Privacy Policy
1. Overview
Played ("Played," "we," "our," or "us") is an iPhone app for importing listening history, keeping recent Apple Music plays up to date, generating personal music stats, answering Ask queries about your history, and supporting related app features. This Privacy Policy explains what information we collect, how we use it, how long we keep it, and the choices available to you.
Apple Music is the only connected listening source currently supported for ongoing sync. You can also import Apple Music CSV exports and Spotify Extended Streaming History JSON files that you choose to upload. Spotify account linking and Last.fm linking are not current launch features. If an older build or internal test account previously used another linked source, limited legacy compatibility records may remain until they are deleted, migrated, or no longer needed.
2. Information We Collect
Information you provide directly
- Account and profile information. If you sign in, we may receive identifiers and account information associated with Sign in with Apple, including your Apple relay email address where Apple provides one, plus your Played profile ID, display name, room display name, timezone, source preferences, and app settings.
- Listening history uploads. If you import files, we receive the files and play records you choose to upload, including Apple Music CSV exports and Spotify Extended Streaming History JSON files. Those records may include track, artist, and album names; play timestamps; play duration; play counts; skip or end-reason information; platform/source fields; Apple Music IDs; Spotify track URIs or IDs; and country, IP address, user-agent, shuffle, or reason fields when those fields are present in the export you provide.
- Apple Music connection data. If you connect Apple Music, we process the Apple Music user token, storefront, sync state, recent play records, item identifiers, artwork URLs, timestamps, error/status fields, and related metadata needed to keep your recent listening history fresh. Disconnecting Apple Music stops ongoing sync.
- Subscription and entitlement status. If you purchase premium through Apple, we process StoreKit transaction details, App Store Server Notification data, product IDs, transaction IDs, subscription status, start and expiration dates, revocation or refund status, environment, and entitlement metadata needed to unlock and maintain paid features.
- In-app content you create. This may include Ask queries and results, generated analytics cards, saved or shared exports, item ratings and helper responses, custom events, room names, room membership, active items, queue actions, suggestions, and other content or metadata you create in the app.
- Support communications. If you email us, we receive the contents of your message and any information you choose to include.
Information collected automatically
- Usage and diagnostics. We collect app diagnostics, performance telemetry, feature usage, product analytics events, endpoint metrics, job status, error codes, and operational logs needed to run, secure, debug, and improve the service. Product analytics are designed to capture normalized event data, not raw uploaded files or raw Ask text by default.
- Device and network metadata. This may include app version, build number, platform, timestamps, timezone, profile or device identifiers, APNs push tokens if push or widget delivery is enabled, request metadata, IP-derived metadata in server logs, and similar technical metadata.
- Cached and generated data. We may store cached snapshots, rollups, artwork references, search/enrichment results, sync manifests, and derived statistics so the app can load quickly and keep your history consistent across sessions.
3. How We Use Information
- Provide the core app experience, including sign-in, imports, Apple Music sync, history, charts, calendar views, Ask, sharing, events, premium access, widgets, and legacy room surfaces where available.
- Maintain account integrity, authenticate users, and prevent abuse or fraud.
- Store and synchronize listening history, cached snapshots, rollups, artwork references, entitlement status, and related metadata across supported backends.
- Process uploads, deduplicate play records, refresh rollups, enrich metadata and artwork, and show import progress or errors.
- Operate, troubleshoot, monitor, and improve performance, reliability, and product quality.
- Respond to support requests and communicate with you about service issues or legal requests.
- Comply with applicable law and enforce our Terms of Service.
4. How We Share Information
We do not sell your personal information or share it for cross-context behavioral advertising.
We may share information with service providers and platforms that help us operate the app, including:
- Apple for Sign in with Apple, Apple Music integrations, CloudKit compatibility storage/sync paths, App Store billing, StoreKit subscription management, App Store Server Notifications, and APNs delivery.
- Supabase for authentication, database, private file storage, Edge Functions, and backend operations.
- Infrastructure and reliability providers for rate limiting, caching, hosting, logging, monitoring, security, and email support workflows.
- Music metadata providers, such as MusicBrainz-derived artwork lookups and other non-Spotify metadata sources, when needed to resolve album, artist, track, or artwork metadata. We may send the identifiers or search terms needed for that lookup, not your full uploaded file.
If you use room features, some information you create in that context, such as your display name, room membership, active item, suggestions, queue, and room activity, may be visible to other room participants.
We may also disclose information if required by law, to protect rights or safety, to prevent fraud or abuse, or in connection with a merger, acquisition, financing, or similar transaction.
5. Data Storage and Retention
We keep personal information for as long as reasonably necessary to provide Played, maintain security and integrity, resolve disputes, comply with legal obligations, and support backup, audit, and fraud-prevention needs.
- Account profile data, listening-history records, ratings, custom events, room records, generated summaries, rollups, artwork references, entitlement records, and related app data are generally kept while your account remains active or as needed to provide the service.
- Uploaded raw files are stored in a private uploads bucket and local app staging storage while they are uploaded, processed, retried, or needed for import status and troubleshooting. Processed history records and import job records may remain after file processing so the app can show freshness, progress, and deduplication status.
- Apple Music sync state, including the Apple Music user token and sync status, is kept while Apple Music sync is linked or as needed to preserve account state. Disconnecting Apple Music stops ongoing sync and disables the linked source.
- Operational telemetry has shorter default retention where configured. Current backend pruning defaults remove performance telemetry after 14 days and job-run/backend endpoint metrics after 30 days. Apple Music delta manifests are also pruned on a shorter operational window.
- App Store transaction, entitlement, notification, security, support, audit, and legal records may be retained as long as needed for billing verification, fraud prevention, dispute handling, tax/accounting, legal compliance, and platform requirements.
- Cached and synchronized data may exist in Supabase, CloudKit compatibility paths, and local app storage depending on the features you use. Some deleted data may remain briefly in backups, logs, or caches before normal rotation.
The in-app Delete Account flow clears active Played app data associated with your profile, attempts a best-effort local and CloudKit compatibility cleanup, and signs you out. We may retain minimal account identity, authentication binding, entitlement, transaction, security, legal, support, and backup records where necessary or permitted by law.
6. Your Choices and Rights
Depending on your location, you may have rights to access, correct, delete, restrict, or export your personal data, and to object to certain processing.
- You can connect, disconnect, or change Apple Music sync settings inside the app where those controls are available.
- You can choose whether to upload Apple Music CSV exports or Spotify Extended Streaming History JSON files. File imports are optional.
- You can manage or cancel premium subscriptions through Apple's subscription management tools, including the Manage Subscription control in Played settings where available.
- You can sign out of the app at any time.
- You can use Delete Account in Settings, or contact us to request access, export, correction, or deletion of your account data.
- You can revoke Apple Music permissions through Apple or iOS settings. Some features may stop working if permissions are revoked.
To make a privacy or deletion request, email hello@nullsprinter.com. We may need to verify your identity before fulfilling a request.
7. Security
We use technical and organizational safeguards intended to protect personal information, including authenticated backend access, private storage for uploads, scoped server functions, rate limits, and operational monitoring. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.
8. Children
Played is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
9. International Transfers
Your information may be processed in countries other than your own, including the United States, where privacy laws may differ.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we do, we will post the updated version here and revise the "Last updated" date above.
11. Contact
If you have questions about this Privacy Policy or want to submit a privacy request, contact hello@nullsprinter.com.