Privacy Policy

Last updated: August 30, 2026

Spindl (“Spindl,” “we,” “us,” or “our”) is a web application, operated by Yumiwi LLC, that helps people catalog and manage their personal music collections. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to spindlmusic.com and the Spindl app.

1. Information we collect

We collect only what we need to run the service:

Account information. When you sign up, we collect your email address and an encrypted password, or — if you use Google sign-in — your name, email address, and profile picture as provided by Google.
Collection data. The records you add and the details you enter or import (titles, artists, formats, conditions, notes, purchase prices, estimated values, storage locations, cover images, and similar).
Uploaded images. Cover photos you upload or capture, stored in our secure storage so they can be shown in your collection.
Payment information. If you subscribe or buy AI-scan credits, payments are processed by Apple, Google or Stripe depending on where you bought — see section 3. We do not receive or store your card number from any of them; we retain only a customer or purchase reference, your subscription status, and purchase history.
Usage and device data. Basic analytics such as pages visited, approximate location derived from your IP address, browser type, and device information.
Location (only when you ask). If you use the Record Store locator and grant permission, we use your device location or the postal code you enter to find nearby shops. We do not store this location.

2. How we use your information

To provide and maintain your account and collection.
To enrich records with metadata and artwork from third-party music databases.
To process subscriptions and AI-scan credit purchases.
To generate personalized recommendations from your collection’s taste.
To improve, secure, and troubleshoot the service.
To communicate with you about your account, security, and important changes.

3. Third-party services

Spindl relies on a small number of trusted providers to function. Each has its own privacy policy:

Supabase — authentication, database, and image storage.
Netlify — website hosting and delivery.
Stripe — payment processing for subscriptions and AI-scan packs bought on our website.
Apple and Google — payment processing for purchases made inside our iOS and Android apps. We never receive your card details from either store.
RevenueCat — validates app-store purchase receipts and tells us which plan you are on. It receives a purchase identifier and your Spindl user ID.
Discogs and MusicBrainz — music metadata, artwork, and marketplace pricing used to identify and value records.
OpenAI (or a comparable AI provider) — used only when you choose to identify a record by photographing its cover; the image is sent for text recognition.
Apple ShazamKit — used only when you ask Spindl to identify a record that is playing. Audio is captured while you hold the button and is used solely to return a match.
Apple Music (MusicKit) — used only if you choose to play a track. Playback runs against your own Apple Music subscription; we do not receive your listening history.
Apple Maps and Google Maps — display the record-shop map and directions.
Google and Apple — optional sign-in.
Google Analytics — anonymous, aggregated usage statistics.
Amazon Associates — some “Buy” links are affiliate links; if you purchase through them, Spindl may earn a small commission at no extra cost to you.

4. AI cover recognition

When you use “Identify by Cover,” the photo you provide is sent to our AI provider solely to read the visible text on the sleeve and suggest matching releases. We do not use your photos to train AI models, and the image is processed only to return results to you.

5. Cookies and analytics

We use essential cookies to keep you signed in, and analytics cookies to understand how the service is used. You can control cookies through your browser settings. We do not sell your personal information.

6. How we share information

We do not sell your personal data. We share information only with the service providers listed above, as needed to operate Spindl, or when required by law.

What other collectors can see

Your collection is private unless you choose otherwise. Spindl has a social side, and you control how much of it applies to you:

Private profile (the default). Only collectors whose follow request you have approved can browse your records. Follow requests stay pending until you accept them.
Public profile. If you switch your profile to public, any collector can browse your records and follow you without needing your approval. You can switch back to private at any time.
What a viewer actually sees. Only the records you own — your wishlist is never shared — and only descriptive details: title, artist, release, year, format, genre, style, country and cover image.
What is never shared with anyone. Estimated values, purchase prices, condition grades, your notes and storage locations are excluded from every view of your collection, on both public and private profiles.
Always visible. Your username, display name, profile picture, how many records you own, and your follower and following counts can be seen by anyone, including on a private profile.
Reviews you write about an album or a record shop are public, shown with your display name and picture to anyone viewing that album or shop.
The activity feed. Records you add can appear in the feeds of collectors who follow you.
Direct messages are visible to the collector you send them to.

You can report or block another collector from any review or conversation, and a blocked collector’s content is hidden from you immediately.

7. Data retention and deletion

We keep your data for as long as your account is active. You can delete records at any time, and you may request deletion of your entire account and associated data by contacting us at the address below. We will delete your data within a reasonable period, except where we must retain limited records for legal or accounting reasons (for example, payment records).

8. Security

We use industry-standard measures — including encryption in transit (HTTPS), row-level access controls so each user can only see their own data, and optional two-factor authentication — to protect your information. No method of transmission or storage is completely secure, but we work to safeguard your data.

9. Children’s privacy

Spindl is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal information.

10. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact us using the details below.

11. International users

Spindl is operated from and stores data with providers that may process it in the United States and other countries. By using Spindl, you consent to this processing.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we’ll revise the “Last updated” date above and, for significant changes, notify you within the app or by email.

13. Contact us

Questions about this policy or your data? Email us at hello@spindlmusic.com. Spindl is operated by Yumiwi LLC.