Theatre DiaryPrivacy Policy
Last updated: 25 October 2026
This policy explains what personal data the Theatre Diary Android app (“the app”, package com.theatrediary) collects, why, who it is shared with, and the choices you have.
Who we are
Theatre Diary is developed and run by Eugene Kuznetsov, an independent developer based in London, United Kingdom. He is the data controller for the personal data described here. Contact: privacy@theatrediary.link for privacy requests, or hello@theatrediary.link for anything else.
What we collect
Your account
You can sign in with Google, with an email address and password, or as a guest (an anonymous account).
- Your email address is held by Google Firebase Authentication so you can sign in. It is not stored in your profile or shown to anyone. Guest accounts have no email address.
- Your profile holds your display name and, if you have one, a profile photo link from your Google account, plus details you choose to add: pronouns and a profile colour. It also records your diary privacy setting, a supporter flag (off for everyone, as the app has no paid features), and when your account was created and updated.
Older versions of the app also copied your email address into your profile. Since 25 October 2026 our database rules reject it, and the app removes it the next time you sign in. Until then, only you can read it.
Passwords are handled by Firebase Authentication. We never see or store them.
Your diary and activity
Each diary entry records the show and production, date and time, theatre and city, seat, rating, review, performance notes, tags, whether the entry is private, and a poster image link. Entries are backed up to your account so you can use them on another device. If you use guest mode, your entries are backed up to your guest account, so you can keep them by adding Google or an email address later.
Watchlists and diary photos stay on your device and are not uploaded.
Public activity is switched off in the current version of the app. New entries are private and can’t be made public, so nothing you write is published. Nothing is ever published from a guest account.
Camera (programme scanner)
If you use the programme scanner, the app uses your camera to read the text on a theatre programme so it can find the show. The text is recognised on your device by Google ML Kit. Camera images are not saved or uploaded.
Usage and crash reports (optional)
These are off until you turn on “Share usage and crash reports” in the app’s Settings. When it is on:
- Crash reports (Firebase Crashlytics): when the app crashes, a report with the stack trace, device model, operating system version, app version and an installation identifier.
- Usage analytics (Google Analytics for Firebase): standard app events such as app opens and screen views, with an app-instance identifier and approximate location derived from your IP address. We also record when you tap a ticket link, and the show and theatre it was for.
Turning the setting off stops collection and deletes crash reports that haven’t been sent yet.
Why we use it (lawful bases)
| Purpose | Data | Lawful basis (UK GDPR) |
|---|---|---|
| Provide your account and back up your diary | Account, profile, diary entries | Contract |
| Fix crashes and improve the app | Crash reports, usage analytics | Consent (the Settings switch) |
| Reply to you and act on your requests | Your emails | Legitimate interests |
We do not sell your personal data, show you advertising, or use your data to make automated decisions that affect you.
What other users can see
In the current version of the app, nothing. Other users can’t read your profile or your diary entries, public or private. Your pronouns and profile colour are never shown to anyone else. Entries are private, and the feed, public review pages and comments are switched off, so other users see nothing of yours.
If an earlier test version published one of your entries, that public copy is removed when you next save the entry, or when you delete your account.
If we turn social features back on, we will update this policy first. A public entry would then show your display name, profile photo, the show, your rating and review, the theatre and the date in the feed and on the show’s review page. Your seat and performance notes would never be shown. Follows would be visible only to the two people involved. Nothing would be published from a guest account.
Who we share it with
We use these service providers, who process data for us under their own terms:
- Google (Firebase Authentication, Cloud Firestore, Crashlytics, Google Analytics for Firebase, ML Kit): sign-in, data storage, and the optional crash and usage reports. See the Firebase privacy information.
- Ticketmaster: the app requests theatre listings from the Ticketmaster Discovery API. No personal data is sent.
- Image hosts such as Wikimedia Commons: when the app loads a poster image, the host sees your IP address, as with any web request.
When you tap a ticket or theatre link, it opens the seller’s website in your browser. What happens there is covered by that website’s own privacy policy. Ticket links may carry an affiliate code that tells the seller the visit came from Theatre Diary. They do not identify you.
We may disclose data if the law requires it.
Where your data is stored
Data is stored by Google on servers that may be outside the UK, including in the United States. Google provides the UK International Data Transfer Addendum and Standard Contractual Clauses as safeguards for these transfers.
How long we keep it
- Account, profile and diary data: until you delete it or delete your account.
- Crash reports: 90 days. Usage analytics: under Google Analytics retention settings (2 months by default for event-level data).
- Emails to us: up to 2 years.
Your rights
Under UK data protection law you can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw your consent at any time (for usage and crash reports, use the switch in Settings). Email privacy@theatrediary.link and we will reply within one month. You can delete your account in the app, under Profile → Settings → Delete Account, or see Delete your account.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk.
Data on your device
The app keeps a copy of your account details, diary, lists, preferences and the show catalogue on your device so it works offline. Android may include this in your device backup. Uninstalling the app removes it from the device.
Children
Theatre Diary is not intended for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, contact us and we will delete it.
Security
Data is encrypted in transit. Database security rules mean only you can read your account’s data. No system is perfectly secure, but we work to protect your data and will tell you, and the regulator where required, about any breach that affects you.
Changes to this policy
If we change this policy we will update the date above, and tell you in the app if the change is significant.