Every city has a rich cultural calendar. Every week, concert halls, comedy clubs, debate stages, film houses, and opera venues put on dozens of shows — and most people miss most of them.
The problem is that finding events requires checking a different website for every venue, subscribing to a pile of newsletters, and still missing things. Events sell out before you notice them. You forget the show you were interested in last Tuesday. A city's cultural life is fragmented across too many channels.
The Culture Cal fixes that. We pull the complete agenda from your city's best venues into one clean, fast feed — updated automatically, filtered by what you actually care about, and built for the phone already in your pocket. One app. Every event. Zero noise.
The Culture Cal. is designed with privacy as a default. We collect the minimum data necessary to understand how the app is used and to improve it. No account is required. No name, email address, or personal identifier is ever collected or stored.
This policy applies to the Culture Cal iOS application. By using the app, you agree to the practices described here.
When you first open the app, a random UUID is automatically generated by our backend (Supabase). This identifier is not linked to your name, email address, Apple ID, phone number, or any directly identifying information.
It is a pseudonymous identifier: it cannot on its own identify you as a natural person, but it does allow your in-app data (saved events, visit log entries, usage events) to be associated across sessions. We treat it as personal data under GDPR and apply all protections accordingly.
We process pseudonymous usage data on the basis of legitimate interest (Article 6(1)(f) GDPR). Our legitimate interest is improving the app experience — understanding which features are used, which events attract attention, and how sessions flow — in order to build a better product.
We have assessed that this interest is not overridden by your fundamental rights and freedoms, because: (1) we collect only pseudonymous, not personal, data; (2) we collect the minimum events needed; (3) data is not used for advertising or profiling; and (4) you can object or request deletion at any time.
Your saved events and visit log are stored on the basis of contract performance (Article 6(1)(b) GDPR) — they are necessary to provide the core app functionality you use.
To understand how the app is used, we collect anonymous usage events. Each event includes your anonymous user ID, a timestamp, app version, and platform (iOS). The following events are collected:
| Event | What it records |
|---|---|
| Session start / end | App opened/closed and session duration in milliseconds |
| Event detail viewed | Internal ID of the cultural event you opened |
| Save / unsave | Internal event ID and whether it was saved or unsaved |
| Official link tap | Internal event ID when you tap the official event page |
| TicketSwap link tap | Internal event ID when you tap the resale ticket link |
| Museum filter changed | Which museum filter option was selected |
Analytics are enqueued locally first and synced in the background. They never block the UI and are never tied to your personal identity.
| Data type | Collected? |
|---|---|
| Name or email address | No |
| Phone number | No |
| Precise or coarse location | No |
| Contacts | No |
| Apple ID or account information | No |
| Payment or financial information | No |
| Health or fitness data | No |
| Search history or text you enter | No |
| Browsing history | No |
| Crash logs | No (unless you opt in via iOS) |
Your Visit Log entries and Saved Events are stored in our database under your anonymous user ID, protected by row-level security — only your session can read or modify your own data.
You can delete this data at any time by contacting us at the address below. We will process deletion requests within 30 days. Deleting the app from your device severs the link to your anonymous records.
All data is stored on Supabase infrastructure (data processor). Analytics and user data are isolated using row-level security policies — no user's data is readable by any other user or by unauthenticated requests.
Retention: Anonymous usage analytics are retained for 24 months on a rolling basis, after which they are deleted. Your saved events and visit log entries are retained until you delete them or request erasure of your account data.
We take appropriate technical measures to protect data in transit (TLS 1.2+) and at rest (AES-256 at the storage layer).
We use Supabase as our sole third-party infrastructure provider. Supabase stores data on AWS infrastructure, which may be located in the EU (Frankfurt) or the United States depending on project configuration. Where data is transferred outside the EEA, Supabase relies on Standard Contractual Clauses (SCCs) as the transfer mechanism under Article 46 GDPR.
We do not sell, share, or transfer user data to advertising networks, data brokers, or other third parties for any commercial purpose. We do not integrate third-party analytics SDKs. We do not use cross-app tracking identifiers.
If you are located in the EU/EEA, you have the following rights under GDPR. To exercise any of them, contact us at the email under Contact below.
| Right | What it means |
|---|---|
| Access (Art. 15) | Request a copy of the data we hold linked to your anonymous user ID |
| Rectification (Art. 16) | Request correction of inaccurate data |
| Erasure (Art. 17) | Request deletion of all data linked to your anonymous ID — we process within 30 days |
| Restrict processing (Art. 18) | Request we stop processing your data while a dispute is resolved |
| Data portability (Art. 20) | Request your data in a structured, machine-readable format |
| Object (Art. 21) | Object to processing based on legitimate interest — we will stop unless we have compelling grounds |
| Lodge a complaint | You may lodge a complaint with the Dutch supervisory authority: Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl |
Because we store only a pseudonymous UUID and not your name or email, we may ask you for information to help locate your records when you contact us.
Our App Store privacy nutrition label declaration:
The Culture Cal. is not directed at children under 13. We do not knowingly collect any data from children. If you believe a child has used the app and data has been collected, contact us and we will delete it promptly.
We may update this Privacy Policy when the app's data practices change. The effective date at the top of this page will be updated accordingly. Continued use of the app after changes constitutes acceptance of the updated policy.
Data controller: Olivier Kok, Amsterdam, the Netherlands (hobby project: The Culture Cal. / Amsterdam Culture Tracker).
Email: culture.search020@gmail.com
Privacy policy (this page): https://www.theculturecal.com/#privacy-policy
Supervisory authority:
Autoriteit Persoonsgegevens (Dutch Data Protection Authority)
autoriteitpersoonsgegevens.nl