Last updated: July 27, 2026
1. Information We Collect
When you create an account:
- Email address
- Phone number
- Username
- Date of birth (used only to verify you meet our minimum age requirement — never shown on your profile)
- Password (stored securely, encrypted — we never see or store it in plain text)
When you use the app:
- Profile photo, if you choose to upload one
- Your answers to profile prompts (favorite album, currently listening to, etc.) — these are music selections, not free text
- Ratings, scores, and comments you post
- Emoji reactions you leave on other users’ ratings
- Concert logs (artist, venue, date) and any photo/video you attach
- Friend connections and friend requests
- Votes on polls
- Your recent search history within the app
- In-app notifications generated by activity relevant to you (e.g. someone reacting to your rating)
What we don’t collect:
- We do not track your location
- We do not access your listening history on Spotify, Apple Music, or any other service
- We do not collect payment or financial information
2. How We Use Your Information
- To run your account and let you use the app’s features (rating, feed, polls, concerts, friends)
- To show your activity to your friends within the app, based on your own visibility settings
- To calculate aggregated, non-identifying statistics like an album’s community average score across all users
- To improve the app and fix problems
We do not sell your personal information to third parties.
3. Third-Party Services We Use
Lyricritic pulls music and location data from a few outside services to power search and features:
- Deezer — for music search results, album/track/artist info, cover art, and audio previews. Your search terms are sent to Deezer to return results; no personal account information is shared with them.
- OpenStreetMap (Nominatim) — for venue search when logging a concert. Only your typed search text is sent, nothing personal.
- Spotify — only used for admin-curated playlist recommendations (fetching a playlist’s title and cover art from a public link). Regular users’ data is never sent to Spotify.
Your account data itself (profile, ratings, messages, etc.) is stored with our backend provider (Supabase, via Lovable Cloud), not with any of the above.
4. Who Can See Your Information
- Your profile prompts and rankings are visible to friends by default settings you control, or can be made public — you choose this in your account settings.
- Your phone number and email are private and never shown to other users.
- Admin-created content (polls, editorial recommendations) is visible to all users.
5. Your Choices and Rights
- You can edit or delete any rating, comment, or concert log at any time.
- You can change your account’s visibility (public/private) at any time.
- You can control whether your rankings leaderboard and “want to listen”/”want to attend” lists are visible to friends.
- You can request deletion of your account and associated data by contacting us (see below).
6. Children’s Privacy
Lyricritic requires everyone to confirm their date of birth when creating an account, and we do not permit account creation for anyone under 13. This is enforced automatically at signup. If you believe a child under 13 has still managed to create an account, please contact us so we can remove it.
7. Data Security
We use industry-standard practices (encrypted storage, secure authentication) to protect your information. No system is perfectly secure, but we take reasonable steps to protect your data from unauthorized access.
8. Changes to This Policy
We may update this policy as the app changes. We’ll update the “Last updated” date above when we do. Continued use of the app after changes means you accept the updated policy.
9. Contact Us
Questions about this policy or your data? Reach out at support@lyricritic.com (set this email up, or swap in whatever address you’d like to use).
lyricritic 