Privacy policy

We collect the data you provide yourself: your email address and password (or social login), username and display name, profile photo, video clips you upload, concert visits you register, upcoming concerts you add, artists you follow and users you follow or who follow you, saved clips and comments you post.

We also collect basic usage data (which screens you visit) to improve the app. We do not collect location data, contacts or microphone audio.

Your data is used to make the app work:

• Create and secure your account
• Show clips and concert data to you and your followers
• Send notifications about comments and new followers
• Fetch music info via Spotify and the iTunes Search API (artist photos, albums, genres)
• Recommend clips based on the genres you pick during onboarding and the artists you upload, like, save and comment on
• Automatically screen uploaded clips and comments for content that breaks our rules, using an AI moderation service
• Show ads between clips and process All Access purchases
• Debug and improve the app based on usage

We do not sell your data. We do show ads: Google AdMob serves the interstitials you see in the feed. If you give permission, your device advertising identifier is used to show you personalised ads and to measure how they perform. On iOS we ask for this permission separately through Apple's App Tracking Transparency prompt; you can change your answer at any time in your device settings, or withdraw your consent from within the app.

We work with the following third parties, who provide the same or equivalent protection as this policy:

• Supabase — database and authentication (accounts, clips, concerts, follows)
• Cloudflare R2 and CDN — storage and delivery of your video clips and thumbnails
• Amazon Web Services — Lambda converts your uploaded video into streaming formats; the video passes through during processing
• Spotify Web API — artist and album data (read-only, no personal Spotify data)
• Apple iTunes Search API — song and genre data (read-only, artist names only)
• Google AdMob — advertising in the feed
• RevenueCat — handling of All Access subscriptions and purchases
• OpenAI — automated moderation of comment text and stills from uploaded clips, to detect content that breaks our rules before it is shown to others

These parties only have access to the data strictly necessary for their service.

Your data is retained for as long as your account is active. When you delete your account, all your personal data — including clips, concerts and profile — will be permanently deleted from our systems within 30 days.

You can request at any time:

• Access to your stored data
• Correction of incorrect data
• Complete deletion of your account and data

All data transfer goes via HTTPS/TLS encryption. Passwords are never stored in plain text. Database access is restricted to authenticated requests via Row-Level Security (Supabase RLS).

You have the right to withdraw your consent and delete your account. You can delete your account directly in the app under Settings, or email support@stagestash.com.

For questions about this privacy policy or requests regarding your data, you can always contact us at the email address above. We respond within 14 days.