Legal

Privacy Policy

Last updated: June 5, 2026

Bandstand Chicago (“Bandstand,” “we,” “us”) is an editorial app for Chicago's live jazz scene. This policy explains what data we collect, why, and what we do (and don't do) with it. We try to be plain-spoken; if anything below is unclear, write support@bandstand.fm.

What we collect

Account info. When you sign in with Google or Apple, we receive your email address and a unique account identifier. We never receive your password.

Favorites and RSVPs. If you favorite a venue, follow an artist, or tap “I'm going” on a show, we store that association so we can show you your own activity on your devices.

Push notification tokens. If you opt in to Editor's Pick or Week Ahead alerts, we store your device's Expo push token so we can deliver those notifications. You can disable notifications at any time in the app or in iOS Settings.

Basic diagnostics. Standard server logs (IP address, timestamps, requested URLs) for security and uptime monitoring. Logs are rotated and discarded within 30 days.

What we do NOT collect

• We do not sell, rent, or share your data with advertisers.
• We do not use third-party analytics SDKs in the app (no Google Analytics, no Facebook Pixel, no Segment).
• We do not access your contacts, photos, microphone, or location.

Who we share data with

Only the third parties strictly required to make the app work:

• Google and Apple — for sign-in authentication only.
• Expo / Apple Push / Google FCM — to deliver push notifications you opted into.
• MongoDB Atlas — our database host.
• Vercel — hosts this marketing website (bandstand.fm).

No advertising networks. No data brokers. No “partners.”

Where data lives

All Bandstand data is stored on servers in the United States. If you sign in from outside the US, your data is transferred and stored in the US under standard contractual clauses.

Your rights

You can request deletion of your account and all associated data by emailing support@bandstand.fm from the email address you signed in with. We process deletion requests within 14 days.

If you are in the EU or California, you have additional rights under GDPR and CCPA respectively, including the right to access, correct, or port your data. Same email address.

Children

Bandstand is intended for users 13 and older. We do not knowingly collect data from anyone under 13.

Changes

If we change this policy, we'll update the “Last updated” date and, for material changes, notify you via push notification or an in-app banner.

Contact

Bandstand Chicago
support@bandstand.fm