This Privacy Policy describes how Lucalibro Limited (“we”, “us”, “our”) collects, uses and shares information when you use the Derry Jazz mobile and web app (“the Service”). It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using the Service you agree to the collection and use of information in accordance with this Privacy Policy.
Who we are
The Service is operated by Lucalibro Limited, a company registered in the United Kingdom. Derry Jazz is the festival the app is built for; the festival itself is not the operator of the app.
- Contact: lucalibrolimited@gmail.com
- Postal address: 199 Barleyfields, Derry, BT48 8TQ, United Kingdom
For the purposes of UK data protection law, Lucalibro Limited is the data controller for personal data collected through the Service.
Summary
- We do not require you to create an account.
- We do not sell your data, share it with advertisers, or use it for cross-app tracking.
- Information you submit through the Feedback screen is anonymous — we do not store your name, email or device identifier alongside it.
- We use Google Firebase, Apple Push Notification service and (where enabled) Sentry to operate the app.
Information we collect
1. An anonymous user identifier
When you first open the app we generate a random identifier (a UUID) on your device and store it in Google Firestore so the app can save your personal schedule, your favourite artists and your reminders across sessions. This identifier is not linked to your name, email, phone number or any other real-world identifier.
2. Your schedule and favourites
If you add events to your schedule or mark artists as favourites, that information is stored against your anonymous identifier in Firestore so it persists between sessions and across devices.
3. Feedback submissions
The Service includes a Feedback screen where you can submit free-text comments about the festival and the app. When you submit feedback we collect:
- the text you enter in the festival and app feedback fields;
- the version of the app and the operating system platform (iOS, Android or web) at the time of submission;
- the date and time of submission.
Feedback submissions are anonymous — we do not collect your name, email address, device identifier or your anonymous user identifier alongside your feedback. Because submissions are anonymous, we cannot link a submission back to you and therefore cannot delete a specific submission on request. Please do not include personal information about yourself or others that you may later wish removed.
4. Push notifications
If you grant permission, the Service may send you push notifications. To deliver these we register your device with Apple Push Notification service (APNs, on iOS) or Firebase Cloud Messaging (FCM, on Android), and subscribe your device to topic-based broadcast lists (for example a topic for post-festival feedback prompts). The notification token issued by APNs or FCM is a device-level identifier; we do not link it to your identity. You can disable push notifications at any time in your device's system settings.
5. Usage and diagnostic data
We use Google Firebase Analytics and Firebase Crashlytics to collect anonymous usage and crash information, including:
- which screens you open and broad usage patterns;
- crash reports and unhandled errors, including device model, operating system version and app version;
- anonymous diagnostic data such as the device's mobile operating system, app version and a randomly-generated installation identifier.
This data is not linked to you personally and is used only to improve reliability and the user experience.
If Sentry error reporting is enabled in a build, similar anonymous crash and performance information may also be sent to Sentry.
6. Location
We do not collect your location automatically. Map features may ask for permission to show your position on the festival map; if you grant it, your location is used only on the device while the map is open and is not transmitted to us.
7. Information we do not collect
- We do not ask for your real name, date of birth, address or phone number.
- We do not collect payment information — the app does not sell anything.
- We do not run advertising or share data with advertising networks.
How we use your information
We use the information described above to:
- provide and operate the Service (showing the programme, managing your schedule and favourites, delivering reminders);
- send push notifications you have agreed to receive (e.g. a post-festival prompt to leave feedback);
- collect and review feedback so that we can improve the festival and the app;
- monitor and improve the reliability and security of the Service through anonymous analytics and crash reports;
- comply with legal obligations.
Legal basis for processing (UK GDPR)
We rely on the following legal bases:
- Consent — for sending push notifications and for collecting feedback you choose to submit. You can withdraw consent at any time (by disabling notifications or by simply not submitting feedback).
- Legitimate interests — for anonymous usage analytics and crash reporting, where our legitimate interest is keeping the Service reliable and improving it. We have considered your rights and freedoms and believe this processing has a minimal privacy impact because the data is not linked to you personally.
- Performance of our service to you — for storing your schedule, favourites and reminders so that the app's core functionality works.
How long we keep your information
| Data | Retention |
|---|---|
| Anonymous user identifier, schedule and favourites | Until you delete the app or until 12 months after the festival ends, whichever is later |
| Feedback submissions | Up to 12 months from submission, then deleted |
| Push notification tokens | While the app is installed and notifications are enabled |
| Analytics data (Firebase Analytics) | Up to 14 months (Google's default retention) |
| Crash reports (Firebase Crashlytics / Sentry) | Up to 90 days |
After these periods we delete or anonymise the data unless we are legally required to keep it for longer.
Service providers we use
We rely on the following third parties to operate the Service. They process your information on our behalf and are bound to handle it consistently with this Policy:
- Google LLC (Firebase Firestore, Cloud Messaging, Analytics, Crashlytics and App Check) — hosting of event and feedback data, push notification delivery, anonymous usage analytics and crash reporting. See firebase.google.com/support/privacy.
- Apple Inc. (Apple Push Notification service) — delivery of push notifications on iOS devices.
- Sentry (Functional Software, Inc.) — crash and error reporting, where enabled in a build. See sentry.io/privacy.
International transfers
The providers above may process and store data on servers located outside the United Kingdom, including in the European Economic Area and the United States. Where your information is transferred outside the UK we rely on safeguards recognised under UK GDPR (such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or transfers to jurisdictions covered by a UK adequacy decision).
Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- rectify inaccurate data;
- erase your data (the “right to be forgotten”);
- restrict or object to processing;
- data portability — receive your data in a structured format;
- withdraw consent at any time, where we rely on consent.
To exercise any of these rights, contact us at lucalibrolimited@gmail.com.
Please note that anonymous feedback submissions cannot be tied to a specific person and therefore cannot be individually accessed, corrected or erased on request. Other data (your anonymous user identifier, schedule and favourites) can be deleted on request — please include enough information for us to identify the relevant records (for example, a screenshot of your schedule).
If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
Push notification controls
You can turn push notifications on or off at any time in your device's system settings (iOS: Settings → Notifications → Derry Jazz; Android: Settings → Apps → Derry Jazz → Notifications). Doing so does not affect any other functionality of the app.
Children's privacy
This Service is not directed at children. We do not knowingly collect personal data from anyone under the age of 13. If you are under 13, please do not use the Feedback feature, and do not include your name, school or any identifying information anywhere in the app.
If you are a parent or guardian and you believe your child has provided us with personal data, please contact us at lucalibrolimited@gmail.com and we will take reasonable steps to delete it.
Security
We use commercially reasonable measures to protect your information, including HTTPS encryption in transit and the security controls provided by our service providers. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Links to other websites
The Service may contain links to other websites — for example artist pages or ticket vendors. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies separately.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post any changes on this page and update the “Last updated” date at the top. For material changes we will provide a prominent notice in the app.
Contact
If you have any questions about this Privacy Policy or how we handle your information, please contact:
- Email: lucalibrolimited@gmail.com
- Postal address: Lucalibro Limited, 199 Barleyfields, Derry, BT48 8TQ, United Kingdom