Privacy Policy
Last updated: October 13, 2026
This Privacy Policy explains how GoingOn ("GoingOn", "we", "our", or "us") collects, uses, shares, and protects information when you use the GoingOn mobile app and related websites at goingonapp.com (collectively, the "Service").
By using GoingOn, you agree to this Privacy Policy. If you don't agree, please don't use the Service.
1. Who we are (Data Controller)
GoingOn is operated by Andrew Lepper, an individual developer based in the United States. For the purposes of the EU and UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), Andrew Lepper is the "data controller" responsible for your personal information when you use the Service.
Contact: info@goingonapp.com
GoingOn is primarily intended for users located in the United States. We have not appointed a representative in the European Union under GDPR Article 27 because our processing of EU residents' data is expected to be occasional and small-scale. If our EU user base grows materially, we will designate a representative and update this policy. In the meantime, EU/EEA and UK residents may exercise all of the rights described in Section 7 below by contacting us at info@goingonapp.com.
2. Information we collect
2.1 Information you give us directly
When you create a GoingOn account, we collect:
- Email address: used to sign you in and contact you about your account.
- Display name (optional): shown next to events you submit.
- Sign-in credentials: if you sign in with Google or Apple, we receive your name and email from that provider, plus an opaque identifier we use to recognize you on return visits. We never see your Google or Apple password.
If you submit an event or claim a venue, we also collect the content you provide: event titles, descriptions, dates, venue details, images, and any contact info you choose to include.
When you submit an event, we also ask for your name and email, and you can add a phone number and a note. Only the GoingOn team sees these. We use them to follow up about that event and, if you tick the box asking about promotion, to tell you how promoting it works. They are never shown on your listing.
If you operate a venue ("business account"), we additionally collect the venue's public business information (name, address, hours, contact info, photos) and, when subscriptions launch, billing details handled by our payment processor.
If you report an event or venue, we collect your report reason and any notes you provide.
2.2 Information collected automatically
- Device and app data: device model, OS version, app version, language, time zone, and a per-installation device identifier (Apple's Identifier for Vendor / IDFV on iOS, or an equivalent app-scoped installation ID on Android) used to deduplicate crash reports. We do not access your advertising identifier (Apple's IDFA or the Android Advertising ID).
- Crash reports and performance data: when the app crashes or is slow, we send a crash report (stack trace, device model, OS version, app version, and your user ID if you're signed in) to our error monitoring provider, Sentry. Crash reports do not include event content, location, or photos.
- Usage information: which screens you open and actions you take in the app (for example opening, saving or sharing an event, following a venue or a List, tapping Directions, the words you search for and how many results came back, and which feed filters you use), with a random ID for this installation. If you're signed in, it's linked to your account ID and account type, never your name or email. We use it to understand how people use GoingOn and make it better. It's processed by our analytics provider, PostHog, which is set to discard IP addresses. We do not use advertising analytics or track you across other apps or websites.
- View counts: in the app and on goingonapp.com we count how many times event, venue and List pages are viewed and how often their buttons are tapped (Directions, links, shares, items on a List). These are stored only as daily totals per page, with nothing about who viewed them. If you're signed in, your session is used only to leave your own views out (an admin, a venue owner, or whoever posted the event); it is not stored with the count.
2.3 Permissions we request
GoingOn asks for the following device permissions only when you use a feature that needs them. You can deny or revoke any of these in your device's Settings app at any time without losing access to the rest of the app.
- Location (When in Use): used only when you open the map view, to center it on your current location and show distance to nearby events. Location data is processed entirely on your device and is not transmitted to or stored on GoingOn's servers.
- Calendar: used only when you tap "Add to calendar" on an event. GoingOn writes the event to your calendar; we do not read your existing calendar entries.
- Photos: used only when you upload an image for an event or venue you manage. GoingOn accesses only the photo you select; we do not browse your library.
- Notifications: used to send reminders for events you've saved, updates from venues you follow, and for Lists you follow, one daily roundup of what's new and, for yard and estate sales, a Thursday heads-up about the weekend. Notifications are off by default and only send what you've opted into.
3. How we use information, and our legal bases
For users in the EU, EEA, or UK, GDPR requires us to identify a legal basis for each way we use your information. The table below maps processing activities to legal bases.
| What we do | Why we do it | Legal basis (GDPR) |
|---|---|---|
| Create and authenticate your account | To let you sign in and use account features | Performance of a contract (Art. 6(1)(b)) |
| Display events you submit and venues you manage | Core function of the app | Performance of a contract |
| Save your events, follows, and preferences | So you can return to them | Performance of a contract |
| Send transactional emails | To keep your account secure and usable | Performance of a contract |
| Send newsletter emails to addresses submitted through a signup form | You explicitly signed up | Consent (Art. 6(1)(a)) |
| Send push notifications | You explicitly opt in | Consent (Art. 6(1)(a)) |
| Use your location to center the map view | You explicitly grant location permission | Consent (Art. 6(1)(a)) |
| Collect crash reports and performance data | To diagnose and fix problems with the app | Legitimate interests (Art. 6(1)(f)) |
| Moderate user-submitted content | To prevent abuse and meet App Store and Google Play policies | Legitimate interests: community safety |
| Comply with legal obligations | Required by law | Legal obligation (Art. 6(1)(c)) |
We do not use your information for any purpose unrelated to the ones listed above. We do not sell your personal information, and we do not use it for third-party advertising or cross-context behavioral advertising.
4. How we share information
We share information only in the following circumstances:
- Public content: events you submit and venues you manage are intended to be visible inside the app to other users.
- Service providers (processors): Supabase (database, auth, storage), Sentry (crash reporting), PostHog (app usage analytics), Cloudflare (a spam check on the website's event form), Kit (newsletter list; receives only an address you type into a signup form), Apple Inc. and Google LLC (Sign In providers), and Stripe (future payment processing). Each is bound by contract to process your data only on our instructions.
- Legal reasons: we may disclose information if required by law or to protect rights, property, or safety.
- Business transfers: if GoingOn is involved in a merger or acquisition, your information may be transferred. We'll notify you if that happens.
5. International data transfers
GoingOn is operated from the United States and our service providers process data primarily in the United States. If you're using GoingOn from outside the United States, your personal information will be transferred to and processed in the United States.
When we transfer personal information of EU/EEA/UK/Swiss residents, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, built into our agreements with Supabase, Sentry, PostHog, Cloudflare, Kit, and Stripe, along with supplementary measures such as encryption in transit (TLS) and at rest. You may request a copy of the relevant safeguards by emailing info@goingonapp.com.
6. Data retention
| Data category | Retention period |
|---|---|
| Account information (email, display name) | While your account is active; deleted within 30 days of account deletion |
| Saved events, followed venues and Lists, preferences | Same as account; deleted with the account |
| Events you submitted and reports you filed | Same as account; deleted with the account |
| Contact info you gave with a submitted event (name, email, phone, note) | Until that event is deleted or your account is closed |
| Crash reports and performance data | 90 days, after which they are aggregated or deleted |
| App usage information | Up to 1 year |
| Database backups | Up to 30 days for disaster recovery |
| Legally required records | The minimum period required by applicable law |
To delete your account, use the in-app delete option (Profile → Settings → Delete Account), Account settings on goingonapp.com, or email info@goingonapp.com with the subject "Delete my account" from the email address registered to the account.
7. Your rights
To exercise any of the rights below, email info@goingonapp.com. We will respond within 30 days.
7.1 Rights available to all users
- Access: request a copy of the personal information we hold about you.
- Correction: ask us to fix inaccurate or incomplete information.
- Deletion: ask us to delete your information. You can also do this yourself in the app.
- Portability: receive your information in a structured, machine-readable format.
7.2 Additional rights under GDPR (EU, EEA, UK, Switzerland)
- Right to restrict processing
- Right to object to processing based on legitimate interests
- Right to withdraw consent for notifications and location at any time, and for the newsletter using the unsubscribe link in any newsletter email
- Right not to be subject to automated decision-making (see Section 8; we don't engage in any)
- Right to lodge a complaint with your local supervisory authority. EU: edpb.europa.eu. UK: ico.org.uk.
7.3 Additional rights under California law (CCPA/CPRA)
- Right to know what categories of personal information we collect and why
- Right to delete your personal information
- Right to correct inaccurate personal information
- Right to opt out of sale or sharing for cross-context behavioral advertising: we do not sell or share personal information for these purposes
- Right not to be discriminated against for exercising any of the rights above
8. Automated decision-making and profiling
GoingOn does not make any decisions about you based solely on automated processing that produce legal effects. The events you see in your feed are not personalized based on profiling. Every user in the same city sees the same time-ordered feed.
9. Children's privacy
GoingOn carries an 18+ age rating on the App Store and Google Play and is not intended for, marketed to, or directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, email info@goingonapp.com and we will delete it promptly.
10. Security
- HTTPS / TLS for all network traffic between the app and our servers
- Encryption at rest for our database and image storage
- Hashed passwords (we never store plaintext passwords)
- Role-based access controls inside our database
- Least-privilege access for our team and contractors
No system is perfectly secure, but we work hard to keep yours safe. If we become aware of a security breach that affects your information, we will notify you in accordance with applicable law.
11. Cookies and similar technologies
The GoingOn mobile app does not use cookies. It uses local storage on your device to cache event data for offline use and to remember your preferences between sessions.
The goingonapp.com website uses only essential cookies and local storage for site functionality. It does not use third-party advertising cookies or cross-site tracking technologies.
12. Changes to this policy
If we make material changes to this Privacy Policy, we'll let you know inside the app and update the "Last updated" date at the top. For significant changes that affect your rights, we'll ask for your consent before the new terms take effect.
13. Contact us
Questions about this policy, or want to exercise any of the rights described above? Email info@goingonapp.com.