the event date read from a scanned ticket, used to confirm an upcoming show) expire after 24 hours.
• Venue-matching log entries, including the street name and city read from a scanned ticket, are deleted after about 180 days.
• Follow cooldowns keep the sender and recipient ids, the last decline time, and the last request-email time. Declines prevent new requests for six hours. Request emails are limited to one per pair every 24 hours. Records expire after the later window ends.
• Rate-limit records expire after about 24 hours. Failed background job records expire after 30 days.
• Support email is kept as long as needed to handle your request.
• Data export from Settings returns your account data as stored in our database plus your sign-in email. It does not include provider-side records such as delivered emails.

7. Your Choices and Rights

In the app you can view and edit your profile, export your data, change each push, email, and privacy setting, and delete your account, all from Settings.

You can turn off the app's access to your location, camera, or photos at any time. Open the iOS Settings app, tap Show Margin, then change Location or Camera (and Photos, if it is listed). The app keeps working without them. You can type a location and enter show details by hand.

If you cannot sign in, or you do not have an account and believe we hold information about you (for example a companion name), email support@showmargin.com. We will verify the request and respond.

California residents: we do not respond to browser Do Not Track signals, we do not track you across other sites or apps, we do not sell personal information, and we do not use it for targeted advertising.

8. Security

We use technical and organizational safeguards designed to protect your data, including sign-in checks, server-side authorization, and database security rules that limit each record to its owner and the people this policy says can see it.

9. Children

You must be at least 13 years old to use Show Margin, as our Terms of Service state. We do not knowingly collect personal information from children under 13. If we learn that an account belongs to someone under 13, we delete it. Email support@showmargin.com if you believe a child has an account.

10. Changes to This Policy

We may update this policy. For a material change we will tell you in the app or by email before it takes effect, and we update the effective date at the top of this page.

11. Contact

Questions about this policy: support@showmargin.com.