Privacy Policy

Last updated: April 6, 2026

This Privacy Policy describes how Aklaim (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use the Aklaim mobile app (iOS and Android), the Aklaim web app at app.aklaim.co.uk, or visit aklaim.co.uk (collectively, the “Services”).

What We Collect

Account Information

When you create an account, we collect:

  • Email address and password (password is hashed and stored securely by Supabase Auth)
  • Username and display name
  • Profile photo (optional, stored in Supabase Storage)
  • Date of birth, gender, and country (optional)
  • Bio text (optional)

Theatre Activity

When you use the app, we store your theatre-related data:

  • Shows you've watched and wishlisted
  • Performance logs (venue, date, seat, notes)
  • Moments (photos, captions, ratings, tagged shows and friends)
  • Custom shows you create

Photos

Photos you upload to moments or custom shows are stored in Supabase Storage. Photo URLs are publicly accessible by design — this is how they appear in feeds and on show pages. If you set a moment to private, the moment won't appear in feeds, but the photo URL itself is technically accessible if someone has the direct link.

Subscription Data

If you subscribe to Aklaim Premium, payment is processed entirely by your platform's app store (Apple App Store, Google Play) or RevenueCat's web billing (Stripe). We never see or store your credit card details. We receive:

  • Subscription status (active, cancelled, expired)
  • Which store the subscription was purchased through
  • Subscription expiry date

Device Access (Mobile Only)

On mobile, the app may request permission to access:

  • Camera and photo library — to capture and upload photos for moments
  • Push notifications — to notify you about activity (optional, not currently active)

We do not access your location, contacts, microphone, or any other device data.

How We Use Your Information

  • Provide and personalise the app experience
  • Display your profile, moments, and reviews to other users (based on your visibility settings)
  • Process and manage your Premium subscription
  • Send transactional emails (password resets, account notifications)
  • Send marketing emails (only if you opt in via the mailing list toggle in settings)
  • Improve the app based on aggregate, anonymous usage patterns

Third-Party Services

We share data with the following service providers, solely to operate the app:

  • Supabase — database, authentication, and file storage. All user data is stored in Supabase's infrastructure (EU and US regions).
  • RevenueCat — subscription management. Receives your user ID, email, display name, and username to manage entitlements.
  • Apple App Store / Google Play / Stripe — payment processing via RevenueCat. We never handle payment details directly.
  • Vercel — web app hosting.

We do not use any analytics, tracking, or advertising services. There is no Google Analytics, no ad SDKs, and no pixel tracking in the app.

Data Visibility & Privacy Controls

  • Profile visibility — you can set your profile to public or private in settings
  • Moment visibility — each moment can be set to public, followers-only, or private
  • Mailing list — opt in or out at any time in settings

Data Retention & Deletion

Your data is retained for as long as your account is active. You can delete your account at any time from the app settings. Account deletion removes your profile, performances, moments, reviews, and associated data. Supabase Auth cascading deletes handle this automatically.

If you have an active subscription, you must cancel it via the relevant app store before deleting your account.

Children's Privacy

Aklaim is not intended for children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us and we will delete it.

Data Security

All data is transmitted over HTTPS. Passwords are hashed by Supabase Auth. Database access is controlled by Row Level Security (RLS) policies. We follow industry-standard security practices, but no system is 100% secure.

Your Rights

Depending on your location (UK, EU, or elsewhere), you may have the right to:

  • Access or request a copy of your data
  • Correct inaccurate data
  • Delete your account and data
  • Opt out of marketing communications
  • Restrict or object to certain processing
  • Lodge a complaint with a data protection authority

Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. The “Last updated” date at the top will always reflect the latest version.

Contact

Questions about this policy? Email us at support+aklaim@rayvox.co.uk.