Privacy
Last updated 2 October 2026
The short version
You can use all of GEMS without an account. Without one, nothing that identifies you leaves your phone.
If you choose to sign in, we store your email address and your favorites, so they follow you to another phone. Nothing else is linked to you.
What people tap is counted to rank what is popular, but those counts carry no user, no device and no account. They cannot be traced back to anyone.
No ads. No tracking. No selling or sharing of data.
Without an account
Your favorites are saved on your phone only. Nobody else can see them, including us. Delete the app and they are gone.
Your filters and settings stay on your phone.
Your location, if you allow it, is used to sort events by distance and to show where you are on the map. It is used on the phone and never stored or sent anywhere. Say no and everything works except distance sorting.
Reminders (if you turn them on) are scheduled by your phone. Nothing about them is sent to us.
Add to calendar asks only for permission to add events. GEMS cannot read what is already in your calendar.
With an account
An account is optional. Its only purpose is to keep your favorites when you change or lose your phone. You can sign in three ways:
- Email. We send a 6-digit code to the address you type. There is no password.
- Sign in with Apple. You can choose "Hide My Email". Then we only get a private relay address from Apple, never your real one.
- Sign in with Google. We get your email address from Google.
When you have an account, we store:
| What | Why |
|---|---|
| Your email address (or Apple's relay address) | To know which account is yours, and to send sign-in codes |
| How you signed in, and when | Kept by the sign-in system as part of running accounts |
| Your favorites (the event's name, date, venue and picture link) | So they follow you to any phone you sign in on |
We do not keep your name or profile picture. Apple and Google can send them when you sign in, and we remove them before they are saved.
Signing out removes your favorites from that phone. They stay in your account until you sign in again.
Deleting your account is in the app, under Account. It deletes the account and the favorites saved to it, straight away and for good.
The anonymous tap counts below are never linked to an account.
The anonymous tap count
When anyone opens an event, saves it, or taps through to buy a ticket, we record:
| Field | Example |
|---|---|
| What kind of thing | event, venue, night, or a part of the app such as the food map |
| Which one | evian christ::2026-08-14::the villa |
| What happened | opened, saved, or ticket tapped |
| The date | The day only, not the time |
That is the whole record. There is no user id, no device id, no account and no IP address in it, on purpose. We use it for one thing: ranking "Trending" by what people are interested in.
Who handles the data
- Supabase hosts the GEMS database, the accounts and the tap counts. Our project runs in Stockholm, Sweden (EU).
- Resend sends the sign-in code emails, from
login@gemsapp.no. It receives the email address the code goes to. EU region. - Apple and Google handle "Sign in with Apple" and "Sign in with Google", under their own privacy policies, if you use them.
We do not use any advertising, analytics or tracking services.
What your phone connects to
Event listings come from our own server. They originate from Ticketmaster, Billetto, Rockefeller and others, but our server collects them once an hour. Your phone reads only our copy, so those companies never see what you search for or open.
Pictures load from where the source hosts them. We store the picture's address, not the picture, so your phone fetches each image directly. Today that includes s1.ticketm.net (Ticketmaster), ik.imagekit.io (Rockefeller), billetto.imgix.net (Billetto) and images.pexels.com (Pexels), as well as venues' own websites. Like any web request, this shows them your IP address. Nothing else is sent.
Maps are Apple Maps, under Apple's privacy policy.
Links you tap go where they say. Ticket links and venue websites open in your browser, and that site's own rules apply.
Server logs
Like any web service, Supabase keeps ordinary request logs, which include IP addresses for a short period. We do not use them, and they are not joined to anything.
Your rights
Under GDPR you can ask to see, correct, move or delete the personal data we hold about you, and you can object to how it is used.
Without an account, we hold nothing about you. With an account, what we hold is listed above. You can delete it yourself in the app, or write to us and we will do it.
You can also complain to Datatilsynet, the Norwegian data protection authority.
If this changes
If GEMS starts collecting anything new, this page is updated first, and the app says so.
Contact
GEMS is made by Nomad.