Privacy Policy
Vibrato is a music logging app: you rate, review, and share the music you listen to. This policy explains exactly what we collect, why we collect it, who else sees it, and how to get rid of it. It covers the Vibrato iOS app and vibrato-log.com.
What we collect
Your account
When you create an account we store your email address and display name, plus a user ID that identifies you across the app. You can sign in with Apple, with Google, or with an email address and password. If you use Sign in with Apple and choose to hide your email, we only ever receive Apple's relay address.
What you put in the app
Your logs, ratings, reviews, lists, queue, likes, comments, and profile details. Some of this is public to other Vibrato users by design — that's the point of the app. Your profile visibility setting controls how much.
Connected music services
If you connect Last.fm, Spotify, or Apple Music, we receive your listening history from that service so it can appear in Vibrato. We store the access tokens needed to keep syncing. You can disconnect any service at any time from Settings, which stops future syncing.
Usage and diagnostics
We record how the app is used — screens opened, features used, search terms, and performance timings — plus crash reports when something breaks. Before any analytics event leaves your device it passes through a filter that strips values under keys like email, password, token, review, comment, bio, and message, and redacts anything matching an email address.
Who processes it
| Service | What it handles |
|---|---|
| Google Firebase | Accounts, database, file storage, crash reporting, push notifications |
| PostHog | Product analytics |
| Google AdMob | Advertising, on the free tier only |
| RevenueCat | Subscription status for Curator and Maestro |
| Cloudinary | Image hosting and delivery |
| Last.fm, Spotify, Apple Music | Listening history, only if you connect them |
Music metadata — artists, releases, recordings, cover art — comes from MusicBrainz and the Cover Art Archive. That's catalog data, not personal data, and nothing about you is sent to obtain it.
We do not sell your personal information, and we do not share it with data brokers.
Advertising and tracking
Vibrato's free tier shows a single banner ad. Before any personalized advertising happens, iOS asks for your permission through App Tracking Transparency, and we ask separately for advertising consent. If you decline either, the app keeps working exactly as before and you see non-personalized ads instead. Vibrato's own code never reads your device's advertising identifier. Paid tiers are ad-free.
Why we're allowed to hold it
Where UK and EU data protection law applies, our lawful bases are: contract, for the account and the features you asked for; consent, for personalized advertising and for each music service you connect; and legitimate interests, for keeping the service working, secure, and improving.
How long we keep it
Account and content data is kept while your account exists. Analytics and crash data are retained on a rolling basis by the processors above and are not kept indefinitely in an identifiable form. Deleting your account removes your content as described below.
Your choices
- See or correct your data — most of it is editable in the app; email us for the rest.
- Export it — Curator members can export their library from inside the app. On the free tier, email us and we'll send you your data — a copy of your information is never something you have to pay for.
- Disconnect a music service — Settings, at any time.
- Change advertising consent — Settings, and in iOS Settings → Privacy & Security → Tracking.
- Delete your account and its content — email support@vibrato-log.com and we will erase it. An in-app deletion control is on its way.
Depending on where you live you may also have rights to object to or restrict processing, to portability, and to complain to your local data protection authority.
A note on public content
Reviews, ratings, lists, and activity you share are visible to other users, and to anyone if your profile is public. Deleting your account removes them from Vibrato, but we can't recall anything someone else already screenshotted or shared elsewhere.
Children
Vibrato is not intended for children under 13, and we don't knowingly collect their information. If you believe a child has given us data, email us and we'll delete it.
International transfers
Our processors operate globally, so your information may be processed outside your country, including in the United States, under the safeguards those providers offer.
Changes
If this policy changes materially we'll update the date above and, where it matters, tell you in the app.
Contact
Questions, requests, or complaints: support@vibrato-log.com.