Privacy Policy

1. Information we collect

We collect only what we need to run the service:

• Account information — your email address and password (passwords are stored hashed by our authentication provider; we never see them).
• Profile information — display name, instruments, timezone, default currency, and an optional avatar image you upload.
• Content you create — bands, members, availability, calendar events, chat messages, uploaded files, saved locations, and shared expense/income records.
• Notification data — if you enable push notifications, a browser-issued subscription token for your device.
• Technical data — basic information your browser sends (such as IP address and user-agent), used for security and to keep you signed in.

2. How we use your information

• To provide and operate baseclef and the features you use.
• To authenticate you and keep your account secure.
• To send service communications (e.g. account confirmation, password resets) and, if enabled, push notifications about your bands.
• To prevent abuse, fraud and spam (including bot-protection on sign-up).

We do not sell your personal information, and we do not use it for advertising.

3. Service providers

We rely on a small number of trusted providers who process data on our behalf:

• Supabase — database, authentication and file storage.
• Vercel — application hosting and delivery.
• Cloudflare — DNS, security and bot-protection (Turnstile) on sign-up.
• Photon (Komoot) — address autocomplete; when you type a location, that text is sent to their geocoding service to return suggestions.

These providers may process data outside your country. We only share what is necessary for them to perform their function.

4. Cookies

We use essential cookies only — they keep you signed in and secure your session. We do not use advertising or third-party tracking cookies. Because these cookies are strictly necessary to provide the service, no consent banner is required, but you can clear cookies in your browser at any time (you will be signed out).

5. Sharing within a band

baseclef is collaborative. Information you add to a band — your name, instruments, availability, messages, files and shared finances — is visible to the other members of that band. Only people with access to a band can see its contents.

6. Data retention

We keep your information for as long as your account is active. If you delete content, leave a band, or delete your account, the associated data is removed or disassociated. Some records may persist briefly in backups before being overwritten.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. You can edit your profile and delete most content directly in the app. For anything else, contact us at the address below and we will help.

8. Security

We protect your data with encryption in transit (HTTPS), row-level access controls so members can only see their own bands, strict content-security policies, and bot-protection on sign-up. No system is perfectly secure, but we work to keep your information safe.

9. Children

baseclef is not intended for children under 16. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above, and where appropriate we'll notify you in the app.

11. Contact

Questions or requests? Email us at hello@baseclef.app.