RecsPrivacy Policy
Last updated
Recs works without an account and doesn't track you. Your crate lives on your devices and in your own iCloud. To find a record, Recs looks it up in public music catalogues; this policy explains what it sends and why.
In short
| What | Where it goes | Can the developer see it? |
|---|---|---|
| Your crate and wantlist | Your devices and your private iCloud database | No |
| Barcodes you scan or type, and album searches | Apple Music (with your permission) and MusicBrainz | No |
| Artist and title, to find a cover | Cover Art Archive and Apple's iTunes catalogue | No |
| Camera images | Nowhere: only the barcode number is read, on your device | No |
Who is responsible
Recs is developed by Marco Lüthi, the controller responsible for data processing under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
Marco Lüthi
Gutstrasse 172
8055 Zürich
Switzerland
hi@luthi-mar.co
Your crate, wantlist and settings
The records you add (title, artist, format, barcode, label, release date, genre, tracklist, the catalogue IDs used to look them up, and whether a record is in your crate or on your wantlist, with the dates) are stored in the app on your device. If you are signed in to iCloud, they sync between your devices through the app's private iCloud database (Apple CloudKit). That database belongs to your Apple Account: the developer has no access to it. Without iCloud, the crate stays on the device.
Covers are downloaded once and saved in the app's storage on each device, so the crate works offline. Your settings (for example whether sound effects are on, and your sort order) are stored on the device. Your data may also be included in your device backups, depending on your own backup settings.
Removing a record from your crate removes it on all your devices. Deleting the app deletes the data on that device; to delete the synced copy too, remove Recs' data in the iOS Settings app under your Apple Account, iCloud, Manage Storage.
Camera
With your permission, Recs uses the camera to read the barcode on a record, CD or cassette. The barcode is recognised on your device by Apple's VisionKit. No photos or video are recorded, stored or sent; only the barcode number is used. You can type the digits instead, and change the camera permission at any time in the iOS Settings app.
Finding a record
To identify a release and show its tracklist and cover, Recs sends requests directly from your device to:
- Apple Music (if you allow Apple Music access): the barcode you scan or type, the searches you type, and the artist, album and track titles used to match the songs. Apple processes this under its privacy policy.
- MusicBrainz, the open music encyclopedia run by the MetaBrainz Foundation: the barcode, and the release ID to fetch the tracklist. See the MetaBrainz privacy policy.
- Cover Art Archive (MetaBrainz Foundation with the Internet Archive): the release ID, to download its cover.
- Apple's iTunes Search, when no other cover is found: the artist and album title and your device's region.
These requests are sent without an account or any identifier of yours, but like any internet request they reveal your device's IP address to the service. Recs does not send your crate, your wantlist or anything else about you.
Playing music
Albums play through Apple Music: with a subscription in full, otherwise as 30-second previews. Recs asks for Apple Music access to do this and to check whether you have a subscription. Your listening happens in Apple Music under Apple's terms and privacy policy; Recs does not record what you play.
Legal basis
Where the GDPR applies, the processing described above is necessary to provide the features you use (Art. 6(1)(b) GDPR). Camera and Apple Music access are based on your choice to allow them, which you can withdraw at any time in the iOS Settings app. Under the Swiss FADP, we process personal data only as described here and in line with its principles.
What Recs does not do
- No account, sign-up or login.
- No advertising, analytics, crash-reporting or tracking SDKs.
- No tracking across apps or websites, and no selling or sharing of data with data brokers.
This website
This website is a static site without cookies, analytics or tracking. Fonts are served from this website itself, so your browser does not contact third-party font services. When you visit a page, the hosting provider Vercel Inc. (based in the United States, with data centres worldwide) automatically records technical access data in server logs: your IP address, date and time, the requested page, referrer and browser type. This is needed to deliver the site and keep it secure (legitimate interest, Art. 6(1)(f) GDPR). The logs are deleted after a short period. Links to the App Store take you to Apple, where Apple's privacy policy applies.
Your rights
You have the right to request access to your personal data and to have it corrected or deleted, to object to or restrict processing, and to data portability. Because the apps store your data on your device and do not identify you, the developer usually holds no personal data about you. Most of it you can delete yourself by deleting the app.
To exercise your rights, email hi@luthi-mar.co. You can also lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the data protection authority of your country.
International transfers
Apple may process data in the United States and other countries. Apple describes the safeguards it uses for these transfers, such as the Data Privacy Framework and standard contractual clauses, in its privacy policy. This website is hosted by Vercel Inc., based in the United States; its server logs are transferred under the same kind of safeguards.
Children
Recs is not directed at children and does not knowingly collect data from them.
Changes to this policy
If the app starts handling data differently, this page will be updated before the change ships, and the date at the top will change.