Privacy in the Mighty Sounds app
Updated 23 September 2026. This section covers the Mighty Sounds mobile app and its connected user account. The controller is MS festival s.r.o., company ID 27236269, Seifertova 571/5, 130 00 Prague, Czech Republic. Privacy and deletion contact: info@mightysounds.cz. The app is intended for people aged 16 and over.
Data and purposes
For account creation and management, we process your email, user ID, login credentials and optional display name and profile photo. Google or Apple sign-in provides the information needed for authentication. Personal schedules and app features use saved artists and performances, preferences, language, votes, ratings and survey answers you submit. Search queries are sent to the server to retrieve results.
Community features process posts, comments, chat messages, reports and user blocks, including for moderation and abuse prevention. Content you publish can be seen by other users. If you enable push notifications, we process the push token, device identifier, platform, language and notification preferences. Push can also work without an account and can be disabled in the app or phone settings.
Diagnostics and usage analysis process a random installation identifier, app and OS versions, device model, language, screens visited, events and error logs including technical stack traces. Our telemetry does not attach your email or account ID.
Permissions, providers and security
With your permission, location displays your position on the festival map; our app server does not store it. Photo access is used for the profile image you select. You can revoke permissions in your phone settings. Basic festival information is available without an account.
Providers include Supabase for accounts, data and files, Vercel for web infrastructure, and Expo with Google/Apple services for push delivery. Google Maps SDK for Android also processes IP addresses, technical metadata, an SDK identifier, crashes and map interactions to operate and improve Google services. See Google Maps disclosures and Google's privacy policy. External websites, sign-in providers and stores have their own policies. Data is encrypted in transit. The app has no advertising SDK and we do not sell personal data.
Delete your Mighty Sounds account and data
In the app, open Account, select Delete account and reauthenticate to confirm. Without the app, sign in to Account - Privacy on the website and submit an account deletion request. If you cannot sign in, email info@mightysounds.cz from your account's email address; we may verify your identity to protect the account.
Deletion in the app removes the account, profile and avatar, favourites, saved schedule, account-linked settings, community posts, comments and chat, votes, ratings and account-linked survey answers. Website and email requests require processing by the controller. Uninstalling the app alone does not delete the account.
Account data is retained while the account exists; the listed data is removed from the active database when deletion completes. Independent device identifiers for push and diagnostics are not automatically deleted with the account. Technical logs currently have no fixed automatic deletion period and remain until operational cleanup; you can request their deletion at the contact above. Data independently processed by providers such as Google Maps follows their retention policies. Notification permissions can be disabled at any time.
Contact us to exercise rights of access, correction, deletion, restriction, portability and objection. You can also contact the Czech data protection authority. The accreditation consent below is separate; its five-year period does not apply to app accounts.
Data controller: MS festival s.r.o., Seifertova 571/5, 130 00 Prague, Czech Republic, Company ID: 27236269, VAT ID: CZ27236269.
Consent to personal data processing
I hereby give the company MS festival s.r.o., as the controller of personal data, consent to the processing (including automated processing) of my personal data, for the purposes of allowing my access to the festival and providing me with updates related to my participation. The personal data processed under this consent are: first name, surname and e-mail address. The data will be stored in the database for a period of five years.
This consent is given in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("GDPR"), Act No. 101/2000 Coll. on the protection of personal data, and Act No. 480/2004 Coll. on certain information society services.
The provision of personal data is voluntary and I am aware that I can withdraw this consent at any time, in the same way I gave it. I can also withdraw only my consent to receive email updates, e.g. by following the instructions included in every such email ("unsubscribe"). The withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal.
Your rights
- The right to know why your personal data is needed, what happens to it and how long it is kept.
- Right of access to the personal data we hold about you.
- Right to rectification – to complete, correct, erase or block your data at any time.
- Where you have given consent, the right to withdraw it and have your data erased.
- Right to data portability to another controller.
- Right to object to the processing of your data.
You can also submit data export or deletion requests directly in the Privacy section of your account. To exercise your rights, contact us at info@mightysounds.cz. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.cz).