This policy explains what information Lineup ("the app") collects, why, and how it is handled. Lineup is developed by AppTapTap ("we," "us," "our"). Lineup is an independent festival companion app and is not affiliated with, sponsored by, or endorsed by any festival, promoter, venue, or artist mentioned in the app.
Information We Collect
Sign in with Apple: your Apple-provided identifier and name, and an email address (which may be a private Apple relay address if you choose to hide your real one).
Profile: the display name, username, and bio you set, and an optional avatar photo you upload, which is stored on our server.
Ratings & attendance: the emoji ratings you give artists and the festivals you mark as attending.
Friends & activity: your friend relationships, friend codes, and an activity feed of your app actions that is visible to your friends.
Push notifications: your device's push token, used only to deliver notifications to you.
Linked music services (optional): if you link Apple Music, playback and library access happens on your device via MusicKit and is not sent to our servers. If you link Spotify, we store the OAuth access and refresh tokens needed to create playlists on your behalf.
On-site friend finder (optional): Lineup can use Nearby Interaction, Wi-Fi Aware, and Multipeer Connectivity to detect nearby friends who also have the feature on. This works strictly device-to-device — your location or distance to friends is never uploaded to our servers. Background location and Bluetooth permissions are requested solely to power this feature and are not used for any other purpose.
On-device AI: in-app questions answered using Apple's on-device Foundation Models are processed entirely on your device; nothing is sent to us.
iCloud & CloudKit: your "My Three" picks can be shared via CloudKit, and widget, Watch, and CarPlay data is cached on your device and synced via your iCloud account, governed by Apple's own privacy terms.
We do not collect analytics, advertising identifiers, or crash/diagnostic data, and Lineup contains no ad or tracking SDKs.
How We Use It
We use this information to operate your account and profile, show you festival lineups and your ratings, power the friends and activity feed, deliver push notifications you've enabled, create Spotify playlists you request, and to detect abuse (for example, reviewing blocked or reported accounts).
Who We Share It With
We use the following service providers, each of whom processes data only as needed to provide their service to us:
Apple — Sign in with Apple, CloudKit, iCloud sync, and push notification delivery.
Spotify — if you link your account, to create playlists on your behalf.
Lineup also displays festival, artist, and schedule information sourced from Wikipedia (CC BY-SA), the Ticketmaster Discovery API, Spotify, and Apple Music — this is public reference data shown to you, not your personal data being shared outward. We do not sell your personal information or share it with advertisers or data brokers.
Retention
We keep your account and associated data until you delete your account. Server logs and backups that may contain residual copies are purged on a rolling 30-day cycle.
Your Choices & Rights
Delete your account and its data any time in-app via Settings → Account → Delete Account. This also revokes your Sign in with Apple authorization.
Unlink Spotify at any time, which removes the stored tokens.
Block or report other users; content that violates our Terms may be removed and accounts suspended.
Depending on where you live (for example, under the CCPA or GDPR), you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to certain processing. Contact us to exercise these rights.
Children
Lineup's social features are intended for users 13 and older, and the app is not directed at children under 13. We do not knowingly collect personal information from children under 13.
Security
We use reasonable technical and organizational measures to protect your information, but no method of transmission or storage is completely secure.
Changes to This Policy
We may update this policy from time to time. Material changes will be reflected by an updated effective date at the top of this page.