Privacy Policy

Last updated: July 6, 2026

Spindl (“Spindl,” “we,” “us,” or “our”) is a web application, operated by Yumiwi LLC, that helps people catalog and manage their personal music collections. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to spindlmusic.com and the Spindl app.

1. Information we collect

We collect only what we need to run the service:

Account information. When you sign up, we collect your email address and an encrypted password, or — if you use Google sign-in — your name, email address, and profile picture as provided by Google.
Collection data. The records you add and the details you enter or import (titles, artists, formats, conditions, notes, purchase prices, estimated values, storage locations, cover images, and similar).
Uploaded images. Cover photos you upload or capture, stored in our secure storage so they can be shown in your collection.
Payment information. If you subscribe or buy AI-scan credits, payments are processed by Stripe. We do not receive or store your full card number; we retain only a customer reference, your subscription status, and purchase history.
Usage and device data. Basic analytics such as pages visited, approximate location derived from your IP address, browser type, and device information.
Location (only when you ask). If you use the Record Store locator and grant permission, we use your device location or the postal code you enter to find nearby shops. We do not store this location.

2. How we use your information

To provide and maintain your account and collection.
To enrich records with metadata and artwork from third-party music databases.
To process subscriptions and AI-scan credit purchases.
To generate personalized recommendations from your collection’s taste.
To improve, secure, and troubleshoot the service.
To communicate with you about your account, security, and important changes.

3. Third-party services

Spindl relies on a small number of trusted providers to function. Each has its own privacy policy:

Supabase — authentication, database, and image storage.
Netlify — website hosting and delivery.
Stripe — payment processing for subscriptions and AI-scan packs.
Discogs and MusicBrainz / Cover Art Archive — music metadata, artwork, and marketplace pricing used to identify and value records.
OpenAI (or a comparable AI provider) — used only when you choose to identify a record by photographing its cover; the image is sent for text recognition.
Google — optional sign-in.
Google Analytics — anonymous, aggregated usage statistics.
Amazon Associates — some “Buy” links are affiliate links; if you purchase through them, Spindl may earn a small commission at no extra cost to you.

4. AI cover recognition

When you use “Identify by Cover,” the photo you provide is sent to our AI provider solely to read the visible text on the sleeve and suggest matching releases. We do not use your photos to train AI models, and the image is processed only to return results to you.

5. Cookies and analytics

We use essential cookies to keep you signed in, and analytics cookies to understand how the service is used. You can control cookies through your browser settings. We do not sell your personal information.

6. How we share information

We do not sell your personal data. We share information only with the service providers listed above, as needed to operate Spindl, or when required by law. Your collection is private to your account and is not shown to other users.

7. Data retention and deletion

We keep your data for as long as your account is active. You can delete records at any time, and you may request deletion of your entire account and associated data by contacting us at the address below. We will delete your data within a reasonable period, except where we must retain limited records for legal or accounting reasons (for example, payment records).

8. Security

We use industry-standard measures — including encryption in transit (HTTPS), row-level access controls so each user can only see their own data, and optional two-factor authentication — to protect your information. No method of transmission or storage is completely secure, but we work to safeguard your data.

9. Children’s privacy

Spindl is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal information.

10. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact us using the details below.

11. International users

Spindl is operated from and stores data with providers that may process it in the United States and other countries. By using Spindl, you consent to this processing.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we’ll revise the “Last updated” date above and, for significant changes, notify you within the app or by email.

13. Contact us

Questions about this policy or your data? Email us at hello@spindlmusic.com. Spindl is operated by Yumiwi LLC.