NoBull Tickets – Privacy Policy

Effective date: 23 September 2026

This policy explains what information the NoBull Tickets mobile app (the “app”) handles, why, and what happens to it. It applies to the app on Android and iOS. Ticket purchases happen on the event organiser’s own website, which has its own privacy policy; this document is about the app only.

Who we are

NoBull Tickets is developed by Protos Digital, a trading name of Dragon Evolution Ltd, a company registered in the United Kingdom. If you have any question about this policy or about how the app handles information, email us at hello@protos.digital.

Who the app is for, and who is responsible for what

The app is a ticket scanner used by event staff (stewards, gate managers and organisers) to check guests into an event. It is not for the general public and is not intended for anyone under 18.

The app connects to the event organiser’s own website, where the NoBull Tickets plugin runs. All ticket and guest information belongs to, and is stored by, the organiser on that website. In data-protection terms the organiser is the data controller for guest information. Protos Digital develops the app and operates a small relay service (described below) on the organiser’s behalf; we do not hold a copy of any organiser’s ticket data and we cannot see it.

What information the app handles

1. Your staff account

To use the app you sign in to the organiser’s website, either with a username and password or with a one-time join code the organiser gives you. Your credentials are sent directly to the organiser’s website over an encrypted connection and are not sent to us. The website issues the app a secure access token, which is stored in your device’s protected storage and used for subsequent requests.

If you choose Remember me, your sign-in details are saved in your device’s secure, encrypted storage so you do not have to enter them again. They stay on your device only. You can remove them at any time by turning Remember me off or logging out.

The app also records the display name you choose for your device (for example “Sam – North Gate”) and the gate you are assigned to. These are stored on the organiser’s website so the organiser can see which staff are signed in and where.

2. Ticket and guest information

So that the app keeps working with no signal, it downloads a copy of the event’s ticket list from the organiser’s website and stores it on your device. That copy contains, for each ticket: the guest’s name, the ticket reference and type, the order number, and whether the ticket has been checked in.

The downloaded copy never contains guests’ email addresses, phone numbers, postal addresses or payment details. Those are not stored on any device.

Organisers signed in as admins can look up a guest’s email address or phone number for an individual ticket, for example to contact them about a problem at the gate. That lookup is made live from the organiser’s website while the device is online and the result is not saved on the device. Staff who are not admins cannot see or search by contact details at all.

3. Check-in activity

When you scan or check in a ticket, the app records the ticket reference, the time, the gate, the device that performed the check-in and the result (admitted, already inside, and so on). This record is sent to the organiser’s website. If the device is offline, the record is queued on the device and sent as soon as a connection returns. This activity is what allows organisers to see who has arrived, prevent a ticket being used twice, and review what happened at the gate.

4. Camera

The app uses your device’s camera to read ticket QR codes. Camera images are processed on the device solely to decode the QR code. No photos or video are captured, stored or transmitted.

5. Live updates (relay service)

So that a check-in on one scanner appears on the others straight away, the app connects to a relay service operated by Protos Digital. The relay passes short check-in events (a ticket reference, its new status and a timestamp) between the organiser’s website and the scanners signed in to that event. It does not receive guests’ contact details and does not keep a record of the events it relays. If the relay cannot be reached, the app continues to work and updates through its normal sync instead.

6. What the app does not do

• It contains no advertising and no advertising identifiers.
• It contains no analytics, tracking or behavioural-profiling software.
• It contains no crash-reporting software.
• It does not access your location, contacts, photos, files or messages.
• It does not sell, rent or trade any information, and never will.

How the information is used

Everything above is used for one purpose: running check-in at the event. That means signing staff in, showing them the ticket list, recording check-ins, preventing duplicate entry, keeping scanners in step with each other, and giving the organiser an accurate picture of attendance. The app does not use any information for any other purpose.

Where the information goes

Information is exchanged between three places only: your device, the organiser’s website, and the Protos Digital relay service. It is not shared with anyone else. The app is distributed through Google Play and the Apple App Store, which handle installation and updates under their own privacy policies; they do not receive any of the information described above from the app.

How long information stays on your device, and how to remove it

The ticket list, queued check-ins, your access token and (if enabled) your remembered sign-in details stay on your device until you remove them. You can remove the ticket list for an event from the app’s offline settings, remove everything by logging out, or remove all of it by uninstalling the app. Logging out also revokes your device’s access on the organiser’s website, so the token can no longer be used.

Ticket, guest and check-in records held on the organiser’s website are retained according to the organiser’s own policy.

Security

All communication between the app, the organiser’s website and the relay service is encrypted in transit. Access tokens and remembered sign-in details are kept in the device’s protected storage. Access to contact details is restricted to admin users and is never cached on a device. Organisers can see every device signed in to their event and can revoke a device at any time, after which the organiser’s website rejects anything that device sends.

Your rights

Under UK data-protection law (including UK GDPR) you have rights over personal information about you, including the right to access it, correct it, have it deleted, and object to or restrict its use.

• If you are a guest and your ticket appears in the app, the event organiser holds your information. Please contact the organiser directly; their details are on the website where you bought your ticket.
• If you are event staff using the app, your account details are held on the organiser’s website; contact the organiser. For anything about the app itself or the relay service, contact us at hello@protos.digital.

If you are unhappy with how your information has been handled you also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.

Children

The app is a tool for event staff and is not intended for use by anyone under 18. We do not knowingly collect information from children through the app.

Changes to this policy

If we change how the app handles information we will update this page and the effective date at the top. Significant changes will also be noted in the app’s release notes.

Contact

Protos Digital (Dragon Evolution Ltd)
hello@protos.digital