Avui BCN lists public cultural events in Barcelona. You can browse everything without an account. This page explains what the app collects and why.
What we collect
- Nothing, if you don't sign in. Browsing, searching and filtering work without an account.
- If you sign in with Apple or Google, we store the email address and display name the provider gives us, so your saved events can follow you between devices. We never receive your password.
- Your saved events, linked to that account.
- Usage analytics — only if you agree. Which screens you open and which features you use, through PostHog. We ask on first launch and collect nothing unless you say yes. It includes an app-generated device identifier, and is linked to your account once you sign in.
- Crash reports, so faults get fixed. These are part of the same analytics consent — decline and none are sent.
Your choice about analytics
Analytics is off until you turn it on. The app asks once, on first launch, and the two answers are equally easy to give — declining costs you nothing, and every feature works either way.
You can change your mind whenever you like: Settings → Share usage analytics. Turning it off stops collection immediately and clears the identifier that linked previous events to you.
What we don't collect
- Your location never leaves your device. The app asks for location only so the map can show where you are. That coordinate is not sent to us or to anyone else.
- Search terms are not recorded. Analytics stores the length of a query, never its text. Recent searches stay on your device.
- No advertising identifier, no cross-app or cross-site tracking, and nothing is sold or shared with data brokers.
Who else sees it
PostHog processes analytics and crash data on our behalf, on servers in the European Union. If you have signed in and agreed to analytics, PostHog also receives your email address and display name, so that the usage it records is attached to your account rather than to an anonymous device. PostHog is a US company, and where its staff need access for support the transfer relies on the European Commission's standard contractual clauses.
Apple and Google handle sign-in and tell us only the email and name you approve.
Event listings come from Barcelona City Council's Open Data service; nothing about you is ever sent to them. Event images are served from the Council's own servers, so loading one reveals your IP address to them in the same way visiting any website does.
How long we keep it
Your account and saved events are kept until you delete them, and are removed immediately when you do. We do not keep a backup copy of a deleted account.
Analytics events and crash reports are kept for as long as your account exists. PostHog stores them for at least a year and may archive them after that; we do not set a shorter limit.
Deleting your account is what erases them. Turning analytics off stops any further collection and unlinks the identifier that tied past events to you, but it does not by itself delete what was already recorded — for that, delete your account, which asks PostHog to erase the profile and every event attached to it.
Deleting your data
Settings → Delete account removes your account and every saved event permanently, and also asks PostHog to erase your analytics profile and the events attached to it. It cannot be undone, and it does not require contacting us. PostHog processes erasure asynchronously, so it completes shortly after the request rather than instantly.
Children
The app is not directed at children and we do not knowingly collect their data. In Spain, where we are based, a child can consent to a service like this from the age of 14; elsewhere in the EU the age is between 13 and 16 depending on the country, and in the United States it is 13. Below the applicable age, a parent or guardian must consent. If you believe a child has given us data, email us and we will delete it.
Why we are allowed to do this
Under the GDPR every use of your data needs a lawful basis. Ours are:
- Your account and saved events — performance of a contract. You asked us to keep your saved events and make them follow you between devices, and we cannot do that without storing them.
- Analytics and crash reports — your consent, and nothing else. That is why they are off until you say yes, and why withdrawing is a single switch. Withdrawing does not affect anything collected before you did.
We do not profile you and we make no automated decisions that produce legal or similarly significant effects.
Your rights
You can ask us to:
- Give you a copy of your data, or send it somewhere else in a portable format.
- Correct anything wrong.
- Delete it — though Settings → Delete account does this instantly, without asking us.
- Restrict or object to how we use it.
- Withdraw consent to analytics at any time, in Settings.
Write to info@avuibcn.com and we will answer within a month. Exercising any of these is free and we will not treat you differently for it.
If you think we have handled your data badly, you can complain to your national data protection authority. In Spain that is the Agencia Española de Protección de Datos (AEPD). You can go to them directly — you do not have to raise it with us first.
Who we are
Avui BCN is made by one person, not a company. The data controller is Mehdi Mirzaie, based in Barcelona, Spain. That means Spanish and EU data protection law applies, and the AEPD is the supervisory authority.
Write to info@avuibcn.com about anything on this page — it reaches a person, not a ticket queue.