BeatRate

Privacy Policy

Last updated: September 29, 2026

This policy explains what personal data the BeatRate iOS app ("BeatRate", "we") processes, why, on what legal basis, and what rights you have.

Data controller

Tomasz Wojtyniak, ul. Świętego Wawrzyńca 15a/108, 60-539 Poznań, Poland. Email: wojtyniaktomek@gmail.com.

Data we process, why, and on what basis

Account data (only if you sign in). If you choose Sign in with Apple, we receive a unique user identifier and, if you choose to share them, your name and email address. Apple lets you hide your real email behind a private relay address. Purpose: creating and running your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Your ratings and favorites. When you are signed in, the albums you rate, your scores, rating times, and your favorite albums are stored with your account so they sync across devices. Your ratings are also combined with other users' ratings into anonymous average scores for each album. Purpose: providing the app's core features. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Music service preferences. We store which music player you prefer (Apple Music or Spotify), whether you have an Apple Music subscription, and, if you connect Spotify, whether your Spotify account is Premium. If you connect Spotify, the sign-in token stays on your device and is used only to look up and open albums in Spotify. Purpose: opening music in the service you use. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Apple Music access. If you grant access, BeatRate uses Apple's MusicKit to search the catalog and open music. Your Apple Music library and listening history are not sent to us.

Usage analytics (only with your consent). If you allow it, we use Google Firebase Analytics to see how the app is used, for example which screens are opened and which features are used. This includes a random app instance identifier and your approximate location (such as country or city) derived from your IP address; your precise location is never collected. If you are signed in, analytics are linked to your account identifier. We never use analytics for advertising, and ad-related data collection is disabled. Nothing is collected until you agree. You can withdraw consent at any time in the app under Settings → Privacy. This stops collection and resets the analytics identifier on your device. Legal basis: your consent (Art. 6(1)(a) GDPR).

Crash reports. We use Firebase Crashlytics to collect crash logs and technical diagnostics (device model, iOS version, app version, an installation identifier, and the error that occurred). If you are signed in, crash reports are linked to your account identifier. Purpose: finding and fixing bugs. Legal basis: our legitimate interest in keeping the app working (Art. 6(1)(f) GDPR).

Is providing data required?

No. You can use BeatRate as a guest without an account and without giving us any personal data. An account is only needed to save ratings and favorites.

Who receives your data

We do not sell your data, show ads, or track you across other companies' apps or websites.

Transfers outside the EU

The database with your ratings, favorites, and preferences is hosted in the European Union (Belgium). Firebase Authentication, Analytics, and Crashlytics may process data in the United States. These transfers are based on the EU-U.S. Data Privacy Framework, under which Google is certified, and on the European Commission's Standard Contractual Clauses.

How long we keep it

We keep your account data, ratings, favorites, and preferences until you delete your account. Analytics and crash data are kept according to Firebase's standard retention periods (analytics: up to 14 months; crash reports: 90 days).

Deleting your account

You can delete your account at any time in the app under Settings → Delete Account. This permanently deletes your account, ratings, favorites, and profile. You can also ask for deletion by email.

Your rights

You have the right to access your personal data, to have it corrected or deleted, to data portability, to restrict processing, and to object to processing based on our legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting what was processed before. You also have the right to lodge a complaint with a data protection authority. In Poland this is the President of the Personal Data Protection Office (UODO); elsewhere, the authority in your country. To use any of these rights, email us.

Automated decisions

We do not make automated decisions about you or profile you in a way that has legal or similarly significant effects.

This website

This website does not use cookies or analytics. If you click "Want it on Android?", an anonymous notification is sent through ntfy.sh telling us that someone is interested. No name, email, or other personal data is included.

Children

BeatRate is intended for people aged 16 and over. We do not knowingly collect data from children under 16.

Changes

If we change this policy, we will update the date at the top of this page. Significant changes will also be announced in the app.