Privacy Policy
Last updated: February 15, 2025
NowSpinning ("we", "our", or "the app") is a vinyl record collection companion app created by Michael Place. We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights.
1. Data We Collect
Account Information
When you sign in, we collect your phone number for authentication via Firebase Authentication. We also store your Discogs username and OAuth tokens to sync your collection.
Collection Data
We sync your Discogs collection and wantlist data to provide the app's core features. This includes release titles, artists, labels, genres, and album artwork URLs. This data originates from Discogs and is cached locally on your device and in our cloud database.
Spin History
When you log a spin, we record which release you played and when. This data is used to generate your listening insights, contribution calendar, and achievements.
Location Data (Optional)
If you opt in to Community features, we collect your approximate location (geohashed to ~150 meters of precision) to show your spin on the community map. Location sharing is off by default and always opt-in. Community spins are automatically deleted after 24 hours.
Audio Data
When you use audio recognition, audio is processed in real-time on-device via ShazamKit. We do not store or transmit audio recordings. The audio visualizer processes microphone input locally and does not record or transmit any data.
Photos (Optional)
If you use the vinyl photo feature to capture custom record images, photos are stored locally on your device and optionally synced to your private cloud storage. Photos are never shared publicly.
2. How We Use Your Data
- To sync and display your Discogs collection and wantlist
- To track your listening history and generate personal insights
- To provide AI-powered music recommendations
- To show community spins on the map (only if you opt in)
- To evaluate and unlock achievements
- To improve the app's stability via crash reports
3. Data Storage & Security
Your data is stored securely using Firebase (Google Cloud Platform) with the following protections:
- All data is encrypted in transit (TLS) and at rest
- Firestore security rules ensure users can only access their own data
- Authentication tokens are stored in your device's secure keychain
- We do not sell, rent, or share your personal data with third parties
4. Third-Party Services
NowSpinning uses the following third-party services:
- Firebase (Google) — Authentication, database, cloud storage, analytics, and crash reporting
- Discogs API — Collection and release data
- ShazamKit (Apple) — On-device audio recognition
- Last.fm API — Music metadata enrichment (artist tags, similar artists)
- Anthropic Claude — AI-powered recommendations (no personal data is sent; only anonymized collection metadata)
Each of these services has their own privacy policy. We encourage you to review them.
5. Data Retention
- Community spins: Automatically deleted after 24 hours
- Spin history: Retained as long as your account exists
- Collection data: Cached locally; refreshed from Discogs on sync
- Account data: Retained until you delete your account
6. Your Rights
You can:
- Disable location sharing at any time in app settings
- Delete your spin history from within the app
- Delete your account and all associated data by contacting us
- Revoke Discogs access from your Discogs account settings
- Request a copy of your data by contacting us at the email below
7. Children's Privacy
NowSpinning is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us.
8. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the app after changes constitutes acceptance of the updated policy.
9. Contact
If you have questions about this privacy policy or your data, contact us at:
Email: support@nowspinningapp.com