← Back to Drop

Privacy Policy

Last updated: October 23, 2026

Drop ("Drop," "we," "us," or "our") is an EDM event-discovery and social service operated by Resonance Ventures LLC, a Colorado limited liability company. This Privacy Policy applies to the Drop mobile app, website, web app, and related services (together, the "Service"). It explains what information we collect, how we use and share it, how long we keep it, and the choices you have.

01Information we collect

We collect the following, depending on which parts of the Service you use and the choices you make:

  • Account and eligibility information. When you create an account, we collect your name or username, email address, account or user ID, and any profile photo you add. Some account-creation flows ask for your date of birth; when they do, we collect it to apply Drop's 13+ account eligibility rule. Authentication is handled through Supabase and, if you choose one, a sign-in provider such as Apple, Google, or Facebook.
  • Verified email, phone, and contact matching. Creating a Drop account requires verifying a mobile phone number with a one-time SMS code. After Drop verifies your account email or you verify a phone, Drop derives protected one-way hashes and enables matching for that verified channel by default. You can turn either channel off at any time in Edit profile. One verified phone can belong to only one Drop account. Twilio processes the phone number and verification delivery or check metadata; Drop retains only protected one-way proofs and the verification time, not the raw phone number. If you grant contacts permission, address-book emails and phone numbers are normalized and hashed on your device. Only those hashes are sent for real-time matching; raw address-book details are not uploaded to or stored by Drop. If you invite a contact, the app reads that contact's name and number on your device to prepare a message in your messaging app; Drop does not receive them.
  • Profile, social, and message content. Your profile city and state, bio, ratings, comments, posts, plans, crew picks and votes, festival crew notes, event submissions, creator-program applications (name, email, city, and social handles), direct messages, group chats, and other content you choose to create or send.
  • Photos and videos. Profile images, ticket screenshots, and event or social media you choose to upload. If you allow photo access to find or fill in past shows, the app reads photo dates and locations on your device to suggest which nights you were at a show; only the dates are sent to Drop to look up events, and photos are uploaded only when you choose to post them.
  • Events, tickets, and preferences. Events, artists, and venues you save, follow, or RSVP to; ticket-wallet records such as the seller and order reference you provide; notification settings; and music preferences. If you connect or import Apple Music or SoundCloud information, Drop may use imported artists and genres and a derived taste profile for recommendations. Drop does not retain your raw playback history or music-service tokens in its database, and we do not collect payment-card details.
  • Location. We store the city and state you choose for local event discovery. If you grant location permission, a GPS fix you request for "Near me" is processed on your device to rank or filter nearby events; it is not transmitted to or retained by Drop. Separately, if you tap "Use my location" when adding a festival crew note, Drop stores that one precise point (latitude and longitude) with the note and shows it to the members of that plan's crew. Drop does not track or share your live location.
  • Calendar. If you allow calendar access, the app adds shows you choose to your calendar and, if you use Import past shows, reads calendar events on your device to suggest shows you attended. Calendar events are not uploaded; only the shows you confirm are saved to your Drop history.
  • Crash reports. If the mobile app crashes or hits an error, it sends a crash report to our crash-reporting provider, Sentry: the error and stack trace, device model, operating-system and app version. Crash reports are not linked to your account, and we turn off the collection of personal details, user activity breadcrumbs, and performance tracing.
  • Mobile app usage and device identifiers. In the mobile app, we collect product interactions and search or filter history, including selected genre, city, and date filters, which we use to understand and improve features and personalize results. We also process identifiers needed to operate the mobile app, such as your user ID and an Expo push token used to deliver notifications.
  • QR codes and invite links. If you scan a Drop QR code, we record the scan with your device type (iPhone, Android, or other) and the campaign printed on the card, not who you are. If you arrive through a friend's or creator's invite link, the referral or creator code from that link is kept in your browser so the invite can be credited if you sign up.
  • Past launch waitlist. If you joined our launch list before Drop was available on the App Store, we stored the email address you entered and, when present, the source link that brought you there. You can ask us to remove it at any time.

02How we use your information

  • Create and secure your account, apply the 13+ account eligibility rule when date of birth is provided, and provide account and social features.
  • Rank, filter, and personalize event recommendations using your city, preferences, saved activity, filters, and music tastes.
  • Match contacts you choose to check, maintain friendships, and enable profiles, posts, plans, direct messages, and group chats.
  • Maintain your ticket wallet and send push notifications or reminders you request (you can opt out).
  • Measure product interactions, diagnose crashes and errors, and improve the Service.
  • Maintain safety, moderate content, prevent abuse, and enforce our Terms.
  • Comply with legal obligations.

03How we share information

We do not sell your personal information or use it to track you across other companies' apps or websites for targeted advertising. We share information only as described here:

  • Service providers. Providers that operate functions on our behalf, including Supabase for backend, authentication, and database hosting; Twilio for SMS phone verification; Expo for push-notification delivery; Sentry for crash reporting; Cloudflare for website hosting, security, and network-error reports; Google Fonts, which receives your IP address and browser details when a page loads its fonts; OpenFreeMap, which serves map tiles through Cloudflare when you open the web app's map: your browser requests the tiles directly, so the provider receives your IP address and the map area you view (Drop sends it no account information); sign-in, music, or social services you choose to connect (such as TikTok); and consented analytics providers. We require service providers to use personal data only for the services they provide to us and to protect it consistently with this policy and applicable law.
  • Other users. Your profile and content you choose to make social are visible to the relevant Drop users. Direct messages and group chats are shared with their participants. A festival crew note, including any location point you chose to add, is shared with that plan's crew. Drop does not share your live location with other users.
  • Ticketing partners. When you tap a ticket link, you are directed to a third-party ticketing site to complete your purchase. Those purchases are governed by the ticketing provider's own privacy policy. We may participate in affiliate programs that use identifiers to attribute ticket referrals to Drop. We do not sell tickets or process payments.
  • Legal and safety. When required by law, or to protect the rights, safety, and property of our users, the public, or Drop.
  • Business transfers. If Drop is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction.

04Cookies and similar technologies

Drop's website and web app use a small number of cookies and similar technologies (such as browser local storage). When you first visit, a banner asks for your choice, and you can change it at any time.

  • Essential. Things the site can't work without: the city you've selected, your login session on the web app, a record of your cookie choice itself, and, if you arrived through an invite link, the referral or creator code so the invite can be credited (a referral code is kept for 24 hours). These are always on.
  • Analytics (optional). If you choose "Accept all", the public website counts clicks on ticket links and app-store links. Each click sends a short request to our own site naming only the link type, ticket seller or app store, and page type; no cookies, identifiers or IP-based profiles are created, and no third-party analytics tool is used. Choosing "Essential only" keeps this off.
  • Third-party sites. When you tap a ticket link you leave Drop, and the ticketing site sets its own cookies under its own policy. Affiliate ticket links may carry an identifier so the seller can attribute the referral to Drop.

To change your choice, use the button below or clear this site's data in your browser settings.

05Your choices and rights

  • Access and update your account information in the app, or contact us to request a copy or correction.
  • Delete your account. You can permanently delete your account and associated data from within the app or request deletion from the web; this removes your information except where we must retain it for legal reasons.
  • Contacts, location, calendar, photos, and notifications. Choose whether contacts can find you by your verified email or phone in Edit profile. Control address-book, location, calendar, and photo access and push notifications through your device settings. You can use core event discovery without granting any of these. You can delete a crew note, including its location point, at any time.
  • Privacy rights. Depending on where you live (including under the Colorado Privacy Act and similar U.S. state laws), you may have rights to know, access, correct, delete, or obtain a portable copy of your personal data, and to opt out of its sale, targeted advertising, or certain profiling. Drop does not currently sell personal data or use it for targeted advertising. Contact us to exercise a right or appeal a decision about your request.

06Data retention

We keep account information while your account is active and as needed to provide the Service. We retain friendship and ticket-wallet records until you remove them, the relationship changes, or the account is deleted. Contact-discovery hashes remain until you turn the channel off, change the verified identifier, or delete your account. A verified phone-ownership proof remains until you verify a replacement number or delete your account. Drop does not retain the raw verification number; Twilio may retain verification data longer when required for security, fraud prevention, legal, or investigative purposes. Raw address-book details and calendar events are not retained, and a "Near me" GPS fix is not sent to or retained by Drop. A location point you add to a crew note is kept with that note until you delete the note or your account. Crash reports are kept by Sentry under its retention settings and are not linked to your account. When you delete your account, we delete or de-identify associated personal information within 30 days, except for limited records we must keep for legal, security, fraud-prevention, dispute, or backup purposes.

07Security

We use reasonable technical and organizational safeguards to protect your information. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

08Children

Drop's public event pages can be browsed without an account. Drop accounts and social features are for people who are at least 13 years old. We may request date of birth during account creation, and you must provide accurate eligibility information when asked. Regardless of signup method, someone under 13 may not create or use a Drop account. If we learn that an under-13 user created an account, we will suspend or delete the account and associated information as appropriate. Events listed in Drop may have separate age restrictions set by venues or organizers.

09Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you in the app.

10Contact us

Questions about this policy or your data? Email trydropapp@gmail.com.