Privacy policy
Last updated 26 September 2026
The short version: we collect what we need to run a safe party app — your account details, your ID check, and your location when you use location features. We never sell your data. Your ID photos are only seen by our review team, and your exact location is never shown to other users unless you choose to share it.
1. Who we are
Afterprty (“Afterprty”, “we”, “us”) is a mobile app and website at afterprty.co.uk that helps adults find and host house parties. Afterprty is run by Adam Lancaster, based in England, who is the data controller for the personal data described in this policy. You can reach us at hello@afterprty.co.uk.
This policy explains how we handle personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What we collect
Things you give us
- Account details — your email address, password (stored hashed — we can't see it), and the username/alias you choose.
- Identity verification — a photo of your ID and a selfie, which you submit so a member of our team can confirm you're a real person over 18. This may include special category or sensitive data (such as your photo and date of birth).
- Profile photo — if you choose to upload one.
- Party details — if you host: party name, address, area, capacity, tags, house rules, templates you save, co-hosts you add, and updates you send to guests.
- Activity — your RSVPs, whether you choose to appear in a party's “going” list, ratings you give hosts, and check-in status at parties with a guest list.
- Reports and messages — emergency reports, reports about a party's location photo, bug reports, and anything you email us.
Things collected when you use the app
- Location — with your permission, your device's location is used to show parties near you. We use it on your device to sort and filter the map and feed; we don't keep a history of where you've been. If you use Share my night, your live location is sent to our servers about every 20 seconds while sharing is switched on, so the friend you shared the link with can see it.
- Device and notification data — a push notification token (so we can send you alerts you've opted into), your notification preferences, and the app version you're using.
- Advertising data — see Advertising below.
3. How we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Create and run your account, show you parties, let you RSVP and host | Contract — it's what you signed up for |
| Check your ID and selfie before giving you access, and show a “verified” badge on hosts | Legitimate interests (keeping users safe and confirming everyone is 18+) and, for any special category data, your explicit consent, which you give when you submit your verification |
| Use your location to show parties near you and to power Share my night | Consent — you can turn location off in your phone's settings at any time |
| Handle emergency reports, including revealing a host's real account details to our team | Legitimate interests (safety of users) and, where someone's life or safety is at risk, vital interests |
| Send push notifications (party alerts, rating prompts, messages from our team) | Consent — controlled in the app's settings and your phone's settings |
| Moderate the platform, investigate misuse, enforce our Terms, and fix bugs | Legitimate interests |
| Show ads to non-Premium users | Consent where required (for personalised ads), otherwise legitimate interests |
| Comply with the law or respond to lawful requests from the police or courts | Legal obligation |
4. What other users can see
- Everyone sees a party's name, rough area (a blurred zone a few hundred metres wide), time, tags, how many people are going, and the host's alias, rating and verified status.
- Guests who've RSVP'd “going” also see the exact address, a street-level location photo, and updates the host sends.
- Hosts see who has RSVP'd (by alias) and check-in status, but never your email, ID or real name.
- You only appear in a party's public “going” list if you leave that option switched on.
- Your ID photos and selfie are never shown to other users.
5. Who we share it with
We never sell your personal data. We use a small number of trusted service providers to run Afterprty, who process data on our behalf under contract:
- Supabase — database, accounts, file storage (including verification photos) and server functions.
- Google Firebase — delivering push notifications.
- Google AdMob — showing ads to non-Premium users.
- Mapbox — maps and address search.
- Mapillary — street-level location photos (we send them the party's coordinates, not information about you).
- Vercel — hosting this website and our live-location share pages.
- An email delivery provider — sending account emails such as sign-up confirmation and password resets.
Some of these providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Addendum.
We may also share information if we're required to by law, or if we reasonably believe it's necessary to protect someone's safety — for example, passing details to the police or emergency services after a serious incident at a party.
6. Advertising
If you're not on Premium, the app shows ads provided by Google AdMob. AdMob may use information about your device and app usage to show and measure ads. We won't use your device's advertising identifier for personalised ads unless you've given permission — if the app asks, you can say no and still use Afterprty (you'll just see non-personalised ads). On iPhone you can manage this any time in Settings → Privacy & Security → Tracking. Premium users don't see ads.
7. How long we keep it
- Account and profile data — for as long as your account is open.
- Verification photos — for as long as your account is open, so we can deal with safety reports; they're deleted when your account is deleted.
- Live location shares — stored only while sharing is active and for a short period afterwards.
- Parties, RSVPs and ratings — for as long as your account is open, so hosts' ratings stay accurate.
- Safety reports — we may keep these for longer where needed to deal with a serious incident or a legal claim.
When you delete your account, we delete or anonymise your personal data within 30 days, except where we need to keep something for legal or safety reasons.
8. Your rights
Under UK data protection law you have the right to:
- access a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw consent at any time (for example, turning off location or notifications) — this doesn't affect anything we did before you withdrew it.
To use any of these rights, or to delete your account, email hello@afterprty.co.uk from the address linked to your account. We'll respond within one month.
9. Security
We protect your data with encryption in transit, access controls that limit each user to their own data, and restricted, private storage for verification photos that only our review team can access. No system is perfectly secure, but we take protecting your data seriously and will tell you and the Information Commissioner's Office if a breach affects you where the law requires it.
10. Age limit
Afterprty is only for people aged 18 and over. We check age as part of identity verification, and we'll delete any account we find belongs to someone under 18.
11. Changes to this policy
We may update this policy as Afterprty grows. We'll change the date at the top when we do, and let you know in the app if the change is significant.
12. Contact & complaints
Questions about your data? Email hello@afterprty.co.uk. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk — but we'd appreciate the chance to sort it out with you first.