Bandwise privacy policy

Contact and scope

Erik Ring (sole trader) is the data controller for Bandwise. Contact: erikring@icloud.com. Bands, venues and concert organisers may be independently responsible for data they use in their own activities.

Data you provide

Depending on the features you use, Bandwise stores your name, email address, account ID, profile, instruments, genres, city, gig availability and fee preferences. Band tools may also store membership, contact details, bookings, concert responses, ticket purchases and admission status, payment references, financial records, messages, images and documents you choose to share.

How data is used

Data is used to provide accounts, collaboration, concerts, tickets, music discovery, communication and support. Account and service functions rely on performing the service you request. Security, abuse prevention and handling reports rely on the legitimate interest in operating a safe service. Information is also retained when required by law. Optional publication and device permissions are controlled by your choices.

Visibility and recipients

Public profiles and approved public content can be seen by others. Friends-only and private settings restrict visibility. Gig availability is a separate choice: enabling it makes your gig profile searchable by bands. Your email address is not shown in that directory. Band data is shared according to membership and role. Ticket and booking details are shared with the relevant organiser. Recipients can retain copies they have already received.

Music links and external services

You can link to YouTube, SoundCloud and Spotify. Bandwise stores the link, title, artist and visibility; it does not upload or host your audio files. External services receive data under their own policies when you open a link. Integrations such as Billetto, Swish, social publishing and other Bandwise tools receive the information needed when you choose to use them. Bandwise does not ask for your Spotify, YouTube or SoundCloud password.

Moderation and reports

Shared music links are reviewed manually before publication. Public text and images may be checked automatically with OpenAI when that service is enabled; unavailable automatic checks leave content for manual review. Private messages are not routinely submitted to automatic moderation. Reporting a message shares the reported message with authorised moderators. Moderators can review content, handle appeals and hide content. Reports and moderation decisions are recorded to prevent abuse and explain decisions.

Storage and security

Bandwise uses Supabase for account and service data. The current database is hosted in the EU. Login credentials are stored in the device Keychain. Personal iCloud state can remember your selected band and position in the app. Local copies support continuity. Nearby sharing transfers the scores or setlists you choose to another device on the local network. Service providers may process technical logs for operation and security; third-party services may process data outside the EU/EEA under their applicable transfer arrangements.

Retention and deletion

Account data and content are kept while needed to provide the service and handle your requests. Start account deletion under Profile → Account → Delete account. Personal accounts without shared business records can be erased immediately; cases involving shared records are reviewed and completed within 30 days. Completion is confirmed in the app or by email. Backups may remain until replaced under the provider’s backup routines. Records required by law, such as financial or dispute records, may be retained with restricted access. Contact erikring@icloud.com to request an export or exercise your other rights. Signing out does not delete the account.

Your rights

You may request access to your data, correction, erasure, restriction or a portable copy, and object to processing based on legitimate interests where the law permits. You may withdraw consent for optional processing. Device permissions can be changed in iOS Settings. We may need to verify that a request comes from the account holder. Contact erikring@icloud.com. You may complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or your local supervisory authority.

Changes

This policy was updated on 19 October 2026. Material changes will be explained in the app or through the service.