Privacy Policy

Overview

RetroRecord is a product of Maple Linens Inc. ("we", "us"). It is a free vinyl-style music player and songbook. The app works with the RetroRecord server at retrorecord.ca. This policy explains what we collect, why, who can see it, and the choices you have.

What we collect

• Account: your name, email address, account role, approval status and sign-up date. Your password is stored only as a secure hash (Argon2id). We never see or keep it in plain text.
• Sign-up details: your mobile number and country, your iPhone's model and iOS version, the IP address you signed up from and, only if you allow it, your precise location when you signed up. The administrator uses these to verify new accounts before approving them.
• Profile photo, if you add one.
• Content you add: song details, lyrics, record photos, audio files you upload, reports you send, and the members whose songs you hide.
• Favorites.
• Security and error records: the IP address, time and action of sign-ins and changes, and error reports that include the app version, device model and what went wrong. These keep the service safe and working.

Who can see what

• Audio you upload is private to you: it plays only for you, on your own account, and is never streamed, shared or offered to other members. The administrator can access it to moderate the service and to answer a rights holder's complaint.
• Song details, lyrics and record photos you add are visible to all signed-in RetroRecord members.
• Your profile photo is visible only to you.
• The administrator can see members' names, email addresses, approval status, sign-up details and reports. Other members see only the initials of whoever added a song.

On your iPhone

• If you choose "Keep me signed in", a session token is stored in the iOS Keychain. Sessions expire after 30 days.
• If you turn on Face ID login, your email and password are stored in the Keychain and unlocked only by Face ID. Face ID itself is handled by iOS; we never receive face data.
• Songs from your iPhone's Music library play on the device and are never uploaded.
• Photos and videos are read only when you pick them. A video you pick is converted to audio and uploaded only when you choose to add it.
• Lyric auto-sync, if you use it, uses Apple's speech recognition on the song's audio.
• Copies of the songbook, lyrics and pictures are cached on the device so the app works offline.

Service providers

RetroRecord runs on servers rented from IONOS and is delivered through Cloudflare, which also protects it from attacks. If the administrator turns on licensed lyrics, a song's title and singer (never your personal information) are sent to Musixmatch to look up its lyrics. API keys the administrator saves are encrypted with AES-256-GCM.

What we don't do

We don't sell your data, show ads, track you across apps or websites, or use third-party analytics. We don't access your contacts or microphone, and we ask for your location only once, when you sign up (you can say no).

The assistant

The assistant answers using what's playing, your favorites and recent searches. It runs on your device and does not record conversations.

Keeping and deleting your data

You can edit or delete the songs, lyrics, photos and recordings you added at any time. To delete your account, go to Profile › Delete Account. This removes your account, the songs you added, and their audio, lyrics and photos from the server. Recordings you upload are deleted with them; we keep no copy afterwards. Error reports are kept for up to 90 days. Security records of sign-ins and changes may be kept longer where needed to protect the service or meet legal obligations.

Children

RetroRecord is not directed to children under 13, and we do not knowingly collect their information.

Changes & contact

If this policy changes, we will update the effective date shown here. Questions or requests: [email protected], or visit retrorecord.ca/support.