Privacy policy

Last updated: add date before submission

This is a placeholder privacy policy. Replace this entire document with your real privacy policy before submitting to the App Store. Apple will reject the app otherwise. The points below cover the data Bound actually collects so you can use them as a starting point with a lawyer or a generator like Termly / iubenda.

What we collect

• Spotify account info: we receive your display name, email address, profile image, and Spotify user ID when you sign in.
• OAuth tokens: we store your Spotify access and refresh tokens server-side so we can fetch your recently played tracks and playlists. We never share these tokens with third parties.
• Content you create: reviews, ratings, lists, comments, likes, and follows.
• Profile content you set: bio, custom avatar, banner image, favorite songs/albums/artists.
• Settings: notification, privacy, and display preferences.

How we use it

• To run the app: show your reviews, lists, and feed.
• To call the Spotify API on your behalf for music search and listening data.
• To send notifications you've opted into.

Who we share it with

• Spotify: when calling their API on your behalf.
• Vercel (hosting) and Neon (database): as data processors.
• We do not sell your data. We do not run third-party ad trackers.

Your rights

• Delete your account: Settings → Account actions → Delete account. This permanently removes everything described above within seconds.
• Request a copy of your data: contact us at the email below.

Contact

Questions or requests: hello@example.com (replace with your real contact email).