Privacy Policy
Effective date: 7 September 2026
1. Overview
WHERE THIS WKND ("we", "us", "our") operates a nightlife and weekend event discovery service for Hong Kong through our website at wherethiswknd.com and the WKND app for iPhone (together, the "Platform").
This Privacy Policy is our Personal Information Collection Statement under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO"). It explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have.
The Platform is for adults aged 18 or over (see section 11).
2. Data we collect
You can browse events without an account. We collect the data below when you create an account, use account features, or use the app or website.
2.1 Data you give us
| Category | What | When and why |
|---|---|---|
| Mobile phone number | Your number in international format | Used to sign you in with a one-time SMS code. It is your login credential and is never used for marketing. |
| Identity details | First name, last name, date of birth | Collected once at signup. Your date of birth confirms you are 18 or over and is not shown to anyone. |
| Email address | Contact email | Account notices and, only if you opt in, marketing emails. |
| Profile | Display name and an optional profile photo | Shown to members you follow who also follow you. |
| Preferences | Language, push-notification choices, email-marketing choices | To run the app the way you set it. |
| Reports | The reason and any description you give when you report an event, organiser or artist | Content moderation. |
2.2 Data about how you use the Platform
| Category | What |
|---|---|
| Activity | Events you like or mark as interested; organisers, artists, venues and members you follow; whether you have chosen to share your activity with friends |
| Usage | Actions in the app such as opening an event or playing a music preview, app launches, and pages visited on the website. When you are signed in this is tied to your account ID. |
| Device and technical | Device model, operating system version, app version, language, time zone, IP address, a push-notification token, and a random installation identifier |
| Diagnostics | Crash reports, performance measurements and stack traces, tagged with your account ID when you are signed in |
2.3 Data we do not collect
- Precise location. The app never asks for location permission. Maps and directions use the venue's address, not your position.
- Contacts, calendar or photo library. If you set a profile photo, we receive only the photo you pick.
- Apple Music library or listening history. Apple Music previews play on your device through Apple's MusicKit. We do not receive your library, playlists or history.
- Payment details. We do not sell tickets or process payments. If that changes, we will update this policy before collecting any payment data.
- Advertising data. We show no ads and do not track you across other companies' apps or websites.
3. How we use your data
| Purpose | Data used |
|---|---|
| Create your account and sign you in | Phone number, identity details |
| Confirm you are 18 or over | Date of birth |
| Run event discovery, likes, follows and your calendar of saved events | Profile, activity |
| Show your activity to friends, only if you turn on "share activity" | Profile, activity |
| Send push notifications about events and people you follow, if you allow notifications | Push token, activity |
| Send marketing emails, only if you opt in (section 4) | Name, email address |
| Understand how the Platform is used and improve it | Usage, device and technical data |
| Find and fix crashes and bugs | Diagnostics |
| Moderate content, prevent abuse and keep the Platform secure | Reports, account data, device and technical data |
| Comply with Hong Kong law and respond to lawful requests | Any of the above, as required |
We use your personal data only for these purposes and purposes directly related to them. If we want to use it for a new purpose, we will ask for your consent first.
4. Direct marketing
At signup you can separately choose to receive (a) news and event picks from WHERE THIS WKND and (b) promotions from organisers whose events appear on the Platform. We send marketing emails only if you have opted in, and we use only your name and email address to do so. Organisers do not receive your email address; we send those emails ourselves.
You can withdraw consent at any time, free of charge, through the unsubscribe link in every marketing email or by emailing hello@wherethiswknd.com. Sign-in codes and account notices are not marketing and continue for as long as you have an account.
5. Who we share data with
We do not sell personal data, and we do not share it with advertisers or data brokers. We share data only with the service providers below, which process it on our instructions, and with authorities where the law requires.
| Provider | What it does for us | Data it processes |
|---|---|---|
| Supabase | Database, sign-in and file storage | Account, profile and activity data; profile photos |
| Twilio | Delivers the one-time SMS code | Phone number |
| Vercel | Hosts the website | IP address and request metadata |
| Apple | App distribution, push delivery (Apple Push Notification service), Apple Music playback | Push token; Apple Music use is governed by Apple's own privacy policy |
| OneSignal | Sends push notifications | Push token, installation identifier, device model and OS version, account ID |
| PostHog | Product analytics | Usage events, device and technical data, account ID |
| Sentry | Crash and error reporting | Diagnostics, device and technical data, account ID |
When you play a SoundCloud preview, open directions in Apple Maps or Google Maps, open a ride-hailing app, or follow a ticket link, your device connects to that third party directly and its privacy policy applies. We do not send them your account data.
6. How long we keep data
- Account data is kept while your account is active.
- Deleting your account. You can delete your account in the app (Settings → Danger Zone → Delete account) or by emailing us. Your account is deactivated immediately and permanently deleted 14 days later. During those 14 days you can sign in to cancel the deletion. Deletion removes your profile, identity details, likes, follows, reports and preferences; residual copies in backups are cleared on our normal backup cycle.
- Usage and diagnostic data held by our providers is kept only as long as needed for the purposes above. Where it is linked to your account ID, we delete it on request.
- Anonymised, aggregated statistics that cannot identify you may be kept indefinitely.
7. Your rights
Under the PDPO you may:
- Access the personal data we hold about you and receive a copy.
- Correct data that is inaccurate or incomplete.
- Delete your account and personal data (section 6).
- Withdraw consent to marketing at any time (section 4), turn off push notifications in iOS Settings, and change your "share activity" setting in the app at any time.
To exercise a right, email hello@wherethiswknd.com from the email address on your account, or include your account phone number so we can verify you. We respond to access and correction requests within 40 days as the PDPO requires. We may charge a reasonable fee for a data access request only where the PDPO permits.
If you are unhappy with how we handle your data, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong (pcpd.org.hk).
8. Cookies and similar technologies (website)
The website uses cookies to keep you signed in and to measure how the site is used (PostHog). We do not use advertising cookies. You can block cookies in your browser; signing in requires them.
9. App permissions
The WKND app asks for a permission only when a feature needs it, and each is optional:
- Notifications — to alert you about events and people you follow. Change at any time in iOS Settings.
- Photos — only when you choose a profile photo. The picker gives us just the photo you select.
- Apple Music — only if you play an Apple Music preview. Requires an Apple Music subscription and is handled by Apple on your device.
10. Security
We protect your data with encryption in transit (TLS) and at rest, access controls that let each member read only their own private data, phone-number verification for sign-in, and limited staff access. No system is completely secure. If we discover a breach that affects you, we will tell you and the Privacy Commissioner as the law and good practice require.
11. Age requirement
The Platform is for people aged 18 or over. We collect your date of birth at signup to enforce this and do not knowingly hold data about anyone under 18. If you believe a minor has an account, email hello@wherethiswknd.com and we will remove it.
12. Transfers outside Hong Kong
Our service providers store and process data in their own regions, including the United States. We use providers that maintain industry security standards and contractual data-protection terms, and we transfer only the data needed for the purposes described above.
13. Changes to this policy
We may update this policy. If a change is material, we will tell you in the app or by email before it takes effect. The effective date at the top shows the current version.
14. Contact
WHERE THIS WKND — hello@wherethiswknd.com