Privacy, with care.

01

Who this policy covers

AceRadio is operated by Ace Radio (Pty) Ltd. This policy explains how we handle personal information when you visit https://ace.radio, use the AceRadio Android or iOS mobile applications, listen to our stream, browse station and event information, or reserve event tickets through this website. It describes our website and mobile app services in plain language and should be read with any event-specific information shown when you book.

Links to WhatsApp, social networks, ticketing destinations or other third-party services take you to services with their own privacy practices. This policy does not govern those services.

02

Information you choose to provide

You can browse public station content and listen on the website or in the Android and iOS apps without registering. The website has no public account registration; its studio login is for authorized staff. The mobile apps offer optional listener accounts, described below.

If you make an event reservation, we ask for the contact person's first and last name, email address and mobile number, along with the event, ticket type and quantity. Where a booking includes other attendees, we also ask for each guest's name, email address and mobile number.

We use these details to create and manage the reservation, identify the booking by its reference, check capacity, keep the guest list and arrange payment or follow up with you. The booking record includes the event and ticket details, quantity, total, booking status and payment status.

If you contact us directly, for example through WhatsApp, the information you send is handled by that service as well as by us when we receive it.

03

Optional mobile accounts and saved shows

If you choose to create a mobile app account, Supabase provides account authentication and data storage. We use your email address and a unique account identifier to identify your account, authenticate sign-in and associate your saved information with you. Your display name, saved show identifiers and settings, including automatic-reminder preferences, are stored so they can sync across devices when you sign in. Passwords are handled by Supabase authentication; the app does not store your password in plain text.

You can save favourite shows as a guest on your device. Creating a new account adds your guest favourites and reminder choices to that account; signing into an existing account offers an explicit option to import device choices. Guest copies remain separate. If you enable push reminders, the selected show identifiers and reminder choices are also sent to the reminder service as described below.

The apps cache public content and images, and keep local copies of saved shows and settings to support faster loading and offline use. Account changes may be stored locally until they can sync. Native sign-in sessions and notification installation credentials use protected device storage. Playback state, the running sleep timer and your phone's notification permission remain device or session settings rather than account-synced settings.

Delivering audio, artwork and app content also sends ordinary connection information, such as your IP address, to the relevant service providers.

04

Optional mobile push notifications

Show reminders are optional and can be used without creating an account. When you opt in and your phone permits notifications, we use an Expo push token, a generated installation identifier, the device platform, notification consent and reminder preferences to register that installation. Reminder information includes relevant show identifiers, selected alerts and timing choices. If you are signed in, the registration can also be linked to your account identifier.

Our Supabase reminder service uses Expo Push Service to deliver notifications through Google's Firebase Cloud Messaging (FCM) on Android and Apple's Push Notification service (APNs) on iOS. Notification delivery involves these providers processing the push addressing information and notification content needed to deliver your selected alerts.

You can manage reminder choices in the app, remove selected on-air alerts from a show's details, or turn off AceRadio notifications in your phone's settings. Account reminder preferences can sync across devices, but each installation has its own notification consent and operating-system permission. Changes reach the reminder service when the app successfully syncs; a notification already handed to a delivery provider may still arrive.

05

Information handled when you use the site

Our website and hosting providers may process basic technical information needed to deliver and protect the site, such as your IP address, browser and device details, request time and the pages or services requested. This can help diagnose faults, defend against abuse and keep the website available.

Public programme and event information, and ticket availability, may be cached briefly to improve performance. These public caches do not contain your private booking or guest details. The studio login is for authorized staff; it may use browser storage to maintain a signed-in session. There is no public account registration.

We collect website page counts, stream starts and listening duration to understand station usage. A random per-tab identifier is stored in session storage and refreshed daily. These records do not include your name, email, booking details, IP address or full page query strings. Reports are available only to authorized staff. We respect Do Not Track and Global Privacy Control signals.

The live audio stream is served by a separate streaming endpoint. Connecting to it sends the ordinary connection information needed by the stream provider to deliver audio.

06

How we use information

We process personal information for these purposes in accordance with applicable data-protection law, including South Africa's Protection of Personal Information Act (POPIA). We do not sell personal information or use ticket-booking details to build advertising profiles.

• To accept, identify and administer event reservations and guest lists.
• To check ticket availability, prevent duplicate or abusive requests and protect the service.
• To contact you about a booking, event arrangements, payment arrangements or a support request.
• To authenticate optional mobile accounts and sync saved shows, display names and account settings across devices.
• To register opted-in mobile installations and deliver the show reminders you choose.
• To operate and secure the website, mobile apps, studio tools and live stream, and to meet legal obligations.

07

When information is shared

Access to booking and guest information is limited to people who need it to administer the relevant event or booking. We also rely on service providers for database, hosting and website operations; they may process information on our behalf to provide those services.

Supabase provides authentication and database services for optional mobile accounts, synced favourites and settings, website bookings and the reminder service. Cloudflare delivers artwork and cached public station content. The streaming service delivers live audio. Expo, Google and Apple participate in mobile notification delivery as described above. These providers receive the information needed for their respective services; public content caches do not contain private account, booking or guest records.

We may disclose information where required by law, to protect people or the service, or to resolve a booking or security issue. We do not publish guest lists. If a service provider processes information outside South Africa, we will take the steps required by applicable law for that transfer.

08

How long we keep information

We keep booking, contact and guest information for as long as it is reasonably needed to administer the event and reservation, handle follow-up or disputes, maintain appropriate records and meet legal obligations. Retention can depend on the type of record and the circumstances; we do not promise a fixed deletion date for every record.

Mobile account information and synced saved shows and settings remain associated with your account until it is deleted. Signing out or uninstalling the app does not delete your cloud account. Signing out removes that account's local sync cache and pending changes; separately stored guest favourites can remain on the device.

Our reminder service is configured to clean up push delivery records older than 30 days and device registrations that have not been renewed for 90 days. Account deletion also removes notification registrations still linked to that account and their associated reminder records. These periods describe AceRadio's reminder records, rather than separate records held by notification providers under their own policies.

09

Security and your responsibilities

We use reasonable safeguards designed to protect personal information. Private mobile account data is protected by account-based access controls, and access to private booking and guest records is restricted to authorized studio personnel. Native app authentication sessions and notification installation credentials use protected device storage. No app, website, transmission or storage method can be guaranteed completely secure.

Please provide accurate information and only submit another guest's details when you are authorized to do so. Let them know their information is being provided for the booking. Contact us promptly if you believe a booking or account has been accessed improperly.

10

Your choices and privacy rights

You can keep listening without an account. In the mobile app, you can manage your display name, saved shows and reminder preferences, change your password and sign out. Phone notification permissions can be managed separately in the operating system's settings.

To delete your mobile account, open Settings, then Account, then Delete my account. The app asks you to confirm your password and, if you have an enrolled authenticator, complete that verification. Successful deletion removes your account and its associated profile, saved shows, settings and linked reminder registrations. Separately stored guest favourites may remain on the phone. Account deletion does not automatically delete separate website event bookings, which may need to be retained for the purposes described above.

Subject to applicable law and the circumstances, you may ask to access or correct personal information we hold about you, request deletion, object to or restrict certain processing, or withdraw consent where processing relies on consent. We may need to verify your identity and may retain information we are legally required or otherwise permitted to keep.

You can also request account deletion or ask for help managing your information by emailing studio@ace.radio or using the studio WhatsApp link on this page, including if you cannot access the app. Include your account email address or booking reference as relevant, but never send your password, sign-in tokens or authenticator codes. You may also lodge a complaint with South Africa's Information Regulator.

11

Children's information

Event entry may be subject to age requirements shown by the event organizer. A parent or legal guardian should provide a child's booking details and should only do so when authorized. Please contact us if you believe a child's information was submitted in error.

12

Updates and contact

We may update this policy when our services or legal obligations change. The latest revision date appears above. For questions about the website or Android and iOS apps, or to make a privacy or account-deletion request, contact AceRadio at studio@ace.radio or WhatsApp +27 73 067 6204.