Privacy policy

1. Who we are

Overture is an independent app for finding classical concerts, opera and ballet in cities around the world. It runs as a website (getoverture.app), as a Home Screen app and as an iPhone app. Features and sign-in requirements differ between them; this policy covers all three.

Overture is responsible for the personal data described here. Overture is based in the Netherlands, and the General Data Protection Regulation (GDPR) applies. For questions or requests, email hello@getoverture.app.

Overture doesn't sell tickets. “Tickets” and source links open the website of the venue or ticket seller. Their own privacy policy applies there.

2. Using Overture without an account

On the website and Home Screen app, you can use the map, agendas, Curated, Match my mood and show pages without an account. The iPhone app requires sign-in before those screens open. For website visitors without an account, choices are kept only on the device, in browser storage:

• your home city and recently chosen places
• saved evenings, “been there” answers and artists or orchestras you follow
• your answers to the youth-price questions (age group, student, passes), used only to show the right prices
• your Match my mood preferences and the alerts you switched on

Clearing your browser data or removing the app deletes all of this.

3. Your account

You sign in with your phone number or email address. We normally send a six-digit code by text message or email. A limited number of pre-created accounts can use a password instead. We keep:

• Login: your phone number or email address, and when you signed up and last signed in.
• Profile: your first name, username, home city, favourite genres, kinds of evenings and composers, venues you follow, saved evenings and notification choices.
• Youth prices (if you answer): your date of birth, whether you study and which youth or discount passes you have. These are only used to show the prices that apply to you and are never shown to other listeners.

We use this to keep your profile and saves the same on every device and to make Explore, Curated and alerts fit you. You can change your profile at any time and delete your account under You → Settings. Deleting removes your profile, everything linked to it and your login.

Signing in uses two cookies (“ov_at” and “ov_rt”) that keep you signed in. Only our server can read them, and they are removed when you sign out.

4. Location

Overture asks for your location only when you tap “Use my location” or “Near me”, or turn on travel alerts, and only if you allow it on your device. Your position is used on your device to find the nearest city and the venues within about 15 km. We don't send your exact coordinates to our servers or store them. Without location, you can always pick a city yourself.

5. Notifications

On platforms where alerts are available, turning them on (for youth prices, saved evenings or artists you follow) registers your device with its notification service. We store that registration and the alerts scheduled for it: the title, text, link and time of each alert. Your device works out which alerts are due, using your saves and, for travel alerts, the city you are in. We don't link these registrations to your name. Turning alerts off removes them from our server. The current iPhone app does not request native notification permission.

6. Ask Overture and voice

When you use the AI adviser or Match my mood, your question, the recent conversation and the city, dates or performance you chose are sent to Anthropic (Claude) to write the answer. The adviser can search the web for information about works and productions. Please don't include sensitive personal information in your questions. Anthropic doesn't use these requests to train its models; its own operational and abuse-monitoring retention applies.

The conversation is kept only in your browser tab, so you can return to it after opening a concert. It expires after two hours of inactivity or when you close the tab. “Start a new conversation” clears it. We don't save conversations in our database or log their text.

Voice input is optional. After you tap the microphone and allow access, up to one minute of audio is streamed to OpenAI for transcription. We don't save or log the audio; OpenAI's own retention policy applies. Cancel stops recording, but can't undo audio that was already sent.

General listening guides about works are stored in a shared music library, so the same work doesn't have to be researched again. Your questions and preferences are never added to that library. Recommendations are AI-written interpretations; please check practical details with the venue.

7. Friends and following

Some listeners can already try Overture's social features: following other listeners, showing which evenings you are going to, planning to go together and keeping a “stub” of evenings you attended. If these are on for you:

• other listeners can find you by first name and username
• who you follow, the evenings you go to and your stubs are shown according to your choices under You → Privacy (followers, everyone or only you)
• you can block someone; they are not told, and you are hidden from each other everywhere

8. Pass waitlist and organisers

The Overture Pass waitlist is currently closed. If you joined it earlier, we keep your email address and, if you gave them, your year of birth and city, with the date and page you signed up from. We only use your email to tell you when the Pass opens, and your year of birth and city to check eligibility and to share anonymous totals (such as sign-ups per city) with concert halls. We never share or sell your email address. Ask us and we will remove you from the list.

If you introduce your hall, series or festival through Work with Overture, the form is sent to us by email: your name, email address, organisation, city, venues, agenda link or spreadsheet and what you write. We use it only to reply to you and to list your performances. It is not stored in our database; we keep the email for as long as we work together, and delete it when you ask.

9. Measuring how the app works

• Umami Cloud counts visits, page views, ticket and save clicks, navigation and filter changes. Website and iPhone-app measurements use separate labels when enabled in that version. Technical information such as your IP address, device, language and screen size is sent to cloud.umami.is and gateway.umami.is. We do not send your account identity, email address, phone number or typed questions to Umami, and remove URL queries and fragments. These measurements respect Do Not Track and Global Privacy Control.
• Vercel Web Analytics and Speed Insights count page visits and measure loading speed. They don't use cookies and don't follow you across sites or visits.
• Slow-load reports: when a page or request is very slow, the app sends a short report (which page, how long it took, your country and whether you are on a phone). It is written to our server logs and not stored anywhere else.
• PostHog is used only to switch new features on for some signed-in listeners, based on your username. It doesn't record what you do in the app and keeps nothing on your device.

We don't use advertising trackers or social media pixels.

10. Cookies and device storage

Overture only uses storage the app needs to work: the two sign-in cookies, and browser storage for your choices (see section 2) and for loading pages faster. None of it is used for advertising or for tracking you on other websites, so we don't ask for cookie consent. You can clear it at any time in your browser or phone settings.

11. Who helps us run Overture

We use these services to run the app. They process data only on our behalf and only as needed for their task:

• Vercel hosts the website and the app's server, and runs the measurements in section 9.
• Render hosts the concert database and the server that stores profiles and alerts.
• Supabase handles sign-in and sends the sign-in codes by email or text message.
• Resend delivers the introductions organisers send through Work with Overture to our inbox.
• Anthropic (Claude) writes the AI adviser's answers, and OpenAI transcribes voice input.
• PostHog (EU) switches features on for some listeners.
• Umami Cloud provides the usage measurements described in section 9.
• Mapbox shows the map. Your device loads map tiles from Mapbox, which sees your IP address.
• Apple Music plays the music samples on show pages. Your device loads them straight from Apple when you press play.
• Apple and Google deliver notifications if you turn them on.

Some of these companies are based in the United States. Data that goes there is protected by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We only give data to authorities when the law requires it.

12. Legal basis

• Agreement with you: your account, profile, saves, alerts and the AI adviser, because you ask us for them.
• Consent: location, notifications, voice input and the Pass waitlist. You can withdraw it at any time in the app or in your device settings.
• Legitimate interest: keeping Overture secure and fast, preventing misuse, the measurements in section 9, and replying to organisers who contact us.
• Legal obligation: when the law requires us to keep or share data.

13. How long we keep data

• Account and profile: until you delete your account.
• Alert registrations: until you turn alerts off, or the notification service reports that the device can no longer be reached.
• Pass waitlist: until the Pass opens or you ask us to remove you.
• Work with Overture introductions: for as long as we work together, or until you ask us to delete them.
• Server logs: a short time, as set by our hosting providers.
• AI conversations: not stored by us (see section 6).

14. Your rights

You can ask to see, correct, export or delete your personal data, ask us to limit its use, or object to it. Much of this you can do yourself: edit your profile, change your privacy choices or delete your account under You → Settings. For anything else, email hello@getoverture.app; we answer within one month.

If you think we handle your data wrongly, please tell us first. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own country.

15. Children

You need to be 16 or older to create an account. We don't knowingly keep data about younger children. If you think a child has given us personal data, contact us and we will delete it.

16. Changes

When Overture changes in a way that affects your data, we update this policy and the date at the top. For important changes we tell you in the app first.