Privacy Policy

Last updated: October 22, 2026.

This Privacy Policy explains what information the What's Up! Luxembourg mobile application and website (collectively, "What's Up", "we", "our", or "us") collect, how it is used, and the choices you have. What's Up is operated by NeatCapital OU. By using the service, you agree to the practices described below.

If you disagree with any part of this policy, please stop using the service and remove the application from your devices.

Summary

  • We try to collect the minimum amount of information needed to run the service.
  • Location data, when you choose to share it, stays on your device unless you actively share a place. The map's center may be sent so the server can return content for that area.
  • We do not sell your data, and we do not use it for advertising profiling.
  • Anonymous usage and crash data is collected to keep the app stable and to understand which features people use. You can disable this in the app's settings under Privacy.

Information we collect

Location. What's Up asks for your device's location only after you grant permission. We use the coordinates locally to show the nearest landmarks, restaurants, fuel stations, parking, and transit on the map and in the Nearby tab; to rank lists by distance; and to display "you are here" on the map. The coordinates of the map's current center, not your exact location, are sent to our servers to query nearby content. You can deny or revoke location permission at any time from iOS Settings; the app still works, but distance-ranked features will fall back to the country center.

Device identifiers and platform data. When you launch the app, it registers an anonymous installation identifier with our backend so that we can deliver notifications, store your preferences, and keep your support purchases (What's Up Plus) tied to your installation. We also collect basic technical information automatically provided by the operating system: device model, operating system type and version, the app version, and the device language. This data is used for analytics, fraud prevention, and bug diagnosis.

Push notification tokens. If you grant notification permission, Apple gives us a token that lets us send you push notifications about today's brief, events, and exhibition openings. The token is stored on our servers; we use it only to deliver notifications and to measure how often they are opened. You can turn notifications off at any time from iOS Settings.

Accounts. What's Up does not offer user accounts. The website does not ask you to sign in. The iPhone app may still store an anonymous installation identifier, as described above. If an older version of the app stored an account, email contact@whatsup.lu and ask for it to be deleted.

Purchases. If you purchase a one-time What's Up Plus unlock or the monthly subscription, Apple charges your Apple ID and sends us a receipt token. We store the token so we can validate your entitlement and restore your purchase on other installations under the same Apple ID. We do not see your card information, your address, or any other billing details. Subscriptions can be managed and cancelled at any time in iOS Settings under your Apple ID, Subscriptions.

Diagnostics and analytics (iPhone app). The iPhone app uses Firebase Analytics, Firebase Crashlytics, and Firebase Cloud Messaging from Google to record anonymous crash reports, aggregate usage events (such as "the user opened the Mobility tab"), and to deliver push notifications. These services may collect identifiers, IP addresses, device characteristics, and event data. Crash reports do not include the contents of what you typed. You can opt out of analytics inside the app, under More, Privacy. The website does not load Firebase.

Third-party services we use

  • Apple for in-app purchases, push notifications, and platform services.
  • Google Firebase (Analytics, Crashlytics, Cloud Messaging) for crash reports, anonymous usage statistics, and push delivery.
  • Google Maps, in the iPhone app, for map tiles and for directions you choose to open. Google's own privacy policy applies to the data it receives. The website does not load Google Maps.
  • OpenStreetMap, Overpass, and public data feeds such as data.public.lu (including the MeteoLux forecast, licence CC0), the City of Luxembourg car park feed, and petrol.lu maximum prices. The iPhone app may also request other public feeds, including a third-party flight feed. The website does not publish that flight board. We do not send these providers an account id. A request still carries an IP address.

Website

The website at whatsup.lu is a landing page, plus a page that opens a shared list link. It is not the iPhone app's analytics.

  • The website does not create an account and does not register a device.
  • The website does not use analytics cookies, advertising cookies, or fonts loaded from a third party. It does not need a cookie banner, because it does not set tracking cookies.
  • The website does not call other sites from your browser. The icon, the App Store badge, and the styles are files on whatsup.lu.
  • A shared list link keeps the list in the URL fragment. Browsers do not send that fragment to our server. The page shows the list name and how many places it contains, and a button that opens the iPhone app. The website does not store the list.

The What's Up app uses Apple's App Tracking Transparency framework where required, and we do not track you across other apps or websites.

How we use the information

  • To operate and improve the service: deliver maps, points of interest, transit info, weather, the daily brief, and feature gating for Plus.
  • To diagnose crashes and bugs so the next update is more stable.
  • To deliver push notifications you opted in to.
  • To process subscriptions and purchases through Apple's StoreKit, including validating receipts on our server.
  • To detect and block abuse of the service (rate limiting, fraud, spam).
  • To respond to your requests or to comply with applicable law.

We do not use your data for advertising profiling, and we do not sell or rent it to third parties.

Children

The service is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

Retention

We keep information for as long as the service is operating and your installation is active. Anonymous analytics events are retained for up to 14 months. Crash reports are retained for up to 90 days. If you delete the application from your device, the installation identifier becomes orphaned and is purged from our backend within 12 months. If an older account still exists, email us and we will delete it, subject to a short backup window. The website does not store a place list.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, to object to processing, or to lodge a complaint with a data protection authority. To exercise these rights, contact us at the email address below and we will respond within a reasonable time.

Security

We use HTTPS for all traffic between the app and our servers. We try to follow best practices for storing tokens and identifiers, but no system is perfectly secure; you accept that residual risk by using the service.

Changes

We may update this Privacy Policy from time to time. If we make a significant change, we will update the "Last updated" date at the top of this page and, where appropriate, notify you inside the app. Your continued use of the service after a change constitutes acceptance of the revised policy.

Contact

If you have questions or requests about this Privacy Policy or about your data, please email us at contact@whatsup.lu.

NeatCapital OU, Tallinn, Estonia. A street address and a registration number are not printed in this note.