Privacy Policy

Information We Collect

We collect the following categories of information in order to operate NoteLogd:

• Account Information: on iOS, NoteLogd uses Sign in with Apple; on Android, NoteLogd uses Google Sign-In. Either way, we receive the email address and a stable user identifier that Apple or Google provides when you authenticate. We never collect or store a password.
• Profile Information: your display name/username, bio, profile picture, and, if you choose to add them, your Instagram handle and Spotify profile link, plus the favorite albums, artists, and collectibles you choose to show on your profile. Your profile picture is chosen through your device’s system photo picker (Photos on iOS, the Android photo picker on Android) — we only receive the image you select and never gain access to your broader photo library.
• Reviews & Ratings: album, track, and concert reviews and ratings, including concert details you enter (artist, venue, date, support acts) and up to four photos you attach to a concert review.
• Other Content You Create: comments and replies, Crates (ranked album lists), tier lists, community posts (including up to four attached images), Hot Take votes and suggestions, @mentions of other users, and acceptance of our community guidelines.
• Group Chat Messages: messages, photos, reactions, poll votes, and replies you send in event and Hot Take group chats, and which chats you’ve joined or muted. Chat messages are visible to the other members of that chat and are not end-to-end encrypted.
• Events & RSVPs: concerts or events you post (venue, date, time, artist, and any links or notes you add) and which events you’ve said you’re attending. Event search results come from Ticketmaster through our own backend. We never access or collect your device’s location.
• Social Connections: who you follow, who follows you, likes and upvotes you give, accounts you block, and any content or account reports you file.
• Games, Notes & Leaderboards: your Higher or Lower games and scores (and, on iOS, music game results); an append-only record of Notes (our free, in-app points) you earn from daily, weekly, and monthly tasks, login streaks, and leaderboard prizes, and spend on cosmetic profile collectibles (Vinyls, Tracks, Artists); and your leaderboard rankings. Notes are earned for free and can never be bought with real money.
• Purchase & Subscription Information: if you buy NoteLogd+ or a one-off item on iOS, Apple provides us your transaction and subscription identifiers, the product purchased, purchase/renewal/expiry dates, and status (active, renewed, cancelled, or refunded), which we use to grant and restore your entitlements. We never receive your card number, bank details, or billing address.
• Push Notification Data: if you allow notifications (on Android 13 and later, and on iOS, the system asks for your permission first), a device push token (via Apple Push Notification service and Firebase Cloud Messaging) used solely to deliver notifications such as new followers, comments, replies, mentions, likes, chat messages, and task reminders. We also keep an in-app list of your notifications. You can turn push notifications off at any time in your device settings.
• Usage Timestamps: basic timestamps such as when you were last active and when content was created or updated, used only for ordinary app functionality like sorting, streaks, and “last seen” — not for analytics or advertising.

What We Don’t Do

• No ads — ever. NoteLogd has no advertising, ad networks, analytics SDKs, or third-party trackers, and no App Tracking Transparency prompt — we don’t track you across other companies’ apps or websites.
• No collection or use of the Android Advertising ID (or Apple’s IDFA).
• No selling or sharing your personal information with data brokers.
• No access to your payment card or bank details — purchases are handled entirely by Apple (see In-App Purchases below); paid features are currently available on iOS only.
• No device location access or location tracking of any kind.
• No access to your contacts, camera, microphone, or full photo library.
• No knowing collection of data from anyone under 16 years old.

How We Use Your Information

We use the information described above to:

• Create, authenticate, and secure your account via Sign in with Apple (iOS) or Google Sign-In (Android).
• Provide core functionality: reviews and ratings, Crates and tier lists, community posts, group chats, events and RSVPs, Hot Takes, games, following, commenting, and blocking.
• Deliver push and in-app notifications you’d expect from a social app, like new followers, comments, replies, mentions, likes, and chat messages.
• Track your Notes balance, tasks, streaks, and leaderboard standings so you can earn and spend Notes on cosmetic profile items.
• Verify and grant your NoteLogd+ subscription or one-off purchases, restore them if you reinstall the app or switch devices, and prevent fraud.
• Monitor, investigate, and enforce our Terms of Service, including reviewing reports, filtering profanity, and acting on blocks.
• Maintain, secure, and troubleshoot the app.

How Your Information Is Shared

NoteLogd is a social app, so certain information is visible to other users by design: your username, profile picture, bio, profile links, reviews, ratings, comments, Crates, tier lists, community posts, events you post or attend, follower/following lists, collectibles, and leaderboard rankings are visible to others, subject to any blocking you apply and to the visibility settings in the app (for example, you can hide yourself from leaderboards and hide your Hot Take votes). Group chat messages are visible to members of that chat. Photos you upload (profile pictures, concert review photos, community post images, and chat photos) are stored at web addresses that anyone with the link can open. Beyond that, we share information only with the service providers below, each of which processes data on our behalf:

• Apple — provides Sign in with Apple and Apple Push Notification service on iOS, and processes NoteLogd+ subscriptions and one-off purchases through the App Store (In-App Purchase / StoreKit), currently on iOS only. On iOS, the Follow That Tune and Would You Rather games use Apple Music (MusicKit), with your permission, to play song previews and show artwork; we don’t read your Apple Music library or listening history.
• Google — provides Google Sign-In, used for authentication on Android; Firebase Cloud Messaging, which delivers push notifications and receives your device’s push token for that purpose only; and Google Cloud Run, which hosts our own backend described below. NoteLogd is also distributed through the Google Play Store.
• Supabase — our backend provider (Postgres database, authentication, real-time chat, and file storage). Supabase stores essentially all of the data described above on our behalf as our data processor.
• Our own backend — a service we operate ourselves to power music search and album metadata (album art, artist names, release info) and concert/event search. It receives your search queries but never your account or identity information. It retrieves music metadata from the Spotify Web API and event listings from the Ticketmaster Discovery API, and it sends your notification text to Firebase Cloud Messaging for delivery.

In-App Purchases

On iOS, NoteLogd offers an optional NoteLogd+ subscription and one-off purchases, processed entirely by Apple through the App Store (In-App Purchase) under Apple’s own terms and privacy policy — we never receive or store your card number, bank details, or billing address. We receive only what’s needed to deliver and verify your purchase: the product bought, a transaction or subscription identifier, purchase/renewal dates, and status (for example, active, renewed, cancelled, or refunded), linked to your NoteLogd account. We verify every purchase with Apple before unlocking it, so purchases are granted and restored server-side, never by the app alone. We use this information solely to unlock and restore your purchases, prevent fraud, and provide support; we never use it for advertising. We keep purchase records for as long as your account is active and afterwards only as long as required for legal, tax, or accounting purposes. Refunds are handled by Apple according to its policies — NoteLogd cannot issue refunds directly. Paid features are not currently available on Android; we may bring them to Android in the future, and this policy will be updated first.

Google User Data

When you sign in with Google on Android, NoteLogd requests only Google’s basic sign-in information (your Google account email address and a stable account identifier, which Google provides with your basic profile). We use this information solely to create and authenticate your NoteLogd account. We do not request access to your Gmail, Contacts, Drive, Calendar, or any other Google service, and we never use Google user data for advertising, sell it, or transfer it to anyone other than the service providers described above that help us operate NoteLogd. NoteLogd’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke NoteLogd’s access at any time from your Google Account’s security settings (myaccount.google.com/permissions); doing so won’t delete your NoteLogd account — see Data Retention below for how to do that.

Following, Blocking & Reporting

NoteLogd gives you control over your interactions with other users. Following another account lets you see their reviews and activity. Blocking an account prevents that user from viewing your profile and content, following you, or interacting with your reviews, lists, and comments. You can also report accounts or content you believe violate our Terms of Service; we review reports under our internal moderation procedures and take action against objectionable content or abusive accounts, up to and including suspension or termination.

Data Retention

We retain your account information and content for as long as your account remains active. You can delete your account in two ways: (1) in the app (iOS or Android), from Profile → Delete Account, after typing the confirmation phrase — this deletes your account immediately; or (2) if you can’t access the app, by submitting a request on the Delete Account page of this website (or emailing us), which we verify and complete within 30 days. Deleting your account permanently removes your account and all the personal data and content associated with it described in this policy, including your profile, reviews and ratings, comments, Crates, tier lists, community posts, chat messages, events and RSVPs, follows and blocks, Notes, collectibles, game history, notifications, push tokens, and the photos you uploaded. Residual copies in our infrastructure provider’s encrypted backups are overwritten on its normal backup cycle, within 30 days. We keep a minimal record of website deletion requests (the email address and date) for up to 12 months to show the request was handled, and we may retain other records only where required to comply with a legal obligation, resolve a dispute, or enforce our agreements.

Children’s Privacy

NoteLogd is not directed to anyone under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that someone under 16 has provided us with personal information, we will delete it.

Your Rights & Choices

You can access, update, or delete your profile information at any time from within the app, and you can delete your account entirely as described under Data Retention above. Depending on where you live, you may also have rights under applicable data protection law — including, for UK and EEA users, the right to access, correct, delete, or restrict our use of your personal data, to receive a copy of it, and to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office). To exercise any of these rights or ask a question, contact us using the details below.

Data Security

All data sent between the app and our servers is encrypted in transit using HTTPS/TLS, and our database provider encrypts stored data at rest. We rely on our infrastructure providers’ technical and organizational safeguards, and apply reasonable measures of our own, to protect your information from unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we can’t guarantee absolute security.

Third-Party Music & Event Data

Album artwork, artist names, and release information shown in NoteLogd are retrieved from the Spotify Web API, and concert listings from the Ticketmaster Discovery API, through our own backend. On iOS, some games use Apple Music. Spotify, Ticketmaster, and Apple operate under their own privacy policies, and NoteLogd is not responsible for their data practices. Links to Spotify, Instagram, or other external sites open outside NoteLogd and are governed by those sites’ policies.

International Data Transfers

Our service providers, including Supabase and Google, may store and process information in countries other than your own. Where this occurs, we rely on those providers’ own safeguards for cross-border data transfers.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. If we make material changes, we’ll notify you within the app or by other reasonable means before they take effect, and we’ll always reflect the current version on this page.