Privacy Policy
Effective November 3, 2026
Heard is an app for every set you've seen or heard, ranked. This policy says what Heard keeps about you, who sees it, how long it's kept, and what you can do about it.
Heard is made by Nicolo Ruffini, in Chicago, United States. Questions about your data: support@heard.club.
The short version
- Heard keeps what you put in it: your profile, your logs and rankings, your photos and clips, and the email Sign in with Apple gives us.
- Your profile, logs, and photos and clips are public to everyone signed in to Heard, unless you make a post's photos and clips private. Your email is never shown.
- No ads, no analytics, no tracking. We don't sell or share your data.
- Your location never leaves your phone. Where a photo or clip was taken is removed before it's uploaded.
- Delete anything, or your whole account, in the app. Deleted from Heard immediately. Our encrypted backups are kept up to a year so nobody loses their logs; they never bring back what you deleted, and it's gone from them within a year.
What Heard keeps
Your account
- The ID Sign in with Apple gives Heard, and the email you chose to share. If you picked Hide My Email, it's Apple's forwarding address, not yours.
- Your name from Apple, which starts as your display name.
Your profile
- Your display name, username, city (as you type it), bio, and profile photo.
What you log
- The sets and nights you log, your rankings and scores, your notes, the artists and tracks you pick for your profile, "Missed it" and "Not yet", who you follow, who you block, and what you report.
- Names you add for everyone: an artist, venue, festival, event, or stage that wasn't in Heard yet.
- The photos and clips you add to a log, and when each was taken. Heard uploads a smaller copy of each, made on your phone, with where it was taken removed.
What stays on your phone
- Your location. Heard uses it to list venues near you, and searches Apple Maps from your phone. It's never sent to Heard.
- The originals of the photos and clips you add. They stay in your photo library; Heard uploads only its smaller copies.
What our systems keep to run Heard
- Records of your requests (including your IP address), kept by our providers for a short time to keep Heard secure and fix problems.
- How often you've done something in the last day or two, to stop abuse ("Slow down a little").
- The token Apple gives us when you sign in, encrypted, so we can end Heard's access to your Apple ID when you delete your account.
- Artist searches go to Apple Music from our server, with only the words you typed. We keep each search's answer for 24 hours to make the next one fast, without anything that says who searched.
- A record that something was deleted: the IDs of what was deleted and when, never what it said (see Backups).
When you write to us
- Your email and our replies, to help you.
Who sees what
- Everyone signed in to Heard: your profile (display name, username, city, bio, photo), your logs, rankings, scores, and notes, your photos and clips, who you follow and who follows you, and the names you add for everyone. They can save your public photos and clips to their phone.
- Only you: a post's photos and clips you've made private. The post itself, its score and note, stays public.
- Shared links: anyone signed in can share a link to a post, or to a public photo or clip. The link opens it in Heard, for people signed in, showing only what Heard already shows them; heard.club shows nothing of it, or of who posted it. Making a post's photos and clips private stops their links working; the post's own link still works, without them.
- Nobody: your email. It's used only to reach you about your account (for example, if we remove something of yours) and to answer you. No newsletters, no marketing.
- People you block, and people who block you, can't see each other.
- Us: we look at your data only to run Heard, answer you, review a report, or keep Heard safe.
Why we use it
| What | Why | Legal basis (EU and UK) |
|---|---|---|
| Your account, profile, logs, and photos and clips | To give you Heard, as you asked by signing up | Our agreement with you (the Terms) |
| Request records, rate limits, reports, moderation, backups, the deletion record | To keep Heard safe, stop abuse, and make sure nobody loses their logs to a mistake | Our legitimate interest in a safe, reliable Heard |
| Your location and photo library | To list venues near you and pick or save photos, only when you allow it in iOS | Your permission, which you can take back in iOS Settings |
| Anything the law makes us keep | To follow the law | Legal obligation |
Who helps us run Heard
They handle your data only to provide their service to Heard:
| Company | What for | What it handles |
|---|---|---|
| Supabase | Heard's database, sign-in, and server | Everything Heard keeps |
| Cloudflare | Profile photos, photos and clips, the backups' storage, and heard.club | Your profile photo, photos, and clips; the encrypted backups |
| Apple | Sign in with Apple; Apple Music's artist and track info; Apple Maps on your phone; TestFlight and App Store crash reports you choose to share | Your Apple ID sign-in; the words you search for artists |
| GitHub | Runs the nightly backup | The backup, encrypted before it's stored |
| Apple (iCloud Mail) | support@heard.club | Emails you send us |
Where it's kept: Heard's database is in the United States, as is Heard's maker. Our providers also work from other countries, so your data is handled there too. If you're in the EU or UK: where a country isn't recognized as protecting personal data adequately, our providers protect it with the European Commission's standard contractual clauses (with the UK's addendum) or the EU-US Data Privacy Framework (with its UK Extension).
How long we keep it
- While you have an account: what you've put in Heard, until you delete it.
- When you delete something, or your whole account: Deleted from Heard immediately. Our encrypted backups are kept up to a year so nobody loses their logs; they never bring back what you deleted, and it's gone from them within a year.
- The files of photos and clips you delete, and your profile photo's, go within minutes.
- Deleting your account also ends Heard's access to your Apple ID, so signing up again starts fresh.
- Names you added for everyone (an artist, venue, festival, event, or stage) stay, without your name on them, because other people's logs point at them.
- Reports: a copy of what was reported, kept until 90 days after we've dealt with it, or until the reported account is deleted.
- When we remove something after a report, or ban an account: its photos and clips are kept 30 days where nobody can see them, in case we got it wrong, then deleted.
- A ban otherwise deletes the account's content and keeps only its Apple ID and email, so that Apple ID can't sign up again.
- The deletion record: IDs and times only, kept as long as the oldest backup (about a year), so a restored backup never brings back what someone deleted.
- Request records at our providers: a few days to a few weeks. Rate limits: 2 days. Search answers: 24 hours.
Backups
- Every night, Heard's database is copied, encrypted, to storage nobody can change or delete early.
- Each night's copy is kept 30 days, and the copy from the 1st of each month is kept a year. Then they're deleted.
- Only Heard's maker holds the key that opens them.
- A backup is only used to recover from a mistake or a failure, and every restore deletes again what people deleted since the copy was made.
Your rights
Wherever you live, you can:
- See and correct your data: it's in the app. Edit your profile any time.
- Get a copy of your data: email support@heard.club from the email on your account (or tell us your username), and we'll send it.
- Delete your data: delete a log, or remove a photo or clip, in the app, or your whole account in Settings → Delete account.
- Object to how we use your data, or ask us to limit it.
- Take back permission for location or photos in iOS Settings.
We answer within 30 days. If you're in the EU or UK and you're not happy with our answer, you can complain to your data protection authority (in the UK, the ICO).
Security
- Everything travels encrypted between your phone and Heard.
- Backups are encrypted before they're stored.
- Only Heard's maker can reach your data, through accounts protected with two-factor sign-in.
Children
Heard is for people 13 and older. We don't knowingly keep data from anyone younger. If you think a child under 13 is using Heard, email us and we'll delete the account.
Changes
When this policy changes, we'll post it here with a new date. For a change that matters, we'll tell you in the app first.
Contact
support@heard.club