Who we are

NightOut is operated by the Data Controller NightOut.
Contact:info@nightout.site

What data we collect

Account data (required): email address, display name, profile photo (required).
Usage data: pages/actions, timestamps, basic device/technical logs.

We do not perform facial recognition or biometric identification; the photo is used only to display your profile.

Why we collect it (legal bases)

Provide the service (visible profile required): GDPR Art. 6(1)(b) (performance of a contract) - the profile photo is necessary to create and show your profile to other users.
Product testing and improvement: Art. 6(1)(f) (legitimate interests) or 6(1)(a) (consent), with data minimisation.
Security and fraud prevention: Art. 6(1)(f).

How we use the data

Create and manage your test account; show your profile to others in the test; store past sessions and conversations.
Improve NightOut based on aggregated, non-identifying analytics.
Support users and keep the service secure.

Retention

Personal data is kept up to 90 days after the end of the test phase, then deleted or anonymised.

You can request earlier deletion through your rights.

Sharing / processors

Trusted providers process data for us under DPAs, for example hosting, storage, and email providers. We do not sell personal data.

International transfers

If data is transferred outside CH/EU/EEA, we use appropriate safeguards such as Standard Contractual Clauses.

Security

HTTPS, access controls, and least-privilege access.
Private image storage with signed links.
EXIF data is removed on upload.
Routine backups.

Your rights (GDPR and Swiss nFADP)

You may request access, correction, deletion, restriction, portability, and withdrawal of consent where applicable.
Contact: info@nightout.site
We respond within 30 days. You may also contact your supervisory authority.

Children

NightOut is for users aged 18 and over.

Changes

We may update this policy; new versions will show a new effective date.

Contact

info@nightout.site