Privacy Policy

What data we collect

• Account: your email address and password, managed by our authentication provider (Supabase). We do not store your password in plain text.
• Profile: your username (handle), and optionally your profile photo and bio.
• Content you create: album and concert ratings, comments, concert photos and videos, companion tags, favorite artists and event attendance.
• Approximate location: only if you allow it, to show you nearby concerts. We use your coordinates at the time of the query; we do not build a history of your location.
• Basic technical data required for the app to work (e.g. your session identifier and, if you enable notifications, a push token).

How we use your data

• To create and maintain your account and profile.
• To save and display your rankings, concerts and content.
• For social features: following people, seeing their activity, likes, comments and tags.
• To show you upcoming concerts near you (if you allow location).
• To send you account emails (e.g. sign-up confirmation and password reset) and notifications (e.g. concerts from your favorite artists).

Public content

Vinylr is a social app in the style of Letterboxd: your profile, ratings, concerts, photos/videos, comments and favorites are visible to other people within the app. Do not post content you do not want to share.

Third parties that process data

To function, the app shares strictly necessary data with:

• Supabase — authentication, database and storage of your photos/videos.
• Resend — to send account emails (confirmation, password reset).
• Expo — to deliver push notifications to your device.
• Ticketmaster — to find upcoming concerts (we send your approximate location or the artist name).
• MusicBrainz, setlist.fm, Cover Art Archive and Deezer — catalog of artists, albums, concerts and images. These queries are made from our server.

We do not sell your personal data and we do not use it for third-party advertising.

Data retention and account deletion

We keep your data while your account is active. You can delete your account at any time from the app, in Profile → Settings → Delete account. When you do, we permanently delete your account and all associated content (rankings, concerts, photos, videos, comments, favorites and more), with no way to recover it.

Security

We protect access to your data with row-level security (RLS): each user can only modify their own information. Communication travels encrypted (HTTPS).

Minors

Vinylr is not directed to children under 13 and we do not knowingly collect their data.

Changes to this policy

We may update this policy; we will post the new version on this same page with its update date.

Contact

If you have questions about your privacy or want to exercise your rights, email us at matiasromanoslop@gmail.com.