SortD

Privacy Policy

Last updated: 6 May 2026

1. Who we are

SortD ("we", "us", "our") is an umbrella for mobile apps built by Frederik Ditlevsen, Denmark. This Privacy Policy applies to all SortD apps. Currently the only SortD app is Festiva, a personal festival schedule and squad-coordination app. The data controller for all SortD apps is:

• Frederik Ditlevsen
• Email: Ditlevsen1006@gmail.com

2. What data we collect

The data below describes Festiva, our current app. As we add apps, any data specific to them will be listed here.

• Account data: email and name from Apple Sign-In, or email and password when signing up directly.
• Profile data: display name, avatar color, language preference.
• Push notification token: a device identifier used to deliver festival reminders.
• Squad data: squad name, invite code, squad membership, and the identity of other squad members.
• Festival activity: the artists and sets you've liked, and any personal tags you've created.
• Admin data (admins only): hashed admin PIN, scrape approval activity.
• Technical data: IP address, app version, and device type — collected automatically by Supabase for security and auditing.

3. Why we collect it (legal basis under GDPR)

Data	Purpose	Legal basis
Account, profile, squad, schedule	Run the app's core features	Performance of contract — Art. 6(1)(b)
Push token + notifications	Send reminders you opted into	Consent — Art. 6(1)(a). You can revoke at any time in OS settings.
Server logs / IP	Security and abuse prevention	Legitimate interest — Art. 6(1)(f)

4. Where your data is stored

All personal data is hosted on Supabase infrastructure in the European Union (Frankfurt region). We do not transfer your personal data outside the EU/EEA, with one exception: when you use Sign in with Apple, Apple processes your credentials under its own privacy policy and standard contractual safeguards.

5. Sharing with third parties

We share the minimum data necessary with:

• Supabase — data hosting and authentication. EU-based subprocessor.
• Apple — Sign in with Apple (email and name only). Subject to Apple's privacy policy.
• Apple Push Notification service / Expo Push — only your device push token, used to deliver notifications you've opted into.

We do not sell your data. We do not share it with advertisers or analytics platforms.

6. How long we keep it

We retain your personal data for as long as your account exists. When you delete your account, we delete all personal data within 30 days, except where we are required to retain something by law.

7. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to processing
• Receive your data in a portable, machine-readable format
• Lodge a complaint with the Danish Data Protection Authority — Datatilsynet — or your local supervisory authority

To exercise any right, email Ditlevsen1006@gmail.com.

8. Account deletion

To delete your account, email Ditlevsen1006@gmail.com from your registered address. We will confirm and complete deletion within 30 days.

9. Minimum age

SortD apps are not intended for children under 13. By creating an account you confirm you are at least 13 years old. Users in jurisdictions where the digital-consent age is higher (for example Germany, where the age is 16 under § 8 DSGVO) must obtain parental consent before creating an account.

10. Cookies and tracking

Our apps do not use cookies. We do not perform behavioral tracking and we do not allow third parties to track you across apps or websites.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated in the app.

12. Contact

Frederik Ditlevsen
Ditlevsen1006@gmail.com