Privacy Policy
In Your City (inyourcity.co.za, "we", "us") helps people find events, gigs, markets and things to do across South Africa. This policy explains what personal information we collect, why, who we share it with, and the choices you have. We process personal information in line with South Africa's Protection of Personal Information Act (POPIA).
Questions or requests: privacy@inyourcity.co.za.
1. Information we collect
When you create an account
- Name, surname, username and email address.
- Password, if you sign up with one. It's stored only as a one-way hash (bcrypt), so we never see or store the password itself.
When you sign in with Google
With your permission, Google shares your name, email address, whether that email is verified, and
your Google account ID. We ask only for the basic openid, email and
profile permissions. We never get your Google password, contacts, files, calendar or anything else
in your Google account. We use this information only to create your In Your City account, sign you in, and
link your Google sign-in to an existing account with the same verified email.
When you sign in with Facebook
With your permission, Facebook (Meta) shares your name, first and last name, your Facebook user ID for
our app, and your email address (if your Facebook account has one and you allow it). We ask only for the
public_profile and email permissions. We never get your Facebook password, friends list,
posts, photos or messages, and we never post to Facebook for you. We use this information only to create your In
Your City account and sign you in.
When you use the app
- Your activity: events you save, swipe on, mark as interested or give feedback on, and the categories and preferences you choose. We use this to recommend events you're likely to enjoy.
- Your chosen location: the province and city you set, so we can show events near you.
- Your device location (optional): if you allow it in your browser, your approximate coordinates are sent with a request to sort nearby events by distance. They're used for that request only and are not saved to your account.
- Social features: people you follow or who follow you, groups you create or join, events you share to groups, and messages you send in groups.
- The event concierge: messages you type to the concierge (our AI event assistant) and its replies.
- Events you submit: the details and any images you add.
- Notifications: if you turn on push notifications, the push subscription your browser gives us, plus your notification settings.
Collected automatically
- A session cookie that keeps you signed in. We don't use advertising or third-party tracking cookies.
- Small settings saved in your browser (for example filters you last used).
- Standard server logs (such as IP address, browser type, pages requested and time), used to keep the service secure and working.
2. How we use your information
- To create and run your account and keep you signed in.
- To show and recommend events, including events near your chosen location.
- To run social features like following people and groups.
- To send emails you need, such as password-reset links, and event digests you can unsubscribe from at any time using the link in each email.
- To send push notifications, if you turned them on.
- To answer your questions in the concierge.
- To review submitted events, prevent abuse and keep the service secure.
- To understand, in aggregate, how the app is used so we can improve it.
We do not sell your personal information, and we don't use it for advertising.
3. Google user data
In Your City's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Information from Google sign-in is used only to provide sign-in and your account as described above. It isn't sold, used for advertising, or shared except with the service providers below that run In Your City.
4. Who we share information with
Other users can see your name and surname when they search for people, your follow connections, and anything you post in a group (to that group's members). Your email address is never shown to other users.
Service providers process information on our behalf, only to run the service:
- Railway: hosts our servers and database.
- Resend: sends our emails (your email address and the message).
- Anthropic: provides the AI behind the concierge (the messages you send it).
- Google: provides "Sign in with Google".
- Meta (Facebook): provides "Continue with Facebook".
- Your browser's push service (for example Google, Apple or Mozilla) delivers push notifications.
- Our image-storage provider: stores event images.
Some of these providers process data outside South Africa. Where they do, we rely on them protecting it to a standard comparable to POPIA. We may also disclose information if the law requires it.
5. How long we keep it
We keep your account information for as long as your account exists. When you delete your account, we delete your personal information within 30 days, except where we must keep something by law. Server logs are kept only for a limited period for security.
6. Your rights and choices
Under POPIA you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that's wrong;
- delete your account and personal information;
- stop processing your information for a particular purpose.
Email privacy@inyourcity.co.za from the address on your account and we'll respond within 30 days. You can also turn off push notifications in your browser, unsubscribe from emails using the link in each one, and deny or revoke location access in your browser settings.
If you signed in with Google, you can remove In Your City's access at any time at myaccount.google.com/connections. That stops future Google sign-ins, but doesn't delete your In Your City account. Email us for that.
If you signed in with Facebook, you can remove In Your City in your Facebook settings under Apps and Websites. As with Google, this stops future Facebook sign-ins but doesn't delete your In Your City account.
If you're unhappy with how we've handled your information, you can complain to South Africa's Information Regulator.
7. Deleting your account and data
To delete your account and all associated data, including anything we received from Google or Facebook:
- Email privacy@inyourcity.co.za with the subject "Delete my account", from the email address on your account. If you signed up with Facebook and didn't share an email, tell us your In Your City username and name instead.
- We'll delete your account, activity, social connections, group messages and linked Google or Facebook sign-ins within 30 days, and confirm by email once it's done.
- Removing In Your City from your Google or Facebook settings (see section 6) only stops future sign-ins. Email us to delete the data itself.
8. Security
All traffic to In Your City is encrypted with HTTPS, passwords are stored only as bcrypt hashes, and access to our systems is restricted. No system is perfectly secure, but we work to protect your information and will notify you and the Information Regulator of a breach where the law requires.
9. Children
In Your City isn't intended for children under 13, and we don't knowingly collect their personal information. If you believe a child has given us their information, contact us and we'll delete it.
10. Changes to this policy
If we make significant changes, we'll update the date at the top and, where appropriate, let you know in the app or by email.
11. Contact
In Your City: privacy@inyourcity.co.za