Privacy

Last updated 13 October 2026

Citylark helps you find things to do in your city. This page explains, in plain English, what we collect, why, who helps us run the service, and what you can do about it. Questions? Email hello@citylark.app.

The short version

• We collect what we need to run your account and show you what’s on. We don’t sell your data and we don’t show ads that track you.
• Your location is only used when you ask (to sort by distance or check in). We don’t store where you are on our servers.
• Your memories (photos and videos) are private to you.
• You can delete your account and almost everything with it from the Me page, any time.

What we collect and why

Your account

• Email address and how you sign in (email code, Google or Apple), so you can sign in.
• Birthday, to check you’re 16 or over and to apply age rules (for example, no 18+ events for under-18s). It is never shown to anyone.
• Country and home city, so we show the right places, times and prices.

What you do in Citylark

• Check-ins: the place and the day. When you check in we confirm you’re within about 200 metres, then keep only that distance, not your location.
• Ratings and quick tags (“How was it?”). These are combined with others’ to show stars and “Popular” labels; your name is never shown with them.
• Saved places, alerts and suggestions you send us, and your place on a waiting list if your country isn’t open yet.
• Memories: photos, short videos and captions you add. They’re stored privately and only you can see them.
• Points and rank, worked out from the above.

Your location

Only when you tap “Use my location” or check in. Your browser shares a rough position, which we keep in a cookie on your own device for up to 24 hours so lists can be sorted by distance. We don’t save it in our database.

Sign-in records

When someone signs in or signs up, we record the country and city their connection comes from (worked out by our hosting provider), so we know where Citylark is wanted. We don’t store IP addresses, these records aren’t linked to your account, and they’re deleted after 13 months.

Emails

We email you sign-in codes, and “Let me know when something’s on” alerts if you ask for them (at most one a day). Every alert email has a link to stop them.

Venues and event organisers

If you apply to list events, we collect your name, role, phone number (optional), and the venue’s name, address and website, so we can check the venue is real. If you buy tokens, Stripe handles the payment: we never see your card number. We keep a record of each purchase (amount, VAT, date) because the law requires it.

Age checks for nightlife

Nightlife listings will need an ID check by a specialist provider. We will only keep the result (that you passed, and when), never a copy of your ID.

Under 18s

Citylark is for people aged 16 and over. Accounts for 16 and 17 year olds get extra privacy: memories and location always stay private, there are no 18+ listings, and no public ranking comparisons.

Our legal reasons

• To provide the service you signed up for: your account, check-ins, memories, saved places and points.
• Your consent: using your location, alert emails, and photos you choose to add. You can withdraw it at any time.
• Legitimate interests: keeping Citylark safe and working, preventing misuse, and the anonymous sign-in records.
• Legal obligations: age rules, and keeping payment records for tax.

Who helps us run Citylark

These companies process data for us, only to provide their service:

• Supabase: our database, file storage and sign-in (servers in Ireland).
• Vercel: hosts the website.
• Resend: sends our emails.
• Stripe: takes card payments from venues.
• Google or Apple: only if you choose to sign in with them.

When you tap “Directions”, we open Google Maps or Apple Maps, and their own privacy policies apply. Some of these companies are based in the United States; where data leaves the UK, it is protected by the safeguards UK law requires.

How long we keep things

• Your account and everything in it: until you delete your account.
• Sign-in records: 13 months.
• Venue payment records: 6 years, as tax law requires.
• Deleted data can stay in our providers’ backups for a short time before it’s overwritten.

Cookies

We only use cookies Citylark needs to work. No advertising or tracking cookies.

• Sign-in cookies: keep you signed in.
• City: remembers the city you chose (30 days).
• Location: your rough location, only if you shared it (24 hours).

Your rights

You can ask us to:

• give you a copy of your data, or send it to another service;
• correct something that’s wrong;
• delete your data (or do it yourself: Me → Delete my account);
• stop or limit something we do with your data.

Email hello@citylark.app and we’ll reply within a month. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (UK) or the Nigeria Data Protection Commission.

Changes

If we change this page in a way that matters, we’ll tell you in Citylark or by email before it takes effect.