Last updated: September 20, 2026
Where's The Show is operated by Mayhem Purveyors LLC ("Mayhem Purveyors," "we," "us," or "our"). The Where's The Show mobile app (the "App") helps you discover DIY and local-scene live music shows in your city. This Privacy Policy explains what personal information we collect, the purposes for which we collect it, how we use and share it, and the choices you have.
This is a product/UX privacy notice, not legal advice. We describe practices the App actually supports today.
Questions, access or correction requests, deletion requests, or privacy complaints: hello@wherestheshow.app.
Mayhem Purveyors LLC is accountable for the personal information we hold.
Quebec's Law 25 requires us to designate a person in charge of the protection of personal information and to publish that person's title and contact information (s. 3.1):
Title: Privacy Officer
Contact: hello@wherestheshow.app
Send every privacy request to hello@wherestheshow.app.
This policy is written so people who use the App from Canada, including Quebec, can see:
A public Canadian App Store or Play listing, and a French-language store listing, are separate launch decisions. This policy does not claim that either listing is live.
In Canada we show a simple in-app ask before personalized ads. If you accept, we may serve personalized ads. If you decline, or until you answer, we serve non-personalized ads only. This is our own ask — not Google UMP / European-regulations Consent Messaging (that path is deferred for Canada and Europe). Device advertising-identifier settings are described under Your advertising choices.
Mayhem Purveyors LLC is responsible for personal information under our control, including information processed for us by the service providers listed below. The Privacy Officer at hello@wherestheshow.app is the contact for privacy questions and complaints.
We collect personal information only for these purposes:
If we need information for a new purpose, we will update this policy (and, where the use is optional, ask before we rely on it).
You can withdraw optional consents by turning off notifications, removing friends, signing out, or deleting your account. Turning off ads entirely is not a standalone setting unless a supporter purchase (when enabled) removes them.
We aim to collect only what we need for the purposes above. We do not ask for a password (sign-in is a one-time email code, or Sign in with Apple or Google where available). We do not collect precise GPS. City is a manual pick. Guest users do not have to give an email.
Account information. If you create an account, we collect your email address. Sign-in is passwordless — a one-time code sent to your email, or, where available, Sign in with Apple or Google. If you use Sign in with Apple and choose to hide your email, we receive a private relay address instead. We never collect or store passwords. You may also set a username (choose-once; it cannot be edited later in the App), a display name, a home city, and preference toggles (for example, whether accepted friends can see shows you saved, or a supporter badge if that feature is on).
Your activity in the App. When you are signed in, we store the venues and shows you save as favorites and your notification preferences, so they sync to your account. If you use friends, we store friend requests, accepted connections, and shows you share. If you send in-app feedback or a show-data correction, we store that report so we can fix listings.
Push-notification token. If you enable notifications, we store a push token from your device (via Expo) so we can send new-show alerts and saved-show reminders. You can turn notifications off at any time in the App or your device settings.
Advertising and usage data. The App displays ads through Google AdMob (banners on Discover, Calendar, and Search for guests; Discover-only for signed-in users; plus guest-only interstitials). In Canada, a device advertising identifier is used to personalize ads only after you accept the in-app ask; if you decline, or until you answer, ads are non-personalized. In the United States and other regions, AdMob and its partners may collect a device advertising identifier (such as Apple's IDFA or Google's Advertising ID), coarse device information, and ad-interaction data to serve and measure personalized ads, subject to platform rules.
Purchases (only when enabled). If your build has in-app purchases on, Apple or Google handle payment. RevenueCat tells us entitlement status (for example, whether you are "On the List," the store, and how long access lasts) tied to your account id. We do not receive your full payment-card number. Store-side purchase records stay with Apple, Google, and RevenueCat under their policies.
Crash and diagnostic information. As with most apps, our infrastructure processes basic technical data (device type, OS version, IP address, app version) for operation and security. We use Sentry for crash and error reports (stack traces and device/app metadata). Sentry is configured not to send your name or email as default personal information.
Signup security record. When you first sign in, we store a one-time signup record (email, sign-in provider, IP address, user agent, and app build) so we can investigate fake or automated accounts. That record is not shown in the App and is not exposed on any public API.
We share information only with the service providers that help us run the App:
Accepted friends see the limited profile and sharing you turn on (username, display name, and saved shows if you leave "share my shows" on). We do not run a public profile directory.
We may also disclose information if required by law or to protect our rights and our users.
We rely on you for account details (email, display name, username, home city, preferences). You can update display name and preferences in the App. Username is choose-once and cannot be changed later in the App. Show listings come from venue sources and can be wrong; you can send a correction from the App.
To correct personal information we hold that you cannot edit yourself, email hello@wherestheshow.app. We may ask you to send the request from the email on the account so we know it is you.
We use industry-standard measures to protect personal information in transit and at rest (for example, encrypted connections and access limited to what is needed to run the App). Our service providers apply their own security practices. No method of transmission or storage is 100% secure.
This policy is the public description of our practices. It is posted at wherestheshow.app/privacy and linked from the App (Account → Privacy policy). We will change the "Last updated" date when we make material updates, and we may highlight those changes in the App.
The Privacy Officer (title and contact above) is the published contact for how to reach us about personal information.
We keep your information while your account is active.
You can delete your account at any time from Account → Delete account in the App, which permanently removes your profile, saved shows and venues, friend connections and pending requests, shared-show inbox, notification preferences and history, device push tokens, and our copy of billing or referral records from our systems. Feedback and event-data corrections you may have submitted are retained in anonymized form, unlinked from any account. A one-time signup security record may be retained after deletion so we can investigate fake or automated accounts.
If you used in-app purchases when that surface was on, Apple, Google, and RevenueCat may keep their own store or receipt records. We cannot delete those on your behalf.
You can also request deletion without the App installed — see wherestheshow.app/delete-account or email hello@wherestheshow.app. Email requests should come from the address on the account (or the Apple Hide My Email relay, or include your @username). We process email deletion requests within 30 days (usually sooner) and confirm by reply.
Routine server logs (technical data such as IP addresses) age out automatically.
You may request access to the personal information we hold about you, ask us to correct it, or ask us to delete it.
We do not currently offer a self-serve data-export download. Access requests are handled by email after we verify the account. We may decline or limit a request where the law allows (for example, if we cannot verify it is you, or if the information is only in a security log we keep to investigate abuse).
If you believe we are not handling personal information in line with this policy or applicable Canadian privacy law, contact the Privacy Officer at hello@wherestheshow.app. Tell us what happened and what you want us to do. We will look into it and reply.
If you are not satisfied, you may have the right to contact the Office of the Privacy Commissioner of Canada and, if you are in Quebec, the Commission d'accès à l'information du Québec.
The App is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
We operate from the United States. If you use the App from Canada or anywhere else outside the U.S., your information may be processed in the United States and other countries where our providers run (including Supabase, Vercel, Google, Expo, Sentry, and, when purchases are enabled, RevenueCat). Those countries may have different privacy laws than your home province or country.
We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date, and may highlight material changes in the App.
Privacy Officer: hello@wherestheshow.app
Questions, access, correction, deletion, or complaints: hello@wherestheshow.app
Account deletion without the App: wherestheshow.app/delete-account