Privacy Policy

Last updated: August 2026

This Privacy Policy explains how Reprised ("we", "us") collects, uses, and protects your information when you use the Reprised application and website (the "Service").

1. Information we collect

Account information — your email address, username, display name, and optional profile details you provide.
Activity — the music you log, ratings, reviews, lists, favourites, follows, and similar in-app actions.
Device & usage data — basic technical information such as device type, app version, and interactions, used to operate and improve the Service.
Payment information — handled by our payment providers. Purchases through the Apple App Store are processed by Apple; web purchases are processed by our third-party payment provider. We do not store your full card details; we receive limited information such as subscription status and country.

2. How we use it

To provide and personalize the Service (your diary, recommendations, social features).
To process subscriptions and provide support.
To maintain security, prevent abuse, and comply with legal obligations.
To communicate with you about your account and important updates.

3. Marketing emails

Separately from the account and service messages described above, you can choose to receive our newsletter. It is optional, off by default, and never required to use the Service.

What it contains — music recommendations, artist features, product news, and offers. Some artist features and offers are paid placements funded by labels, artists, or their representatives. Every paid placement is clearly labelled as sponsored inside the email.
How we obtain consent — only when you actively tick the newsletter box while creating an account, or turn it on later in Settings. The box is never pre-ticked, and we never add you without that action.
How to stop — switch off "Newsletter and offers" in Settings, or use the unsubscribe link in any newsletter. Withdrawing consent is as easy as giving it.
Who delivers it — we use Resend as our email provider. Your address is shared with them solely to deliver these messages. We do not sell or rent your email address, and advertisers never receive your personal data: sponsors buy placement in the newsletter, not access to you.

Turning the newsletter off does not affect essential account email such as password resets and security notices.

4. How we share it

We do not sell your personal information. We share data only with service providers that help us run the Service, under appropriate safeguards, including:

Supabase — database, authentication, and hosting.
Resend — delivery of account email (such as password resets) and, if you opt in, the newsletter.
Apple — processing and management of subscriptions purchased through the App Store.
RevenueCat — subscription status and entitlement management.
Lemon Squeezy — merchant of record for subscriptions purchased on the web.
Cloudflare — bot protection (Turnstile) on the sign-up and sign-in forms. Cloudflare receives your IP address and basic device signals in order to tell people apart from automated traffic.
Anthropic — generation of the AI-written background material described in our Data Sources & Acknowledgements, and automated screening of uploaded profile images for content that breaches our Terms. Screening sends the image only, and it is not used to train models.
images.weserv.nl — an image-resizing proxy used to deliver avatars and artwork efficiently. It receives your IP address and the address of the image being loaded.
Google — YouTube, for the videos embedded on album and artist pages, and Google Fonts for typefaces. Both receive your IP address when that content loads; YouTube's handling of it is governed by the Google Privacy Policy.
Vercel — hosting and delivery of the web app, including standard server logs.
Providers of music metadata, artwork, and content used to display information in the app — see our Data Sources & Acknowledgements.

We may also disclose information where required by law or to protect rights and safety. Public content you choose to post (such as reviews and lists) may be visible to other users.

5. Cookies & local storage

We use local storage and similar technologies to keep you signed in, remember preferences, and cache content for performance. These are essential to the Service's functionality.

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. You can delete your account at any time, after which we delete or anonymize your personal data, except where retention is required by law.

7. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights in the app or by contacting us. We will respond as required by applicable law.

8. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

10. International transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for such transfers.

11. Changes

We may update this Policy from time to time. Material changes will be notified in-app or by email, and the "Last updated" date above will change.

12. Contact

Questions or requests: support@reprised.app.