Privacy Policy

Who we are

This policy explains how Radiant (“we”, “us”) collects and uses your personal data when you use the Radiant app and radiantclub.in. Under India’s Digital Personal Data Protection Act, 2023, we’re the Data Fiduciary for that data. Using Radiant is also covered by our Terms of Use.

Questions, requests and complaints go to the contacts at the end of this page, including our Grievance Officer.

What we collect

• Your account. Your mobile number, to sign you in. However you sign in, you confirm it once with a code we text you. It’s how the club knows you on guest lists and at the door. Then your name, date of birth, gender and city, which we ask for once before you can use the app.
• Google or Apple. If you sign in with Google, or with Apple on iPhone, from Google we receive your name, email address and profile photo; from Apple we receive your name (the first time only) and an email address, which may be an Apple relay address if you hide yours. We store the email and Google’s photo, and don’t use the email for anything else yet (no marketing). We keep no Google tokens. From Apple we keep only a token, used to revoke the sign-in when you delete your account.
• Signing in. The one-time codes we text you (stored only in a scrambled form, for a few minutes) and which device you’re signed in on. We use your device’s IP address to limit sign-in attempts. Each request from the app says its version, build and your phone’s system (iOS or Android, and its version).
• What you do in the app. Whether you’re going to an event; the festivals you’re Interested in and the sets you save there; the stars you give events (and any comment an older version of the app sent with them); feedback you send us and our replies; likes and moment reactions on recorded sets, and the sets you ask us to remind you about; what you listen to (which set, when, how long, where you stopped, whether you finished it and the stream quality); and the share links you make, with the moment they start from. Opening a share link isn’t recorded.
• Guest lists. If you add guests to an event’s guest list, we store each guest’s name, phone number (if you give one) and whether they’re a free or paid entry. If someone adds you as a guest, we hold what they gave us; you don’t need an account.
• Your phone, for notifications. If you allow notifications: your phone’s push token, whether it’s iOS or Android, an ID for the app on that phone, and whether you’ve turned on Event alerts.
• Usage and error reports. Which screens you open (never what’s on them), when the app opens and closes, when you tap a notification, start-up timings from some launches, the actions above (for example “rated an event 4 stars”), and reports when something breaks. These are linked to your account ID and name. They never include your phone number, codes, date of birth, gender, city, guests’ details, the text of your comments or feedback, share links or push tokens. We don’t record your screen, and the app doesn’t send your location from your IP address.
• Photos and videos at events. Our team photographs and films events, and you may appear (more below).

We don’t collect your location, contacts, camera or microphone, we don’t show ads, and we don’t track you across other companies’ apps or websites. The app asks for your photos only to save one you choose to keep, or, if you manage an artist’s page, to pick an image for it.

Why we use it

• To run your account and Radiant: sign-in, your profile, events, RSVPs, recorded sets, the festival, ratings and feedback.
• To check you’re 18 or over.
• To keep accounts safe and prevent fraud and abuse: sign-in codes, limits on attempts, and blocking accounts that break our terms.
• To manage guest lists and entry on the night.
• To send notifications: updates and reminders about events you’re going to, sets you’ve saved or asked us to remind you about, and Event alerts if you turn them on.
• To understand our audience and improve Radiant and our events, mostly from totals and averages (for example, the age and city mix of people going to an event), and to find and fix errors.
• To meet our legal obligations.

Your consent and choices

We use your data with the consent you give when you sign up, and where the law otherwise allows it. You can withdraw consent as easily as you gave it:

• Notifications: turn them off in your phone’s settings. Event alerts (news about new events) are off until you turn them on, and you can turn them off again in the app.
• Google or Apple: remove it in the app (You, then Account settings) and you’ll sign in with a code we text you.
• Everything else: delete your account (below), or write to hello@thirdstate.in.

Withdrawing doesn’t undo what we did before, and without some data (your number, for example) we can’t give you an account. Usage and error reports are part of how we run Radiant, so the app has no switch for them; they never include the details listed above.

Who sees and receives it

• Other members never see your name, ratings or feedback. They see totals, never names: how many people are going to an event and its average rating, and how often a set is played or how many people are listening to it.
• Our team sees what it needs to run Radiant: who is going to an event, ratings and feedback with their authors, and guest lists. What our team does in the dashboard is logged.
• Guest lists are seen by the person who added the guest and by our team, and are used for entry that night, which can mean sharing the list with the event’s organisers or venue.
• Service providers that work for us and only on our instructions: Railway (our servers and database), Vercel (this website and our dashboard), Cloudflare (photos, videos, recorded sets and backups), PostHog (usage and error reports), Expo with Apple and Google (push notifications) and APITxt (sign-in texts).
• Google and Apple are the sign-in providers, if you sign in with them. What they hold about you is covered by their own privacy policies: Google’s and Apple’s.
• Authorities, when the law requires it or to protect people’s safety and rights.

We don’t sell your data or share it for advertising.

Where it’s stored

Your data is stored and processed outside India: our servers and database are in Singapore, usage and error reports are in the European Union, and our other providers run servers in several countries. The law allows this, except to countries the Government of India restricts, and our providers are bound to protect your data.

How long we keep it

• Sign-in codes expire after 5 minutes. Expired codes and sessions are removed a day later, and you’re signed out after 60 days without using the app.
• Your account, profile and activity (RSVPs, ratings, feedback, guest lists, listening, likes, reactions, reminders and saved sets) are kept while you have an account, and deleted when you delete it (below).
• A push token is kept until you sign out or your phone stops accepting our notifications.
• Event galleries are shown for 100 days after they’re first published, unless we choose to keep a photo or video for longer.
• Database backups expire on a schedule; our own nightly copies are deleted after 35 days.
• Usage and error reports are kept for the period our analytics provider allows.

Deleting your account

You can delete your account in the app (You, then Account settings, then Delete account), confirming with a code we text you. Can’t use the app? See Delete your account.

When you delete your account, we delete it fully, with the personal data linked to it:

• your number, name, email, Google photo, date of birth, gender and city;
• your activity: RSVPs, ratings, feedback, listening, likes, reactions, reminders, saved sets and share links;
• the guests you added to guest lists;
• your Google or Apple link (for Apple, we also revoke the sign-in);
• your sign-ins and notification settings.

You’re signed out everywhere at once and get no more notifications. We erase your data from our systems within 30 days, and the copies in our backups expire within 35 days after that. Totals that can’t identify you, like an event’s average rating or a set’s play count, may still include what you did. Your number is then free: signing up with it again starts a new account with nothing from the old one.

Your rights

Under the Digital Personal Data Protection Act, you can:

• get a summary of the personal data we hold about you, what we do with it, and who we’ve shared it with;
• correct or update it: edit your name, date of birth, gender and city, or change your number, in the app, or ask us;
• have it erased (deleting your account erases it all, above);
• withdraw your consent;
• nominate someone to use these rights for you if you die or can’t act yourself;
• have your complaints dealt with by our Grievance Officer, and if you’re not satisfied, complain to the Data Protection Board of India.

Write to hello@thirdstate.in with your phone number. We’ll confirm the request came from that number before acting on it.

Photos and videos at events

Our team posts photos and videos from events in the app’s galleries. We don’t tag people in them. Gallery files are public: anyone with a file’s link can open it, and people can save them. When a gallery expires or we remove an item, the file is deleted, but copies people saved can’t be recalled. If you’d like a photo or video you’re in taken down, write to hello@thirdstate.in with the event and the item.

Children

Radiant is only for people 18 or over, and we don’t knowingly collect data about anyone younger. If we learn that an account belongs to someone under 18, we’ll close it.

Security

We protect your data with encrypted connections, sign-in codes stored only in a scrambled form with limited tries, and dashboard access limited to the people who need it, with their actions logged. No system is perfectly secure. If a breach affects your data, we’ll tell you and the Data Protection Board of India as the law requires.

This website

radiantclub.in uses no cookies or visitor IDs and records no sessions. It counts page views and reports errors to PostHog without identifying you. Pages for shared sets and events show nothing about members.

Changes to this policy

We’ll update this policy when what we do changes. The date at the top shows when it last changed, and we’ll tell you in the app before a big change takes effect.

Contact and grievances

Our Grievance Officer acknowledges a complaint within 24 hours and resolves it within 15 days.

• Privacy questions, requests about your data and anything else: hello@thirdstate.in
• Grievance Officer: hello@thirdstate.in