Privacy policy

1. What data we collect

Account data: name, email address, phone number (optional), password (stored encrypted, never in plain text), language and profile photo if you choose to upload one. If you sign in with Apple or Google, we receive your name and email from them (or a relay email, if you choose to hide it).

Order data: what you buy, from which business, the amount, the delivery mode (seat or pickup), the section, row and seat where it is delivered, the delivery PIN, the time and status of each order, and any rating or tip you leave.

Shipping data: if you buy from the online store, the name and phone number of the recipient and the delivery address in the Dominican Republic.

Location: your phone's approximate position while you place an order, to confirm that you are inside the venue. We do not track your location in the background or keep it as a history; we only keep the venue where each order was placed.

Payment data: processed by AZUL. FANWAY only receives a payment-method identifier, the card brand and its last four digits so you can recognize it. We never see or store the full number or the security code.

Technical data: phone model and operating system, app version, device identifier for notifications, IP address and error logs. They are needed for the app to work and to diagnose failures.

Communications: the emails you send to support and the replies we give you.

2. What we use your data for

To provide the Service: create and protect your account, receive and charge your orders, deliver them to your seat, notify you when they are ready or ship what you buy in the store to your home, send you receipts and handle your claims.

For security: verify your email or phone, offer you two-step verification and passkeys, detect fraud and protect accounts.

To improve FANWAY: understand what is ordered most, how long orders take and where they fail, always with aggregated data that does not identify you.

To comply with the law: keep the tax records of sales for the period required by Dominican legislation.

We do not sell your data or use it for third-party advertising. We only send you marketing emails if you subscribe, and you can unsubscribe at any time from the email itself.

3. Who we share it with

With the business you buy from: it receives your name, the order details, the delivery mode and, for seat delivery, your section, row and seat. It does not receive your email, phone or payment data.

With the runner who brings your order: they see your name, your seat and the order they are delivering, only for the duration of that delivery.

With the courier company that ships online store purchases: it receives the name and phone number of the recipient and the delivery address, only to make that shipment.

With providers that operate on our behalf under contract: AZUL (payments), Google Workspace (email), Amazon Web Services (text messages), Cloudflare (website and image hosting), Fly.io (servers) and Apple/Google (notifications and app distribution). They only receive what is necessary for their function.

With authorities, when the law requires it or when necessary to defend our rights or those of other users.

Never with advertisers or data brokers.

4. How long we keep it

Your account data is kept for as long as the account exists. Verification codes and sign-in challenges are deleted within minutes.

Purchase records are kept for ten years due to tax obligations, unlinked from your identity if you delete your account.

Technical logs are kept for a maximum of twelve months.

5. Your rights and how to exercise them

You can view and correct your data from Profile → Personal details, change your seat and payment methods, and decide which notifications you receive.

You can delete your account from the app (Profile › Security › Delete account) or, without the app, by emailing soporte@fanway.app from the email address on your account. It is immediate and irreversible: we erase your profile, saved seats, payment methods and favorites, and keep only the tax records, already anonymized.

You can also request access, rectification, objection or portability of your data by writing to soporte@fanway.app. We reply within fifteen business days at most. If you are not satisfied, you may contact the data protection authority of the Dominican Republic.

6. How we protect your data

All communication between the app and our servers is encrypted (HTTPS). Passwords are stored hashed and salted; payments never pass through our servers. Internal access to data is restricted to staff who need it and is logged.

No system is infallible. If we detect a breach affecting your data, we will notify you and report it to the competent authority as required by law.

7. Minors

FANWAY is not directed at people under 18 and we do not knowingly collect data from minors without the consent of a parent or guardian. If you believe a minor created an account without permission, write to us and we will delete it.

8. Phone permissions

Location: only while you place an order, to confirm you are at the venue. Camera: only if you choose to take a profile photo or scan a code. Notifications: to keep you posted on your orders; you can turn them off in your phone settings. Face ID / Touch ID: only if you enable a passkey; biometrics never leave your phone.

9. Changes to this policy

If we change this policy substantially, we will notify you in the app or by email before it takes effect. The current version is always at fanway.app/privacidad.

10. Contact

Data controller: Héctor Federico García Fernández (FANWAY), Calle 10 No. 2, Urb. El Portal, Santiago de los Caballeros, Dominican Republic. For any question about this policy or your data, write to soporte@fanway.app.