Privacy Policy

The Heer app and the heer.now website (together, the "Service") are operated by GMRM Technologies Ltd, a company registered in England and Wales (company number 16723875), with its registered office at 43a Fitzjohns Avenue, London, NW3 5JU, United Kingdom ("Heer," "we," "us," or "our").

For the purposes of the UK GDPR and (where applicable) the EU GDPR, GMRM Technologies Ltd is the data controller for the personal data described in this policy.

This policy applies to everyone who uses the Service, wherever in the world they are located. Where a specific country or region gives you additional or different rights, Section 9 explains how those apply.

2.1 Information you give us directly

• Account & sign-in data: your phone number, which we use to send you a one-time passcode (OTP) by SMS or WhatsApp so you can log in without a password.
• Profile information: details you choose to add to your profile, such as a display name, username, profile photo, bio, interests, and — if you manage or claim an artist or community profile — information about that artist, venue, or organisation.
• Content you post or submit: event listings, saves, RSVPs, follows, messages, reviews, claim requests, and any other content or information you provide when using the Service.
• Communications with us: if you contact support, respond to a survey, or otherwise write to us, we keep a record of that correspondence, including the email address or phone number you used.

2.2 Information we collect automatically

• Usage data: how you interact with the app — screens viewed, events searched or saved, features used, session length, and similar interaction data — collected through analytics tooling.
• Diagnostic & crash data: technical information generated when the app crashes or behaves unexpectedly (e.g. device model, OS version, app version, stack traces), used to identify and fix bugs.
• Push notification data: a device token issued by Apple (APNs) or Google (FCM) that lets us send you notifications, e.g. about events you've saved. You can turn these off at any time in your device settings.
• Location data: if you grant permission, we collect your device's approximate or precise location so we can show you events happening nearby and personalise your Explore feed. You can grant, deny, or revoke this permission at any time in your device settings — the Service remains usable without it, though nearby-event recommendations will be less relevant.
• Device & log data: IP address, device identifiers, browser or OS type, language settings, time zone, and general log data generated by using the Service.

2.3 Information from other sources

Where an artist, venue, promoter, or organiser's profile on Heer has not yet been claimed, we may create or populate it using information that is publicly available (for example, publicly listed events, publicly available contact or social details, or information supplied by a partner data source). If you believe a profile about you or your organisation has been created in error, or you'd like to claim, correct, or remove it, contact us using the details in Section 14.

We do not currently connect to or read the contents of your personal email account as part of the Service. If this changes in a future version of the app, we will update this policy and ask for your permission before doing so.

We use the information described above to:

• create and maintain your account, and authenticate you via SMS/WhatsApp OTP;
• operate, personalise, and improve the Service, including showing you relevant events and recommendations;
• show you nearby events based on your location, where you've allowed us to access it;
• enable artist, venue, and community profile management and the profile-claiming process;
• send you service messages, transactional notices, and — where you've allowed it — push notifications about events you may be interested in;
• respond to your questions and provide customer support;
• monitor, debug, and improve the performance, security, and reliability of the Service, including through crash reporting and analytics;
• detect, investigate, and prevent fraud, abuse, and violations of our Terms & Conditions;
• comply with our legal obligations; and
• with your consent or where otherwise permitted, for marketing and promotional communications about Heer, from which you can opt out at any time.

Where UK GDPR or EU GDPR applies, we rely on the following legal bases:

Where we rely on legitimate interests, we've considered that this processing is not overridden by your interests or fundamental rights. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

We do not sell your personal data. We share information only in the following circumstances:

• Service providers: we use trusted third parties to help us run the Service, including our backend and database provider (Supabase), our SMS/WhatsApp one-time-passcode provider, push notification delivery (Apple and Google), and analytics and crash-reporting tools. These providers process data on our behalf, under contractual terms that limit their use of it to the purposes we specify.
• Other users: information you choose to make public on your profile (such as your username, photo, or public activity) is visible to other users of the Service, as is any content you post publicly.
• Legal & safety reasons: we may disclose information if required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of Heer, our users, or the public.
• Business transfers: if Heer or GMRM Technologies Ltd is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction. We'll notify you (e.g. via the app or by email) if this results in a change to how your data is handled.
• With your direction: where you ask us to share information, for example when claiming an artist or organisation profile and verification requires us to liaise with a third party.

Heer helps you discover events, but we don't sell tickets or process payments ourselves. When you choose to buy a ticket or find out more about an event, we may direct you to a third-party website — such as the promoter's, venue's, or ticketing platform's own site. Any information you provide on that site is governed by that third party's own privacy policy and terms, not this one. We encourage you to review them before providing any personal or payment information. We may receive a referral commission from these third parties when you make a purchase after clicking through from Heer; this does not affect the price you pay.

Heer is available to users around the world, and our service providers may process data outside the United Kingdom, including in the European Economic Area and the United States. Where we transfer personal data outside the UK or EEA, we put appropriate safeguards in place, such as the UK's International Data Transfer Addendum or the EU Standard Contractual Clauses, or we rely on a recognised adequacy decision, to ensure your data continues to receive an appropriate level of protection.

We keep personal data for as long as your account is active, and for a reasonable period afterwards to comply with our legal obligations, resolve disputes, enforce our agreements, and support legitimate business purposes such as fraud prevention. When you delete your account (see Section 9), we delete or anonymise your personal data, except where we're required or permitted to retain it for longer — for example, information needed to comply with a legal obligation, resolve a dispute, or maintain security logs for a limited period.

If you're in the UK or the European Economic Area, data protection law gives you the following rights over your personal data, subject to certain exceptions:

• the right to be informed about how your data is used (this policy);
• the right to access the personal data we hold about you;
• the right to have inaccurate data corrected, or incomplete data completed;
• the right to have your data erased in certain circumstances ("right to be forgotten");
• the right to restrict or object to certain processing, including processing based on legitimate interests and direct marketing;
• the right to data portability, where technically feasible; and
• the right to withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at support@heer.now. If you're not satisfied with our response, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to your local data protection authority if you're in the EEA.

If you're in the United States, depending on your state of residence you may have similar rights to know, access, correct, or delete your personal information, and to opt out of certain sharing. You can exercise these rights using the contact details in Section 14.

Wherever you are in the world, you can always ask us what data we hold about you, ask us to correct it, or ask us to delete your account and associated data, by contacting support@heer.now. We aim to respond to all requests within one month.

Heer is not directed at, and may not be used by, anyone under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at support@heer.now and we will take steps to delete it. If the minimum age for consenting to data processing without parental consent is higher than 13 where you live, please ensure you meet that requirement, or that a parent or guardian has consented on your behalf, before using the Service.

We use administrative, technical, and organisational safeguards designed to protect your personal data, including encryption of data in transit, access controls, and OTP-based authentication that avoids storing passwords. No method of transmission or storage is completely secure, however, and we can't guarantee absolute security. If we become aware of a data breach that affects you, we'll notify you and any applicable regulator as required by law.

Our website at heer.now may use cookies and similar technologies to remember your preferences and understand how visitors use the site. You can control cookies through your browser settings. The Heer mobile app does not use browser cookies, though it uses comparable device-level identifiers and SDKs as described in Section 2.2.

We may update this policy from time to time to reflect changes to the Service, our data practices, or legal requirements. If we make material changes, we'll notify you through the app or by other reasonable means before the changes take effect. The "Last updated" date at the top of this page shows when this policy was last revised.

If you have any questions about this Privacy Policy or how we handle your personal data, or want to exercise any of your rights, please get in touch.