Privacy Policy

This Privacy Policy describes how ProducerTrackr ("we", "us", "our", or "the app") collects, uses, and discloses information when you use our mobile application and related services (collectively, the "Service").

By using the Service you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information

We collect the following personal information when you create an account and use the Service:

• Email address — collected via Sign in with Apple (which may provide a private relay email address if you choose) or other authentication providers.
• First name and last name — provided one-time via Sign in with Apple at first sign-in, or entered manually in your profile.
• Other — display name, follow / favorite preferences, notification settings, and other profile fields you choose to provide.

1.2 Information from Your Device

With your explicit permission, we may access:

• Camera and Photos — when you choose to upload a profile photo. We do not access your camera or photo library without an explicit action on your part, and we do not collect images you have not actively selected or captured for the Service.

We do not access your device's location, contacts, microphone, or health data.

1.3 Usage Data

We collect anonymous usage data to improve the Service, including:

• App screen views and feature interactions
• Producers you follow and tracks you play
• Aggregated session length and crash reports
• Device type, operating system version, and app version

1.4 Payment Information

All payments for subscriptions are processed by Apple In-App Purchase. We do not collect, store, or process your credit card, banking, or other payment details. Apple provides us only with the information necessary to fulfill your subscription (transaction status, product purchased, renewal status). For information on how Apple handles payment data, please review Apple's privacy policy at https://www.apple.com/legal/privacy/.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate you and secure your account
• Sync your followed producers and preferences across devices
• Deliver push notifications you have opted in to (e.g., new releases from producers you follow)
• Send transactional emails (account confirmations, password resets, important Service updates)
• Process and manage your subscriptions
• Personalize content and recommendations
• Analyze usage patterns to improve the Service
• Show relevant advertising (see Section 4)
• Comply with legal obligations and enforce our Terms of Service

3. How We Share Your Information

We do not sell your personal information. We share information only in the following limited circumstances:

• Service providers — third parties that operate the infrastructure powering the Service (see Section 4 for the full list)
• Legal requirements — when required by applicable law, subpoena, court order, or other valid legal process
• Protection of rights — when we believe disclosure is necessary to protect our rights, your safety, or the safety of others
• Business transfers — if ProducerTrackr is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction (subject to this Policy)

4. Third-Party Services

The Service uses the following third-party providers. Each provider's own privacy policy governs how they handle your information.

4.1 Infrastructure & Authentication

• Apple — Sign in with Apple, In-App Purchase, Push Notification Service. https://www.apple.com/legal/privacy/
• Supabase — backend database, authentication, file storage. https://supabase.com/privacy

4.2 Email Communications

• Mailchimp — transactional and marketing email delivery. https://www.intuit.com/privacy/statement/

4.3 Analytics & Tracking

• Google Analytics — anonymous usage analytics. You can opt out via the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout. Privacy: https://policies.google.com/privacy

4.4 Advertising

• Google Ads (AdSense) — display advertising on Service surfaces that show ads. Personalize ad settings at https://adssettings.google.com.
• Google Ads (AdWords) — remarketing services to show you relevant ads on other websites and apps after you have used the Service. Privacy: https://policies.google.com/privacy.

You may opt out of personalized advertising through your device's privacy settings (iOS: Settings → Privacy & Security → Apple Advertising → Personalized Ads) or via the Google Ads opt-out linked above.

5. Your Rights & Choices

5.1 General

You can:

• Update your profile information directly in the app
• Disable push notifications in iOS Settings or in the app's Notifications settings
• Unfollow producers at any time
• Delete your account in the app: Settings → Delete Account

5.2 California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights with respect to your personal information:

• Right to know — what personal information we collect, where it came from, why we collected it, who we share it with, and what categories we disclosed to third parties
• Right to delete — request deletion of personal information we hold about you
• Right to correct — request correction of inaccurate personal information
• Right to opt out of sale or sharing — direct us not to sell or share your personal information. We do not sell your personal information in the conventional sense, but advertising-related sharing through Google Ads may be classified as "sharing" under CPRA. You can opt out via the Google opt-out link in Section 4.4 or by contacting us
• Right to limit use of sensitive personal information — restrict the use of sensitive personal information to that necessary to perform the Service
• Right to non-discrimination — exercising these rights does not affect the price, quality, or level of Service you receive

To exercise any of these rights, contact us at support@producertrackr.com. We may verify your identity before fulfilling the request.

5.3 European Privacy Rights (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) grants you the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate personal data
• Right to erasure ("right to be forgotten") — request deletion of your personal data
• Right to restrict processing — request a temporary halt to processing of your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests, including for direct marketing
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time
• Right to lodge a complaint — with your local data protection authority

Legal bases for processing under GDPR Art. 6:

• Contract performance — providing the Service you signed up for
• Legitimate interests — analytics, security, fraud prevention
• Consent — push notifications, marketing emails, advertising personalization (revocable at any time)
• Legal obligation — tax, accounting, regulatory compliance

To exercise any of these rights, contact us at support@producertrackr.com.

5.4 California Online Privacy Protection Act (CalOPPA)

CalOPPA requires commercial websites and online services to post a conspicuous privacy policy. This policy is provided in compliance with CalOPPA. We honor "Do Not Track" browser signals where technically feasible, though no current industry standard governs how online services should respond to these signals.

5.5 Children's Privacy (COPPA)

In compliance with the Children's Online Privacy Protection Act (COPPA), if you are a parent or guardian and learn that your child under 13 has provided us with personal information without verifiable parental consent, please contact us immediately at support@producertrackr.com. We will take steps to remove that information from our systems and terminate the child's account.

We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we discover that we have collected such information without consent, we will delete it promptly.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These include:

• HTTPS / TLS encryption for data in transit
• Encryption at rest for sensitive data (handled by Supabase)
• Row-Level Security policies on user-scoped database tables
• Access controls and audit logging on administrative interfaces
• Token-based authentication via Sign in with Apple

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but we will notify you in accordance with applicable law in the event of a data breach affecting your personal information.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. After account deletion:

• Account data (email, name, photo, follows) is deleted within 30 days
• Anonymized usage analytics may be retained indefinitely
• Records we are legally required to retain (e.g., tax records for paid subscriptions) are retained for the period required by applicable law

8. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the U.S., your information may be transferred to, stored, and processed in the U.S. or other countries where our service providers maintain facilities. By using the Service you consent to these transfers. For users in the European Economic Area, transfers are made pursuant to Standard Contractual Clauses or other lawful transfer mechanisms.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this Policy
• Notify you within the app or by email at least 14 days before the changes take effect

Your continued use of the Service after the effective date of an updated Policy constitutes acceptance of the changes.

10. Third-Party Links

The Service may contain links to third-party websites and services (e.g., Apple Music, Spotify, streaming services). This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party service you visit.

11. Contact Us

If you have any questions about this Privacy Policy, want to exercise your rights, or want to file a complaint, contact us at:

Email: support@producertrackr.com

We will respond within 30 days (or the period required by applicable law in your jurisdiction).