Privacy Policy

Using East Alabama Live

East Alabama Live is operated by Cultivate Media LLC. This policy covers our mobile app and website. You can browse shows, search venues, save events, report event content, and block venue publishers without creating an account. Sign-in is available for invited venue members and administrators.

Information you provide

For venue-member and administrator accounts, we use Firebase Authentication to manage email addresses, account identifiers, passwords, and sign-in information. We store account roles, assigned venues, and whether access is active to control publishing and administration permissions. Authorized administrators can view member email addresses and venue assignments.

When authorized users submit or edit events, we store the event details, descriptions, links, and selected images in Firebase. Published event information and images are visible to app users. Image storage paths include the uploader’s account identifier and, where applicable, venue identifier. We privately record the venue publisher, the account that created or last edited supported event records, and acceptance of the applicable Venue Content Guidelines version. These private records support authorization, moderation, and accountability and are not displayed with public event listings.

If you report an event or publisher, we store the event and venue publisher identifiers, your selected reason, any optional explanation, and your account identifier if you are signed in. We may associate the report privately with a verified event creator or editor. Administrators use these records to review and resolve reports, which may include removing an event or deactivating a responsible venue member. Reports do not expose member email addresses to public users.

If you email us, we receive your email address, message, and any attachments. We use them to respond to support requests, correct listings, and handle privacy requests.

Saved events, blocking, and reminders

Saved-event identifiers are stored on your device. The app requests current details for those events from Firebase, but does not upload your favorites as an account-based saved list. Removing a saved event removes it from that local list.

Blocked venue-publisher identifiers are stored on your device. If you sign in, they are also stored in Firebase so the block list can follow that account. Blocking excludes that venue publisher’s content from supported browsing, search, maps, saved items, and associated local reminders in the app. Unblocking makes eligible content visible again.

Reminders are scheduled locally on your device, currently for 30 minutes before a saved event. You can control notification permission in your device settings. Device backup and restore services may retain local app data according to your device settings.

Support EAL purchases

On iOS, optional Support EAL one-time purchases are processed by Apple. Apple provides localized product information and transaction and entitlement details that the app uses to verify a purchase, restore it, and unlock the associated alternate icon. The app stores owned product identifiers and processed transaction identifiers locally on your device. East Alabama Live does not receive your payment-card details. Apple handles purchase information under its own privacy practices.

Maps, links, and sharing

The in-app map requests map tiles from OpenStreetMap’s servers. Those requests expose technical information such as your IP address and the map tiles requested to that provider. EAL does not request or use your device’s current GPS location. Photos selected for event listings may retain embedded metadata from the original image, including where the photo was taken. If you do not want location information included with an uploaded photo, use your device’s photo or export tools to create and upload a copy with location metadata removed.

Directions open Google Maps with the selected venue or destination. Ticket links open the linked provider. Sharing passes the event text to the app or service you choose. Those services handle information under their own policies; any location permission you grant them is managed separately from East Alabama Live.

Technical information and service providers

We use Google Firebase and Google Cloud for authentication, event data, image storage, server functions, moderation records, publisher block lists for signed-in accounts, account deletion, and website hosting. These services process technical information, including IP addresses and request or error information, to deliver services, prevent abuse, and troubleshoot problems. Our server functions also record errors.

We have not added advertising SDKs, Google Analytics for Firebase, or Firebase Crashlytics to the current app. The website does not include advertising or analytics scripts. This does not prevent infrastructure providers from processing service and security information.

Provider details: Firebase privacy and security, Google Privacy Policy, and OpenStreetMap Foundation Privacy Policy. Providers may process information on servers outside your state or country.

How information is used and shared

We use information to operate the service, display listings, manage authorized accounts, deliver requested features, enforce our Venue Content Guidelines, review reports, and protect the service. Information is handled by the providers needed for these purposes. Public event content is shared through app listings and users’ chosen sharing services. We may disclose information when required by law or necessary to address fraud, abuse, intellectual-property concerns, or security threats.

Retention and account deletion

Venue accounts and access records remain stored until deleted; deactivating venue access does not itself delete them. Event records and uploaded images remain stored until removed. Content-guideline acceptances, event-attribution records, reports, and report resolutions remain stored until removed through account handling, moderation, or service maintenance. We do not currently promise a fixed retention period for these records.

Signed-in users can choose Profile > Delete account, verify their password, and permanently delete their EAL sign-in and associated private account data. Deletion removes the Firebase Authentication account, access record, content-rule acceptances, and account-synced publisher blocks.

Official event submissions made by authorized venue members are shared venue records and are not deleted with one member’s account. Referenced promotional images are moved to a neutral shared storage path before the uploader’s UID-bearing copy is removed. Unused uploads owned by that account are deleted. Other venue members, venue records, and public event listings remain unchanged.

If the deleting account submitted a report, its account identifier and optional personal explanation are deleted together. The structured report reason, affected event and venue, status, and deidentified resolution may remain where needed for moderation. Identifiers linking the deleted account as an event creator, editor, responsible member, reporter, or resolving administrator are removed.

An administrator may delete their account even when it is the final active administrator. Deletion never promotes another user or changes another membership, so the service may temporarily have no in-app administrator until a trusted administrator is arranged separately.

Account deletion uses a durable processing record and may finish asynchronously after the sign-in is removed. If processing fails before sign-in deletion, the user can sign in again, verify their password, and retry. The finalizer removes the processing record and remaining private account records. Locally saved events and verified Support EAL purchases are not account-based and remain on the device. Local publisher blocks are cleared when account deletion succeeds.

See Delete your EAL account for the in-app steps and a fallback request path if you cannot access the app. We may ask you to verify control of the account. Do not send your password.

Provider logs and backups follow their applicable retention processes, so deletion may not be immediate in every system. We may retain information when required by law or when reasonably necessary for security, fraud prevention, moderation, or dispute resolution, and will explain applicable retention when responding to a request.

Security and updates

We use authentication and access controls to help protect information. No storage or transmission system is completely secure. We may update this policy when the service or its information practices change, and will update the date on this page.

Contact

For privacy questions, content concerns, or requests, contact Cultivate Media LLC at eal@cultivatemediaauburn.com.