Privacy Policy
hymnbio is a music profile for iPhone. This policy explains, in plain words, what information the app and this website use, why, where it is stored, who can see it, how long we keep it and how you can see, change or delete it.
The short version. We do not sell your data. We do not show ads. We do not track you across other companies' apps or websites, and the app does not use Apple's App Tracking Transparency prompt because it has nothing to ask for. What you choose to put on your profile is public; everything else stays private to your account. You can delete your account and everything in it from inside the app, at any time.
1. Who we are
hymnbio (the “app”) and hymn.bio (the “website”) are provided by [Developer legal name], [Postal address, city, country] (“hymnbio”, “we”, “us”). We are the data controller for the personal data described in this policy.
For any privacy question or request, write to [email protected]. We answer within 30 days, usually much sooner.
2. What this policy covers
This policy applies to the hymnbio iPhone app, its public profile pages and this website. It does not apply to Apple services you use alongside hymnbio, such as Apple Music, the iTunes Store or Sign in with Apple, which are governed by Apple's Privacy Policy.
3. Information we use
We only use what the app needs to work. Here is every category, where it comes from and whether others can see it.
Account
- Account identifier. When you start using hymnbio, our server creates a random account ID for you. hymnbio does not ask for a password, a phone number or an email address.
- Sign in with Apple (optional). If you use it, Apple gives the app a user identifier that is unique to hymnbio, and, if you allow it, your first name to fill in your display name. We do not request your email address from Apple.
- Email you send us. If you write to support, we receive your email address and what you write, and use it only to answer you.
Profile you create
- Display name, username (your hymn.bio/@ link), profile photo and banner colour.
- Folders you create and their names.
Music
- Your 20 most played songs. With your permission, the app reads your on-device music library and picks the 20 songs you have played most. For those songs it uploads the song title, artist, album, artwork reference, store identifier and their order so they can appear on your profile. Play counts stay on your device.
- Purchased songs. Songs in your library that were bought on the iTunes Store, with the same details as above, if you choose to show them.
- Now playing (optional). If you turn it on, the song currently playing in the Music app while hymnbio is open, and when it is expected to end. Off means nothing is sent.
- Last played (optional). Your most recently played song and when it was played are sent only if you choose “On my profile”. “Only me” stays on your device, and “Hidden” means nothing is sent.
Memories
- Photos you take inside the app while a song is playing, the filter you chose, the short note you add, the date and the song it is attached to. Memories are uploaded only when you save them.
- hymnbio's camera is built into the app. We do not read the photos already in your photo library. If you save a memory or a share card to Photos, the app only adds that one image.
Safety
- Reports you send (the reported profile or item, the reason you chose and any note) and the people you block.
- That you accepted the Terms of Use.
Technical
- When the app talks to our servers, our hosting provider automatically processes your IP address and basic request details (time, endpoint, app version) to deliver the request, prevent abuse and fix errors. These logs are kept for a short time and are not used to build a profile of you.
- We do not use any third-party analytics, advertising or crash-reporting SDKs.
4. What stays on your iPhone
Your full music library is read on your device to work out your top 20, your purchases and what is playing. Songs in your shared collection and the purchases you choose to show are uploaded; play counts stay on your device. Your listening history beyond the single “last played” song (if you turned it on) is never uploaded. Cached artwork and settings are stored on your device and removed when you delete the app.
5. iPhone permissions
| Permission | Why we ask | If you say no |
|---|---|---|
| Apple Music / Media library | To find your most played songs, your iTunes Store purchases and the song playing now. | Your profile can't show your music automatically. You can still search for songs manually. |
| Camera | To take a memory photo while a song is playing. | You can use everything except taking memories. |
| Photos (add only) | To save a memory or a share card to your photo library when you tap Save. | You can still share directly to other apps. |
You can change these at any time in iPhone Settings › hymnbio. The app asks for each permission only when you first use the feature that needs it.
6. Why we use it
| Purpose | Information | Legal basis (EEA, UK, Turkey) |
|---|---|---|
| Create and run your account and profile | Account, profile, music, memories, folders | Performance of our contract with you (the Terms of Use) |
| Show now playing and last played | Now playing, last played | Your consent, given by turning the feature on. You can withdraw it at any time. |
| Keep the community safe, enforce our rules, review reports, filter objectionable text | Reports, blocks, profile text, memory notes, technical data | Our legitimate interest in a safe service, and our legal obligations |
| Answer support requests | Your email, account details, what you tell us | Performance of contract; legitimate interest |
| Security, abuse prevention, debugging | Technical data | Legitimate interest |
| Comply with the law and respond to valid legal requests | Any data needed for the request | Legal obligation |
We do not use your information for automated decisions that have legal or similarly significant effects on you. Our text filter only blocks words from being published; a person reviews every report.
7. What is public
hymnbio is a public profile, so some things are visible to anyone who opens your link or finds you in the app, including people without an account:
- Your display name, username, profile photo and banner colour.
- Your top 20 songs in order, the purchased songs you chose to show, your folders and the memories you saved to your profile.
- Now playing, if you turned it on, and last played, if you chose “On my profile”.
Anything public can be seen, screenshotted or shared by others, and we can't control copies made outside hymnbio. Think before you post photos of other people or of places that reveal where you live. Blocking someone hides your profile from them inside the app.
8. What we never do
- We never sell or rent personal data, and we do not “share” it for cross-context behavioural advertising as those terms are defined in California law.
- We never show ads and we never give your data to data brokers or advertising networks.
- We never track you across apps and websites owned by other companies, and we do not access your device's advertising identifier (IDFA).
- We never read your contacts, location, messages or the photos already in your library.
- We never use your memories or profile to train artificial intelligence models.
9. Who we share it with
We use a small number of service providers who process data only on our instructions, under written data-processing terms, and only to run hymnbio:
| Provider | What they do | Data involved |
|---|---|---|
| Supabase, Inc. | Database, file storage and sign-in for the app. Servers in the European Union (Frankfurt, Germany). | All account, profile, music, memory, report and block data; technical logs |
| Apple Inc. | Sign in with Apple; iTunes Search API and artwork servers that the app queries to show song details and covers. | Your Apple sign-in; search terms and song identifiers with your IP address when the app requests artwork or song details |
| Email provider | Receiving and replying to support email. | Your email and what you write to us |
We may also disclose information if we are legally required to (for example a valid court order), to protect someone's life or safety, to investigate violations of our Terms, or as part of a merger or sale of hymnbio, in which case this policy will continue to protect your data and we will tell you before anything changes.
10. Apple services
hymnbio is not made by, endorsed by or affiliated with Apple. When you tap a song to listen in Apple Music or the iTunes Store, you leave hymnbio, and Apple's privacy policy applies. Song previews and artwork are streamed from Apple's servers. If you signed in with Apple, you can stop using your Apple ID with hymnbio at any time in iPhone Settings › your name › Sign-In & Security › Sign in with Apple.
11. Reports, blocks and moderation
hymnbio has zero tolerance for objectionable content and abusive users. To keep it that way:
- Names, usernames, folder names and memory notes are checked against a filter before they are published, both in the app and on our server.
- You can report any profile, song, folder or memory from its menu. The reported person is not told who reported them. We review reports within 24 hours and remove content that breaks our Terms, and we may remove the account that posted it.
- You can block any user. Blocking hides their content from you immediately and stops them from seeing yours in the app. Your block list is private.
- To review a report, our moderators look at the reported content and the account it belongs to. Report records are kept as described below so we can act on repeat abuse.
12. How long we keep it
| Data | How long |
|---|---|
| Account, profile, music, folders, memories | Until you delete them or delete your account |
| Now playing | Replaced by each new song and cleared when the song ends or when you turn the feature off |
| Last played | Only the most recent song is kept, replaced each time; cleared when you choose “Hidden” |
| Blocks | Until you unblock or delete your account |
| Reports you send or that concern you | Up to 12 months after the report is closed, longer only if needed for a legal claim or a law-enforcement request |
| Server request logs | Up to 30 days |
| Backups | Overwritten on a rolling basis within 30 days |
| Support emails | Up to 24 months after the conversation ends |
13. Deleting your account
You can delete your account inside the app: tap your name at the top of your profile to open the editor, tap Delete account and confirm. This permanently deletes your profile, username, songs, folders, memories and their photos, profile photo, blocks and settings from our servers and signs you out. To also disconnect your Apple ID, see section 10. Your public link stops working immediately. Copies in our backups disappear within 30 days. Your username may become available to others after deletion.
If you can no longer open the app, email [email protected] with your username, and we will delete it for you after confirming it is yours.
14. Your rights and choices
Wherever you live, you can ask us to:
- Access the personal data we hold about you and get a copy in a portable format.
- Correct anything that is wrong. Most profile details can be edited directly in the app.
- Delete your data (see section 13).
- Restrict or object to processing based on our legitimate interests.
- Withdraw consent for now playing or last played by turning them off, without affecting what happened before.
European Economic Area and United Kingdom (GDPR / UK GDPR). You may also complain to your local data protection authority.
Turkey (KVKK, Law No. 6698). You have the rights in Article 11 of the Law, including learning whether your data is processed, requesting information, learning the purpose, knowing the third parties to whom it is transferred, correction, deletion, objection and compensation. You may also apply to the Personal Data Protection Authority (KVKK).
California and other US states. You have the right to know, delete and correct personal information and to not be discriminated against for using these rights. We do not sell or share personal information and do not use sensitive personal information for purposes that require an opt-out.
To use any right, email [email protected]. We may ask you to confirm you own the account. We respond within 30 days (or the time your local law requires) and do not charge for reasonable requests.
15. Security
Data is encrypted in transit (HTTPS/TLS) and at rest on our provider's servers. Database rules make sure each account can only change its own data, private settings and block lists can only be read by their owner, and reports can be written but not read by users. Access to production data is limited to the people who need it to run and moderate hymnbio. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authorities as the law requires.
16. Where data is stored
Our database and file storage are located in the European Union (Frankfurt, Germany). Some providers, including Apple and Supabase, may access or process data in other countries, including the United States. Where personal data leaves the EEA, UK or Turkey, we rely on safeguards recognised by law, such as the European Commission's Standard Contractual Clauses, and, for Turkey, the transfer mechanisms set out in Article 9 of the KVKK.
17. Children
hymnbio is not directed to children under 13 and you must be at least 13 years old (or the minimum age required in your country, such as 16 in some EEA countries) to create an account. If you are under 18, you need permission from a parent or guardian. We do not knowingly collect data from children under 13. If you believe a child has created an account, email us and we will delete it.
18. This website
hymn.bio does not use cookies, analytics or advertising trackers. Fonts are served by this website. Album artwork and music previews come from Apple; public profile photos and memories come from our storage provider. These providers receive the request details needed to deliver those files. Username availability checks pass through our server to Supabase. Short-lived request counters prevent abuse; checks do not reserve a name or create an account. Public profiles can be indexed by search engines.
19. App Store privacy summary
This table matches the privacy details we give Apple for the App Store listing. None of these data types are used for tracking.
| Data type | Examples | Linked to you | Used for |
|---|---|---|---|
| Contact Info › Name | Display name | Yes | App Functionality |
| User Content › Photos | Memory photos, profile photo | Yes | App Functionality |
| User Content › Other User Content | Folder names, memory notes, reports | Yes | App Functionality |
| Usage Data › Other Usage Data | Shared songs and their order, purchased songs shown, now playing, last played | Yes | App Functionality |
| Identifiers › User ID | Account ID, username | Yes | App Functionality |
| Diagnostics › Other Diagnostic Data | Server request logs | No | App Functionality |
20. Changes to this policy
If we change this policy, we will update the date at the top. If a change is significant, for example a new use of your data, we will tell you in the app before it takes effect and, where the law requires, ask for your consent again.
21. Contact
[Developer legal name]
[Postal address, city, country]
[email protected]