What we hold, and what we don't.

What we store

About you. Your name, your email address, and a phone number if you give one. A home currency, so combined totals across artists add up in money you recognise. Your password is handled by our authentication provider and is never visible to us.

Your work. The artists you play for and your role in each. Dates, times, call times and notes. Venues, hotels and flights attached to those dates. Whether you said you were available. Set times, load-ins and drive times between places.

The money. Fees, per diems, additional payments and costs, along with who paid what and whether it has been settled. This is the most sensitive thing in TourWell and it is treated that way. See Who can see it below.

A record of changes. When somebody edits a date, TourWell records who changed what and when, so an artist's admins can see how a schedule moved. It exists to answer "when did the call time change?", not to monitor anybody.

Travel documents. Passport and visa numbers, the issuing country and the issue and expiry dates, if you choose to enter them. They are here because a tour manager filling in a visa application or a promoter's advance needs them at short notice, and the alternative is photographing a passport in a car park and sending it over WhatsApp. You are never required to enter them, and you can clear them at any time.

Things a promoter or a wardrobe department asks for. Allergies and dietary requirements, and shirt, waist and shoe sizes. Allergies are health information and are treated as carefully as fees are: visible to the admins of an artist you work for, because that is who fills in the catering advance, and to nobody else.

Documents you attach. Images and PDFs you upload against a date or a room: contracts, riders, parking photos, door instructions. They carry the same access rules as the date they hang on, and they go when you delete them.

Guest lists. The names you put on a door list. These are usually not TourWell users at all, so they are held as plain text against the venue, visible to the people working that date, and they go when the date does.

What we do not collect

We never ask for your location. TourWell requests no location permission and reads no device location, at any point. Venue and hotel addresses and coordinates come from searches you run for a place by name, not from where your phone is.

We do not use advertising identifiers, we do not track you across other apps or websites, and we do not sell or rent personal information to anybody.

Face ID and Touch ID are handled entirely by your phone. TourWell is told only whether an unlock succeeded. Your biometrics never reach us and cannot.

Who can see it

Access is enforced by the database itself rather than by the app, so a screen cannot show somebody something they are not entitled to even if it tries.

• You always see your own dates, your own availability and your own money.
• An artist's admins see that artist's schedule and books.
• Other members see the dates they are booked on. Fee visibility is a deliberate, separate permission. Being in the line-up does not reveal what the artist was paid.
• Costs somebody else paid out of pocket are visible to them, because they need to know what they are owed, and to the artist's admins. Not to everybody.

Calendar feed links are the exception, and it is worth understanding. If you subscribe to your TourWell calendar from a phone or laptop calendar app, that feed uses a long secret address rather than a login, because calendar apps cannot sign in. Anyone who has that address can read that schedule. Treat it like a password, and revoke it in the app if it goes somewhere you did not intend.

Where it lives, and who else touches it

TourWell is a small operation and uses a small number of providers. Each one gets only what its job requires.

• Supabase hosts the database and handles sign-in. Your data is stored on their servers in Europe (eu-west-1).
• Google Places and Routes. When you search for a venue or hotel by name, that search text is sent to Google to return matching places, and two addresses are sent to work out the drive time between them. Your identity is not sent with it.
• Netlify serves this website and the web app.
• Paddle takes payment for subscriptions bought on the web, as merchant of record. That means Paddle is the seller for those purchases: they handle the card, the tax and the receipt, and they hold your billing details. We never see or store a card number. Subscriptions bought inside the iOS app go through Apple instead, on the same footing.
• OpenAI. When you ask TourWell a question about the run, or give it a document to read, the question or the file and the part of your schedule needed to answer it are sent to OpenAI, which produces the answer. Your name and your account are not sent with it. OpenAI processes it under its API terms, which do not allow it to be used to train their models. The same happens for a question asked through Siri once you have turned that on, and for a question asked through a link you have made for another service, in which case that service, which you chose, also sees the answer. The app tells you this and asks before the first time.
• Resend sends the email TourWell has to send: invitations to join an artist, and notices when something changes on your account that you would want to know about.
• AeroDataBox looks up a flight by its number and date, so a flight added to a tour fills in its own times and airports. The flight number is sent. You are not.
• Expo builds the mobile app and delivers updates to it.
• Apple distributes the iOS app and runs TestFlight.

We do not send your information anywhere else, and none of these providers are given it for their own purposes.

Your schedule, your account and any files you attach are stored in Supabase's Ireland region, inside the EU, whichever country you are in when you use TourWell.

Notifications name the date they are about, like “Lobby call 18:30, Bloem On Trade”, so they are useful from a locked screen without opening the app. That also means anyone who can see your lock screen can see them. They never contain fees, phone numbers or travel document details. Your phone's own settings can hide notification previews until it is unlocked.

On your device

TourWell keeps a copy of your schedule on your phone so it works in a venue with no signal, and queues anything you change while offline until it can be sent. If you turn on the app lock, fee information is only written to the device at all while the lock is enabled, and is cleared when the app locks.

Deleting the app removes everything it stored locally.

Keeping it, and deleting it

We keep your information for as long as your account exists, because a tour diary is only useful with its history intact.

Deleted artists and dates go into a 30-day restore window first, so an accidental deletion is recoverable. After 30 days they are gone for good.

Telemetry and error reports are deleted automatically after 180 days. The record of who changed which date is kept for 12 months, and sent notifications for 90 days. The security log (who read a passport number, who changed somebody's permissions) is kept permanently. Nothing in the app can edit or delete it, and each entry is signed against the one before it, so if anyone were to alter the record directly it would show. That is deliberate: a record of access is only worth having if it cannot be quietly tidied up afterwards.

You can take your data with you, from inside the app. My Account › Your data › Download my data gives you a single file holding everything your account has: your profile, the artists you are in, every date you are booked on, your availability answers, your blocked dates and what you are owed. Passport, visa and ID numbers are the one exception: they are encrypted, every read of one is recorded, and putting them into a plain file you might email to yourself would undo that. You can see them any time in the app, and ask us for a copy.

You can delete your account from inside the app too. My Account › Delete my account. It really deletes: your login is removed and every device signed out. You can also email datarequest@tourwellapp.com to delete your account, get a copy of what we hold, or have something incorrect fixed. Note that a date you were booked on belongs to the artist as well as to you, so removing your account does not delete that artist's schedule.

If you are in the EU or the UK you may complain to your national data protection authority; if you are in South Africa, to the Information Regulator. We would rather you told us first, but the right is yours either way.

Children

TourWell is a tool for working musicians and is not directed at children. We do not knowingly collect information from anyone under 13.

Changes to this policy

If this policy changes in a way that affects what we do with your information, the date at the top of this page changes and we will say so in the app.

Contact

Requests about your own data (a copy of what we hold, a correction, or deletion) go to datarequest@tourwellapp.com.

Anything else, including questions about this policy, goes to hello@tourwellapp.com. Both are read by a person.