Privacy Policy

1. Information We Collect

Account and Profile

• Name, email address, and phone number you provide during signup.
• Profile photo, if you upload one.
• Authentication identifiers (such as a verified email address, verified phone number, and Firebase user ID).
• Push notification device token, if you enable notifications.

Subscriptions and Purchases

If you subscribe to BandHQ Pro, we receive and store subscription status from Apple or Google Play (depending on where you subscribed) and our subscription provider (RevenueCat), such as product identifier, whether you are in a trial, and renewal or expiration dates. We do not receive your full payment card number; the app store processes payment.

Band and Collaboration Data

When you create or join a band, we store and sync data you and other band members add, which may include:

• Band profile (name, genre, logo, invite code, business identifiers such as EIN, home address).
• Roster and member profiles (roles, instruments, pay settings, avatars).
• Gigs (dates, times, venues, status, travel and lodging details, notes, attachments).
• Guest list requests (guest names and related details).
• Messages on gigs and band bulletins.
• Band documents and gig attachments (contracts, riders, W-9s, tech packs, photos).
• Venues (addresses, contacts, capacity, photos, production notes, Wi‑Fi credentials).
• Supply requests, member availability blackouts, and band reminders.
• Venue ratings you submit after gigs.
• Financial and payroll information entered by band leaders (visible according to role).

Device Permissions

Only when you use related features:

• Contacts: if you choose "Add from contacts" to invite members, we read the name, email, and phone from contacts you select. We do not upload your full address book.
• Camera and photo library: if you choose to take or select photos for avatars, logos, documents, or attachments.

Technical and Diagnostic Data

• Device type, operating system version, and app version.
• Sync and error diagnostic logs (including error context and band ID) stored in our cloud backend to help us fix problems.
• Crash and stability data through Google Firebase Crashlytics, including crash reports, non-fatal error reports, and your app user ID (a UUID, not your name or phone number) to help us diagnose and fix bugs.
• Product usage analytics through Google Firebase Analytics, including which app screens and features you use (for example tabs opened, setlists viewed, gigs saved), your subscription tier, and band role segment — not the content of your gigs, messages, or documents.
• Locally on your device: preferences such as terms acceptance time, session selections, and a short diagnostic buffer that may be included when you send feedback (personal gig reminders you set are stored on your device and are not synced to the cloud).

Location

BandHQ does not collect GPS or continuous location from your device. We geocode and route between addresses you enter (for example venue, lodging, or departure addresses) using Apple MapKit to estimate travel distance and time, and we may use coordinates derived from those addresses to show weather forecasts via Apple WeatherKit.

2. How We Use Information

We use information to:

• Provide, operate, and improve the Service.
• Understand which features are used so we can prioritize product improvements (via aggregated Firebase Analytics).
• Authenticate you and sync band data across members' devices.
• Send push notifications about gigs, roster changes, messages, reminders, and related band activity.
• Generate travel estimates and weather displays for gigs.
• Process text or documents you choose to import with AI-assisted parsing (subject to rate limits and fair-use controls described in our Terms).
• Protect security, prevent abuse, and comply with law.
• Respond to support requests.

3. How We Share Information

We do not sell your personal information.

We share information:

• With other members of your band, for band-scoped features (for example roster, gig details, messages, and documents you upload to the band).
• With service providers that help us run the Service, including Google Firebase (authentication, cloud database, file storage, cloud functions, push messaging infrastructure, Crashlytics crash and error reporting, and Analytics usage measurement), RevenueCat (subscription purchase validation and entitlement status), Apple (In-App Purchase processing, push notification delivery, maps, geocoding, and weather), and Google Play (in-app billing when you subscribe on Android), under contractual and technical safeguards.
• When required by law, legal process, or to protect rights, safety, and security.
• In connection with a merger, acquisition, or sale of assets, with notice where required by law.

Information you add about third parties (guest names, venue contacts, etc.) may be visible to your band members. Do not add others' personal information unless you have permission.

4. Data Storage and Security

Data is stored on your device and on servers operated by our providers (primarily Google Cloud / Firebase in the United States). We use industry-standard measures to protect data. No method of transmission or storage is completely secure.

5. Data Retention

We retain information as long as your account is active and as needed to provide the Service, resolve disputes, enforce our terms, and comply with legal obligations. When you delete your account, we delete or anonymize your personal profile data and remove you from future rosters, subject to retained band history as described in the app.

6. Your Choices and Rights

• Update profile information in the app.
• Manage push notifications in your device settings.
• Manage or cancel BandHQ Pro through your App Store or Google Play subscription settings.
• Leave a band or delete bands you own from the app.
• Download a copy of your data: More → Download my data.
• Delete your account: More → Delete account (band owners must transfer ownership first).

Depending on where you live, you may have additional rights to access, correct, delete, or export personal information. Contact us to exercise those rights; we may need to verify your identity.

7. Children

BandHQ is not directed to children under 13, and we do not knowingly collect personal information from children under 13. You must be 18 or older to use the Service.

8. International Users

If you use BandHQ from outside the United States, your information may be transferred to and processed in the United States and other countries where we or our providers operate, which may have different data protection laws.

9. California Residents

California residents may have rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, and the right to opt out of sale or sharing. We do not sell personal information. To make a request, use the in-app data export or account deletion tools, or contact us.

10. Changes

We may update this Privacy Policy. We will post the updated policy with a new "Last updated" date. Material changes may also be communicated through the app where appropriate.

11. Contact

For privacy questions or requests, contact us at support@bandhqapp.com.