LydiaGet the App

Lydia — Privacy Policy

Last updated: August 2026

This Privacy Policy describes how KD Creative LLC ("we," "us," or "our") collects, uses, and shares your information when you use the Lydia mobile application and related services (the "Service").

1. Information We Collect

Information you provide:

  • Account information: your name, email address, and date of birth (collected during registration and onboarding)
  • Phone number (optional, verified via SMS)
  • Home location: a location you choose by placing a pin on a map during onboarding — this is NOT your device's GPS location
  • Profile information: bio, genres, instruments, social media links, profile photos, and other details you add to your artist, band, or venue profiles
  • Connection and communication data: connection requests you send or receive
  • Bug reports and feedback you submit through the in-app "Report a Bug" form, including the message you write and basic device information (operating system and version) attached automatically to help us diagnose the issue
  • Safety reports you submit about another artist, band, venue, or show, including the reason you select, any details you write, and a record of what you reported
  • Blocks you create, including who you blocked and which profile you were viewing at the time

Information collected automatically:

  • Push notification tokens (if you grant notification permissions), used solely to deliver notifications about connection requests, event invitations, and other in-app activity
  • Basic usage data necessary to operate the Service

Information we do NOT collect:

  • Device GPS or real-time location data — Lydia uses only the home location you manually set
  • Contacts, call logs, or text messages
  • Browsing history outside the app

2. How We Use Your Information

We use your information to:

  • Create and maintain your account
  • Display your profile to other users based on your visibility settings
  • Enable connections between musicians, bands, and venues
  • Show you events, venues, and artists near the home location you set
  • Send push notifications about activity relevant to your account
  • Enforce age restrictions on events (using your date of birth)
  • Verify your phone number via SMS
  • Detect and prevent fraud, abuse, and violations of our Terms of Service
  • Review safety reports and act on objectionable content or abusive users
  • Enforce blocks, which requires storing the pair of accounts involved
  • Improve and maintain the Service

3. How We Share Your Information

We share your information in the following circumstances:

With other Lydia users: Your profile information (name, bio, genres, instruments, photos, social links) is visible to other users based on your visibility settings. When you accept a connection, your contact information (name, email, and phone number if provided) is shared with the connected user.

With service providers: We use the following third-party services to operate Lydia:

  • Clerk (authentication and account management)
  • Apple and Google (optional "Continue with Apple" / "Continue with Google" sign-in — used only if you choose one of them. They tell us your name and email address so we can create or find your account; we do not receive your password, and we do not gain access to anything else in your Apple or Google account. If you sign in with email instead, neither company is involved.)
  • Mapbox (map display and location search — receives the coordinates you view on the map, NOT your device GPS)
  • Twilio (phone number verification via SMS)
  • Expo (push notification delivery)
  • Cloudflare (image storage and delivery)
  • Vercel (web hosting and serverless functions)

These providers process your data only as necessary to provide their services and are bound by their own privacy policies.

Safety reports are NOT shared with the person reported. We do not disclose who filed a report to the reported user.

We do NOT sell your personal information to third parties.

We may disclose your information if required by law, legal process, or government request, or if we believe disclosure is necessary to protect the rights, property, or safety of KD Creative LLC, our users, or the public.

4. Age Restrictions

Lydia requires users to be at least 13 years old. We use your date of birth to enforce age-based access restrictions, such as preventing users under 18 from viewing events marked as 18+ or 21+. We do not knowingly collect information from children under 13. If we discover that a user is under 13, we will delete their account and associated data.

5. Data Retention

We retain your account data for as long as your account is active.

Deleting your account from inside the app removes your personal data immediately, not after a delay — there is no grace period and no recovery window. If instead you request deletion at lydia.live/delete-account, because you no longer have the app installed, we will action the request within 7 days. We may email you to confirm the account is yours before deleting anything.

The exceptions are records we are required to keep for legal or regulatory reasons, and the safety reports described below.

Safety reports are retained after the reported account or the reporting account is deleted, with the reporter's identity removed. We keep them because deleting an account is a common response to being reported, and a moderation record that disappears along with the account cannot protect anyone.

Profile photos and uploaded images are deleted when you remove them or delete your account.

6. Your Rights and Choices

You can:

  • Update your profile information at any time through the app
  • Change or remove your phone number
  • Change your home location
  • Control which users can see your profile through visibility settings
  • Block or report another user, and review or undo your blocks under "Blocked" in the app menu
  • Disable push notifications through your device settings
  • Delete your account, immediately and yourself, from the account page in the app (menu, then your email address). If you no longer have the app installed, request it at lydia.live/delete-account

Depending on your jurisdiction, you may have additional rights regarding your personal data, including the right to access, correct, delete, or port your data. Contact us at support@lydia.live to exercise these rights.

7. Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication through Clerk, and access controls on our infrastructure. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or via email. The "Last updated" date at the top indicates when this policy was last revised.

9. Contact

If you have questions about this Privacy Policy or our data practices, contact us at support@lydia.live.