Notice: This is a placeholder document for internal testing purposes only. It does not constitute a legally binding privacy policy.
This policy explains how we collect, use, and protect your personal data when you use our joinQ application.
1. Data We Collect
To provide our highly secure ticketing and lottery system, we collect the following information:
Account Data: First name, last name, nickname, and email address provided during your passwordless OTP login.
Device & Security Data: A persistent, unique Device UUID (generated locally) to enforce our anti-sharing policies, alongside rotating TOTP secrets for offline barcode generation.
Push Notifications: Device push tokens (e.g., Expo Push Tokens) and platform information to deliver real-time lottery results and admission updates.
Activity Data: Event lottery entries, group formations (via 6-digit group codes), support requests, and on-site ticket scan timestamps.
2. How We Use Your Data
We process your data exclusively to deliver and secure our core services:
Authenticating you via secure, passwordless email links.
Preventing ticket scalping and account sharing by strictly binding active tickets to your registered
device_id.Processing transparent, queue-based event lotteries and sending automated real-time status updates.
Validating offline admission barcodes locally at the venue using time-drift compensated TOTP hashes.
Handling in-app support requests through our automated email routing.
3. Data Retention & Cleanup
We apply strict data minimization principles.
Post-Event Cleanup: All lottery entries, group memberships, and event-specific data are permanently hard-deleted from our databases 30 days after the event's end time.
Account Deletion: You can permanently delete your account and all associated personal data at any time using the "Delete Account" button in the app settings.
To operate our platform securely, we share necessary technical data with trusted infrastructure partners:
Supabase: Provides our secure backend infrastructure, PostgreSQL database, and authentication.
Resend: Processes outgoing transactional emails (OTP login codes, automated support tickets).
Expo / Apple APNs / Firebase Cloud Messaging: Facilitates the delivery of push notifications.
5. Your Rights
Depending on your jurisdiction (e.g., under the GDPR), you have the right to access, correct, or delete your personal data. You can manage your profile information directly within the app settings or contact our support team for further assistance.
Data Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
joinQ UG (haftungsbeschränkt)
Görlitzer Str. 24
91058 Erlangen
Germany
Authorized representatives:
Jana Niepelt
Carolin Senftner
Sina Nebelung
Email: info@joinq-app.com
Website: www.joinq-app.com