Row ZeroJoin the waitlist
/ Legal & Transparency

Privacy Policy.

Row Zero is a defensible, canonical concert tour pipeline built for superfans. We treat your personal data with the same uncompromising standard: zero ad sales, no location spying, and 100% user control.

✦ Effective Date: July 6, 2026✦ Applies to Web, iOS & Android✦ Contact: privacy@rowzero.app
/ At a Glance · Our Privacy Pledge
01 / Zero Ad Sales

Never Sold

We never sell, rent, or trade your personal data or concert tracking habits to advertisers or data brokers.

02 / Location Safety

No GPS Spying

We do not track background GPS device location. We only store cities and venues you manually choose.

03 / Store Compliant

1-Click Deletion

Delete your account and all associated trip history instantly inside the mobile app or via our web portal.

04 / Spotify Control

Opt-In Only

Spotify sync is read-only for top artists and follows. Disconnect anytime with one tap to wipe OAuth tokens.

1. Who We Are & Scope

This Privacy Policy describes how Row Zero (“we,” “us,” or “our”) collects, uses, stores, and shares information when you interact with our web applications (rowzero.app and my.rowzero.app), our iOS and Android mobile apps powered by Capacitor, and this marketing website (www.rowzero.app).

If you have any questions or requests regarding your personal data, contact our privacy team directly at privacy@rowzero.app.

2. What Data We Actually Collect

In compliance with Apple App Store (Privacy Nutrition Label) and Google Play Store (Data Safety Section) requirements, here is the exact breakdown of data categories we collect:

A. Account & Identity Information

When you create an account through our authentication provider (Clerk), including Sign in with Google or Sign in with Apple, we collect your email address, display name, and profile avatar image URL. We assign a unique user ID to link your identity to your saved concert plans.

B. Concert Preferences & User Content

We store the tour tracking data and itineraries you create inside the app:

  • Followed Artists: Artists you monitor for tour dates and announcements.
  • Show Attendance: Your status for shows (interested, planning, going, attended, missed), ticket details, and notes.
  • Runs & Stacks: Multi-show itineraries, city selections, and custom trip names you create.
  • The Vault (Past Shows): Receipts of past gigs you have attended.
  • Event Invites: Information shared when you invite friends to your concert plans.

C. Geographic Preferences (No GPS Tracking)

You can set a home base city, secondary travel bases, and a travel radius (in km/miles) to help us recommend shows. We store the coordinates (latitude/longitude) of these selected cities and venues.

Important Disclosure: Row Zero does not access your device's live GPS geolocation or background location services. All location data associated with your account consists solely of cities and venues you manually select or save.

D. Third-Party Integrations & Marketing Waitlist

  • Spotify OAuth Connection: If you connect Spotify, you grant read-only access to your top listening history (user-top-read) and followed artists (user-follow-read). We store tokens solely to sync your artist roster. Disconnecting Spotify in app settings permanently deletes these tokens.
  • Calendar Sync: If you export your schedule to iCal or Google Calendar, we generate and store a secure, unguessable token to serve your timeline.
  • Marketing Waitlist & Website Analytics: When you join our waitlist on www.rowzero.app, we store your email address and browser user-agent. This website also uses PostHog analytics (when enabled) to collect anonymous pageview metrics.

3. How We Use Your Information

We use the information we collect for the following operational purposes:

  • Core Service Delivery: Matching followed artists against our canonical tour database, calculating multi-show trip stacks, and generating your ticket-stub Vault.
  • Tour Alerts: Sending notifications when a second night is added, an opener is confirmed, a date is moved, or tickets go on sale.
  • Cross-Device Sync: Maintaining your unified timeline across web, iOS, and Android surfaces.
  • Security & Performance: Preventing spam and unauthorized access, and debugging system stability.

4. Data Sharing & Disclosure

We Do Not Sell Your Data: Row Zero never sells, rents, or trades your personal information or concert tracking habits to advertisers or data brokers under any circumstances.

We share information strictly with trusted infrastructure partners (sub-processors) who perform essential services on our behalf under secure confidentiality agreements:

  • Clerk: Identity verification, session management, and OAuth authentication.
  • Supabase & Google Cloud Platform (GCP): Encrypted PostgreSQL database hosting and cloud infrastructure.
  • Spotify: OAuth discovery API (strictly upon user opt-in).
  • Vercel & PostHog: Marketing website hosting and anonymous web analytics.

Legal Requirements: We may disclose user information if required by applicable law, subpoena, or court order, or to protect the physical safety and legal rights of Row Zero, our users, or the public.

5. Account Deletion & Data Retention

We retain personal data while your account is active. When you delete your account, your profile and saved concert data are permanently wiped from our active databases.

How to Delete Your Account & Associated Data

In full compliance with Apple App Store and Google Play Store data safety mandates, we provide direct, accessible methods to permanently delete your account and data:

Method 1 / Inside the App

In-App Deletion

Open Row Zero on iOS, Android, or Web. Go to Account / Profile Settings, tap Delete Account, and confirm. Your profile, runs, attendance notes, and OAuth tokens will be immediately purged.

Method 2 / On the Web

Web Deletion Portal

If you uninstalled the app or prefer web access, you do not need to reinstall the mobile app. Visit my.rowzero.app to delete your profile, or email privacy@rowzero.app. We process web requests within 30 days.

6. Your Global Privacy Rights

Depending on your location (including the EU under GDPR, the UK GDPR, and California under CCPA/CPRA), you have the right to:

  • Access & Export: Request a structured copy of your personal data and concert itineraries.
  • Rectify: Update your profile name, avatar, or home city in app settings.
  • Erase: Permanently delete your account and all associated records.
  • Withdraw Consent: Disconnect Spotify or revoke calendar tokens at any time without losing access to core features.

To exercise any of these rights, contact privacy@rowzero.app.

7. Children's Privacy (COPPA)

Row Zero is built for concert superfans and is not directed to children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal data from minors. If we learn that a child has provided us with personal data without parental consent, we will delete their account immediately. Contact privacy@rowzero.app if you believe a minor has created an account.

8. Security & Storage

We employ industry-standard security measures to safeguard your information:

  • TLS/HTTPS Encryption: All client-to-server traffic is encrypted in transit. Database volumes are encrypted at rest.
  • Row-Level Security (RLS): Database tables enforce strict RLS policies so no user can read or modify another user's private itineraries or logs.
  • Secret-Free Builds: API keys and database secrets are never bundled into client apps or shipped inside our mobile Capacitor WebView shell.

9. Policy Updates & Contact

We may update this Privacy Policy to reflect evolving legal, App Store, or Google Play requirements. When material changes occur, we will update the “Effective Date” at the top of this document and notify users via in-app banner or email.

Have Questions? Get in Touch.

If you have questions, feedback, or data deletion requests concerning this Privacy Policy, please reach out to our team: