Privacy Policy
Last updated: November 9, 2026
Introduction
BandPin respects your privacy. This Privacy Policy explains how BandPin collects, uses, stores, and protects information when you use the BandPin website, mobile applications, public pages, and related services.
BandPin helps people discover bands, artists, Band Service profiles, FoodPin profiles, CulturePin profiles, events, places, products, activities, and local needs, save favorites, create public content, share that content through public links, and manage profile-related media.
Data controller and full privacy information
BandPin is operated by Spoon Productions Frank S Botten, organisation number 997128117, Midtvegen 3B, 6652 Surnadal, Norway. Contact privacy@bandpin.com about personal data, legal@bandpin.com about legal matters, or support@bandpin.com for support.
The full BandPin Privacy Policy also describes the processing purposes, legal bases and service providers for the website and apps.
International transfers
BandPin operates from Norway and uses Supabase in the EU region Frankfurt. Some service providers may process data outside the EEA. Where required, transfers need an appropriate legal mechanism, such as an adequacy decision or standard contractual clauses and relevant safeguards. Contact privacy@bandpin.com for information about the applicable arrangements.
Exercising your rights
Where applicable, you may request access, correction, deletion, restriction, object to processing, or request data portability. You may withdraw consent for processing based on consent, without affecting earlier lawful processing. Contact privacy@bandpin.com. You may complain to the Norwegian Data Protection Authority (Datatilsynet) or your competent supervisory authority.
Information We May Collect
Depending on how you use BandPin, we may collect the following information:
- Account information such as email address, authentication details, and basic account settings.
- Profile information you choose to provide.
- Band profile information, Band Service profile information, FoodPin profile information, CulturePin profile information, band member information, product information, menu information, activity information, event information, image uploads, links, and related public content you create.
- Account, profile, order, ticket, and access information used when BandPin is opened in a browser.
- Favorites and other saved activity inside the app.
- Basic device, session, and usage information for performance, security, and troubleshooting.
- Location-related data if you choose to allow location access to discover nearby profiles, events, products, activities, or places.
- Notification preferences, delivery status, and related event or profile identifiers where notification features are enabled.
- First-party analytics records such as profile views, event views, favorites, shares, link clicks, approximate event view or click places, and average profile viewing time.
- Support requests, bug reports, and messages you send to us.
- Limited purchase-related or access-related data needed to manage BandPin Access.
Photos, Camera, and Media
BandPin may let you upload photos from your device, choose photos from your photo library, or use camera-related features to capture or attach images for your profile, members, products, menus, activities, events, or other supported content.
If you use these features, the app may process image files and related technical data needed to preview, compress, upload, store, and display those images as part of the service.
We do not claim ownership of your uploaded media, but images and related public media may be stored and shown as part of your profile, public pages, shared links, and discovery features.
Location Data
BandPin may use location-related information to support map views, nearby discovery, band, service, food, culture, event discovery, My Location, and location-based search.
- Your device location may be used if you grant permission.
- Band, Band Service, FoodPin, CulturePin, and event profiles may include location information chosen by the user who created them.
- Public pages may include map, city, venue, or approximate location details.
You control location access through your device settings. If you do not want a private home address associated with public content, use a more general or public-facing location instead.
Public Profiles, Public Links, and Previews
BandPin can generate public links for bands, Band Services, FoodPin profiles, CulturePin profiles, events, shared map views, and supported locations. Anyone with a public link may be able to open that public page.
Public pages may include information such as a band name, service name, FoodPin name, CulturePin name, category, products, offers, menus, activities, artist details, event title, image, description, date, place, city, contact details you choose to publish, or map-related details that the content creator has chosen to make visible.
If a public BandPin link is shared in messaging apps, social platforms, browsers, or search engines, those services may generate previews using public page metadata such as title, description, and image. These third-party preview systems are not fully controlled by BandPin.
BandPin in Browser
BandPin can be used directly in a browser to explore public content, create an account, sign in, save favorites, make supported purchases, view tickets, and manage account access.
Profile owners may also create and manage profiles, images, links, public contact details, verification information, events, products, menus, activities, services, orders, payments, and Dashboard information in the browser. BandPin uses the same account and related data across web, iPhone, and Android where those features are supported.
Orders, shipping and transactional messages
Updated: November 9, 2026
BandPin processes buyer and recipient names, email addresses, phone numbers, delivery addresses, order contents, prices, payment references, ticket categories, areas, rows, seats and admission status to provide the purchase and support. The buyer and the parcel recipient may be different people. Do not submit another person's details unless you are entitled to use them for the delivery.
When PostNord shipping is selected and enabled, necessary sender and recipient contact details, the selected service point, parcel weight and dimensions, order references and tracking information are shared with PostNord to calculate the price, book transport, produce the label and follow delivery. The seller uses its own PostNord agreement and is the freight payer. PostNord processes transport information under its own privacy notice. Seller API credentials are handled on the server; the Norwegian pricing API password is encrypted at rest and is not included in customer-facing pages.
The seller receives the details needed to fulfil the order, including in an order email and, after booking, a label email with a PDF attachment. Resend delivers these transactional emails for BandPin. App notifications use Apple Push Notification service or Firebase Cloud Messaging when enabled on the device. These messages concern the purchase and are separate from marketing consent. Delivery information may originate from the buyer, the seller or PostNord.
Processing necessary to provide the purchase is based on the relevant contract; security, abuse prevention and handling claims may rely on legitimate interests, and statutory record keeping on legal obligations. Where a recipient is not the buyer, necessary delivery processing is assessed against the seller's and recipient's legitimate interests. Access is limited to the parties and service providers that need it. Order, label and tracking records are kept while needed for fulfilment, support, disputes and applicable record-keeping duties, then deleted or anonymised where permitted. Request access, correction or deletion at privacy@bandpin.com; statutory exceptions may require limited records to remain. International transfers and your other rights are described in the sections below.
PayPal is temporarily unavailable for new setup and purchases in BandPin. Existing PayPal transaction references and records may still be used to handle earlier payments, refunds, disputes and support; hiding the payment option does not delete those records.
Bestillinger, frakt og meldinger om kjøpet
Oppdatert: 9. november 2026
BandPin behandler kjøperens og mottakerens navn, e-post, telefon, leveringsadresse, ordreinnhold, priser, betalingsreferanser, billettkategorier, områder, rader, seter og adgangsstatus for å gjennomføre kjøpet og gi support. Kjøperen og pakkemottakeren kan være forskjellige personer. Ikke oppgi andres opplysninger uten at du har rett til å bruke dem til leveringen.
Når PostNord-sending velges og er aktivert, deles nødvendige kontaktopplysninger for avsender og mottaker, valgt hentested, pakkens vekt og mål, ordrereferanser og sporingsinformasjon med PostNord for å beregne pris, bestille frakt, lage etikett og følge leveringen. Selgeren bruker sin egen PostNord-avtale og er fraktbetaler. PostNord behandler transportopplysninger etter sin egen personvernerklæring. Selgerens API-opplysninger håndteres på serveren; passordet til det norske pris-API-et lagres kryptert og inngår ikke i kundesidene.
Selgeren mottar opplysningene som trengs for å oppfylle ordren, blant annet i bestillingsmail og, etter fraktbestilling, en etikettmail med PDF-vedlegg. Resend leverer disse e-postene om kjøpet for BandPin. Appvarsler bruker Apple Push Notification service eller Firebase Cloud Messaging når varsler er aktivert på enheten. Disse meldingene gjelder kjøpet og er adskilt fra samtykke til markedsføring. Leveringsinformasjon kan komme fra kjøperen, selgeren eller PostNord.
Behandling som er nødvendig for å levere kjøpet, bygger på den aktuelle avtalen. Sikkerhet, forebygging av misbruk og håndtering av krav kan bygge på berettigede interesser, og lovpålagt oppbevaring på rettslige plikter. Når mottakeren ikke er kjøperen, vurderes nødvendig leveringsbehandling opp mot selgerens og mottakerens berettigede interesser. Tilgang begrenses til partene og leverandørene som trenger opplysningene. Ordre-, etikett- og sporingsdata beholdes så lenge de trengs for levering, support, tvister og aktuelle oppbevaringsplikter, og slettes eller anonymiseres deretter når det er tillatt. Be om innsyn, retting eller sletting på privacy@bandpin.com; lovbestemte unntak kan kreve at begrensede opplysninger beholdes. Internasjonale overføringer og øvrige rettigheter beskrives i de andre avsnittene.
PayPal er midlertidig utilgjengelig for nye oppsett og kjøp i BandPin. Eksisterende PayPal-referanser og kjøpsopplysninger kan fortsatt brukes til å håndtere tidligere betalinger, refusjoner, tvister og support. At betalingsvalget skjules, sletter ikke disse opplysningene.
BandPin Access and Purchases
BandPin Access is a paid annual subscription without a free trial.
Billing may be handled by Apple App Store, Google Play, or a RevenueCat web purchase flow using Stripe, depending on the device and platform. Subscription management, cancellation, renewal, restore handling, and refunds are governed by the provider used for the purchase.
We do not receive your full payment card details from Apple, Google, RevenueCat, or Stripe. We may receive limited information related to access status, subscription status, restore status, product identifiers, or similar purchase-related information needed to provide BandPin Access.
How We Use Information
We may use information to:
- Provide and improve the BandPin app, website, and public pages.
- Help users discover bands, services, food, culture, events, venues, and relevant local content.
- Maintain account access, security, authentication, and email confirmation status.
- Support favorites, public profiles, products, menus, activities, event pages, map views, and public links.
- Provide BandPin and supported profile-management tools in browsers and mobile apps.
- Process, display, store, and manage uploaded images and other media connected to supported features.
- Provide Dashboard analytics such as views, shares, favorites, link clicks, event engagement, approximate event view or click places, and average profile viewing time.
- Send or support relevant app notifications where notification features are enabled.
- Provide, validate, restore, or troubleshoot BandPin Access.
- Respond to support requests and user inquiries.
- Monitor performance, prevent abuse, and fix technical issues.
- Show offline or connectivity-related states when live features are unavailable because the device is not connected.
- Comply with legal obligations where required.
Sharing of Information
BandPin does not sell your personal information.
Information may be shared only where necessary to operate the service, such as with trusted service providers used for hosting, authentication, storage, subscriptions, maps, image handling, or support infrastructure.
Our primary backend and database provider is Supabase, configured in the EU region (Frankfurt, Germany).
BandPin may also rely on services such as Apple App Store, Google Play, RevenueCat, Stripe, and map or location providers to support purchases, subscriptions, restore behavior, maps, search, and related functionality.
We may also disclose information where required by law or where reasonably necessary to protect users, rights holders, or the security of the service.
Cookies and Tracking
BandPin is available through browsers and mobile apps. Our website and public pages may use essential technologies such as session storage, local storage, or necessary cookies to support core functionality, routing, and security.
We do not state that BandPin uses advertising trackers or optional analytics unless such tools are actually implemented.
Data Retention
We keep information only for as long as reasonably necessary to provide the service, maintain security, comply with legal obligations, resolve disputes, enforce our terms, and manage account or access-related functionality.
Some limited information may be retained for backup, fraud prevention, security, accounting, payment-related recordkeeping, or legal reasons where applicable.
Your Rights
Depending on your location, you may have rights related to access, correction, deletion, objection, or restriction of your personal information.
If you are located in Norway or the EEA, you may also have rights under the GDPR.
Email Confirmation
You can still explore BandPin before email confirmation is complete, but some account actions may be limited until then.
Notifications
If notification features are enabled, BandPin may process notification-related data to send or support relevant updates about favorites, events, event changes, service activity, FoodPin, CulturePin, profile changes, access, security, or account status. You can control app notification permissions through your device settings.
Offline Use and Connectivity
BandPin depends on internet access for many live features, including maps, discovery, profile syncing, event loading, sharing, and account-related actions.
If your device is offline, the app or website may show a connectivity message or may not be able to load certain live content until your connection returns.
Account Deletion
Account deletion is permanent and may remove your account data, favorites, profile information, member content, products, menus, activities, events, and connected profile content.
If account deletion is available inside the BandPin app, you may use that feature to request deletion of your account and associated data. You may also contact us using the email address below for privacy-related requests.
Copies of public content already shared, cached, indexed, or previewed by third-party services may continue to exist outside BandPin’s systems for some time.
Security
We take reasonable technical and organizational measures to help protect your information. However, no method of transmission or storage is fully secure, and we cannot guarantee absolute security.
Children’s Privacy
BandPin is not intended for children under the age required by applicable law to use the service without required consent. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a revised “Last updated” date.
Contact
For questions about this Privacy Policy or privacy-related requests, contact:
privacy@bandpin.com
General support: support@bandpin.com