Privacy Policy
Effective Date: 30 October 2026
This Privacy Policy covers the Recordfy app and website. It says what we collect, why, who helps us, and what you can do about it. We keep it short and plain because nobody needs legal fog while digging for records.
The Terms are on their own page.
1. Who Is Responsible
OBRHOFF Software Labs GmbH, Alfredstr. 16, 10365 Berlin, Germany. Contact: hi@recordfy.com. More about us is in the Imprint.
2. What We Collect
2.1 Your account:
You can sign in with Apple, with an email link, or use the app without an account. We store an account ID and, if you gave one, your email address (Apple may give us a private relay address instead). Sign-in runs on Google Firebase Authentication.
2.2 What you do in the app:
Your watchlist, collection and followed record stores, the records you like or skip in Discover, the records you open, play or share, your country and currency, and the genres you pick. If you import a Discogs CSV file, we read the records in it and add them to your lists. We use all of this to run the app and to build your picks.
2.3 Music services you connect:
If you connect Apple Music or Spotify, we read your saved albums and recent plays to shape your picks. We only read, we never change anything. You can disconnect in Settings.
2.4 Identify:
If you use Identify, the app listens through the microphone while you use it, and Apple (ShazamKit) matches the sound. We only receive the details of the match, such as the title and the artist, so we can show you the record. We never receive the audio.
2.5 Notifications:
If you turn on notifications, we store your push token, a device ID, your language, country, app version, operating system version and platform so we can send them. Push messages are delivered through Apple and Google. We keep the history of sent notifications for 90 days.
2.6 Recordfy Premium:
Purchases go through the App Store. We use RevenueCat to manage your subscription. It receives your account ID and your purchase status. We never see your payment details.
2.7 Usage analytics (only if you allow it):
Analytics are off until you allow them in the app, and you can change that any time under Data collection in Settings. If you allow them, Google Firebase Analytics records which screens you open and what you tap, for example the price range of an offer you open or the length of a search. It never records the words you type. Along with the events, we send a few settings: your country and currency, whether you subscribe, whether you connected a music service and the size of your lists as a range. Google also receives your IP address and basic device and app information. The data is linked to your account ID and to identifiers Firebase sets for your installation. We use it to improve the app, never for advertising. The app does not ask for tracking permission and does not read your advertising ID.
2.8 Crash reports:
We do not collect crash reports ourselves. If you share diagnostics with app developers on your device, Apple may pass crash reports to us through App Store Connect.
2.9 Links to other sites:
Offers link to the website of the record store, where its own privacy policy applies. Some of these links are affiliate links, and we may earn a commission if you buy through them. Links to social networks and downloads lead to third-party sites with their own policies.
2.10 The website and our servers:
The website sets no cookies and has no analytics. Our hosting provider may process technical connection data such as your IP address to deliver the pages. Our servers use your IP address in memory to limit abuse, and we do not write it to our logs.
3. Why We Use It
- To run your account and the features you use, including picks, your lists and the music services you connect or the files you import. This is needed to provide the app (Art. 6(1)(b) GDPR).
- For analytics and notifications. We only do this if you agree, and you can withdraw your consent at any time (Art. 6(1)(a) GDPR).
- To keep the service secure and fix errors. This is our legitimate interest (Art. 6(1)(f) GDPR).
4. Who Else Gets It
We do not sell your data. Service providers process it for us: Google (Firebase Authentication, Firebase Analytics and push delivery), Apple (sign in, push delivery, ShazamKit and the App Store), RevenueCat (subscriptions) and our hosting providers. Apple Music or Spotify only receive requests when you connect them. We also share data when the law requires it.
5. Transfers Outside the EU
Some providers process data outside the EU and the EEA, for example in the United States. Where they do, we rely on the safeguards they offer, such as standard contractual clauses.
6. How Long We Keep It
We keep your account data until you delete your account. You can delete it in the app under Settings. That removes your data from our database and your sign-in from Firebase, and we ask RevenueCat and Google Analytics to delete the data they hold about you. Google runs these requests on its own schedule, which can take up to two months. Purchase records at Apple stay under Apple's own rules. Notification history is removed after 90 days. Backups are not edited, so deleted data leaves them when they are replaced.
7. Your Rights
You can ask us for access to your data, to correct it, to delete it, to restrict how we use it, to hand it over in a common format, and you can object to processing based on our legitimate interest. You can withdraw consent at any time, for example by turning off Data collection or Notifications in Settings. Write to hi@recordfy.com. You can also complain to a data protection authority, for example the one in Berlin, where we are based.
8. Data Security
Connections to our servers use HTTPS. We take reasonable steps to protect your data, but no system is perfect.
9. Children's Privacy
Recordfy is not meant for children under 16. If you believe we have collected something about a child, please contact us at hi@recordfy.com.
10. Changes to this Privacy Policy
We may update this policy from time to time. The latest version always applies once posted.
11. Contact Us
Questions or concerns? Write us at hi@recordfy.com.