1. Introduction
BandFrame ("we", "our", or "us") is a music creation and collaboration app. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
By using BandFrame, you agree to the collection and use of information described in this policy.
2. Information We Collect
Account Information
- Email address — used to create and authenticate your account. Your email is used only for sign-in and account management and is not shown to other users.
- Display name — your name shown to collaborators on projects you share
- Username — your unique @handle, shown on your profile and to your collaborators
- Profile photo — an optional photo you choose to upload. If you set one, we access only the photo you select from your photo library — never your other photos.
- Bio and instruments — optional details you add to your profile
Content You Create
- Guitar, bass, and ukulele tabs — the musical notation you write in the app
- Song sections, lyrics, and project settings — all project data you create
- Audio recordings — vocal and instrument takes you record through the app
- Imported audio files — files you import from your device into the Audio Library
- Studio arrangements — how you arrange your recordings in the Studio
We do not use third-party analytics or advertising trackers. We do not currently use a third-party crash-reporting service; if we add one in the future, we will update this policy first.
Device Information
We do not collect your location, contacts, or any data from other apps. Standard technical information (such as device type and OS version) may be handled by Apple as part of App Store distribution, under Apple's own privacy terms.
3. How We Use Your Information
We use the information we collect to:
- Create and maintain your account
- Provide the core features of the app (tab writing, recording, the Studio)
- Enable project collaboration — sharing a project with other users via an invite link, and related in-app notifications
- Process and manage your subscription
- Respond to support requests
We do not use your data for advertising. We do not sell your data to third parties.
4. How We Share Your Information
With Other Users
When you invite someone to collaborate on a project, the other members of that project can see:
- Your display name and username
- Your profile photo, bio, and listed instruments
- Content you contribute to that shared project (tabs, recordings)
You control who has access to a project through its invite link and can remove members or set them to view-only. Your email address is never visible to other users — it is not part of your profile.
With Service Providers
We use the following third-party services to operate the app:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Database, authentication, and file storage | supabase.com/privacy |
| RevenueCat | Subscription management | revenuecat.com/privacy |
| Apple (App Store) | App distribution and payment processing | apple.com/legal/privacy |
These providers process your data only to provide their services and are contractually bound to protect it. If we add additional providers (for example, a crash-reporting service), we will update this list before doing so.
Legal Requirements
We may disclose your information if required to do so by law or in response to a valid legal request.
5. Data Storage and Security
Your data is stored on Supabase infrastructure. Your tabs, projects, and profile data are protected by per-user access rules enforced at the database level, so other users can only access content in projects you have shared with them.
Audio recordings and imported files are stored in cloud storage associated with your account and are retrieved through links used by the app. Within a shared project, the people you collaborate with can access the recordings in that project. Because these links are used to stream audio across devices and to your collaborators, treat a project you share as visible to everyone you share it with. All data in transit is protected with industry-standard HTTPS encryption.
Passwords are never stored by us — authentication is handled by Supabase Auth using secure hashing.
6. Data Retention and Deletion
We retain your data for as long as your account is active. You can permanently delete your account and all associated data at any time from within the app (Profile → Delete Account), or by emailing us at the address below. When you delete your account, we permanently remove:
- Your profile and account information
- All projects, sections, tabs, and notes you created
- All audio recordings and library files you own
- Your project memberships, invite links, and notifications
This deletion is permanent and cannot be undone, except where we are required to retain certain information by law.
7. Your Rights
You have the right to:
- Access — request a copy of the data we hold about you
- Correction — update your display name, profile photo, bio, and instruments at any time in the app
- Deletion — delete your account and all associated data from within the app (Profile → Delete Account)
- Portability — request an export of your data by contacting us
If you are located in the European Economic Area or the United Kingdom, you additionally have the rights provided by the GDPR, including the right to object to processing and to lodge a complaint with your local supervisory authority. If you are a California resident, you have the rights provided by the CCPA, including the right to know what personal information we collect and the right to deletion. We do not sell personal information as defined by the CCPA. To exercise any of these rights, contact us at the email below.
8. Children's Privacy
BandFrame is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:
Email: bandframeapp@gmail.com