Privacy Policy
Last updated: September 2026
fomo-no-no (“we”, “us”) is a gig-discovery service for the UK, run by David Burford, who is responsible for your data (the “controller” under UK data protection law). This policy explains what data we collect when you use our website or Android app, how we use it, who can see it, and how to have it deleted.
Without an account
You can browse gigs without signing in. We then hold only:
- An anonymous ID created by Firebase Authentication, with no connection to your name or email.
- Your venue and genre filters, stored on your device and, if you turn on alerts, on our server against that anonymous ID so we can match alerts to them.
- Push notification tokens, if you turn on alerts: one per device, with the device’s browser or app type and that device’s alert settings (off, immediately, daily summary or both).
With an account
Signing in (by email code or with Google) and using the social features adds:
- Your email address, to sign you in. It is never shown to other users.
- Your username, and your anonymity settings for public and private groups.
- Your gigs: gigs you tag (going, interested, recommended), gigs you add or edit yourself, and your saved filters, synced across your devices. Tags on gigs that have passed are kept as your gig history.
- Your connections: friends, friend requests, people you block, groups you run or belong to, invites, and lists you create or follow.
- Gigs you send to friends or groups, and gigs sent to you. There is no free-text messaging.
- Reports you make about other users or their content, and reports made about yours.
We do not collect your location, contacts or phone number. You must be 13 or over to create an account.
What other users can see
- Your username, and the names and descriptions of lists and groups you create.
- Your friends see the gigs you tag and gigs you send them. Members of your groups see your tags and sends too, under your username or as an anonymous member, depending on your settings for that kind of group.
- Gigs you add yourself are private unless you choose to share them. A shared gig can be seen by your friends and the members of your groups.
- Nobody sees your email address, your filters or who you have blocked.
How we use it
- To show you gigs and send you alerts that match your filters, as they happen or in a daily summary.
- To run the social features: friends, groups, lists, and sending gigs to each other.
- To keep the service safe: we check usernames, list names and group names for offensive language automatically, and review reports by hand (see our Terms of Use).
We use your data to provide the service you have asked for (and, for moderation, our legitimate interest in keeping it safe). We do not sell your data or use it for advertising.
Third-party services
- Amazon Web Services hosts our servers and stores your data in the UK (London). Reports are emailed to us through AWS.
- Firebase (Google) handles sign-in (anonymous, email and Google) and delivers push notifications: policies.google.com/privacy.
- Stytch sends and checks the one-time codes for email sign-in, so it processes your email address: stytch.com/legal/privacy-policy.
- Google Analytics is used on the website only (not in the Android app), and only if you consent, to understand general usage. It is aggregated and not linked to your account.
Google and Stytch may process data outside the UK, under their own safeguards for international transfers.
Data storage and retention
- Account data is kept until you delete your account, and is then deleted straight away (what is deleted and what is kept).
- Push tokens are removed when you turn alerts off, or when Firebase tells us the app has been uninstalled.
- Reports (ones you made, and ones about your content) are kept for up to 12 months, so we can deal with repeat abuse. A record of a ban for breaking our rules is kept.
- A copy of lists and groups you own is kept for 30 days after you delete them or your account, so they can be restored for their followers and members.
- Our database backups keep deleted data for up to 35 days before it is gone for good.
Your rights
Under UK data protection law you can ask for a copy of your data, have it corrected, have it deleted, or object to how we use it. You can:
- Delete your account yourself from Settings → Account → Delete account.
- Turn alerts off per device in Settings → Notifications, or revoke notification permission in your device or browser settings.
- Email us (see below) for anything else, and we will respond within a month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office: ico.org.uk.
Contact
Changes to this policy
If we make material changes we will update the date at the top of this page. Continued use of the app or site after changes constitutes acceptance.