Privacy policy

Effective October 20, 2026

Auxly is published by AppDestroy, owned and operated by Paul Caracciolo ("we", "us"), who is responsible for your information. Auxly lets you rate and review music, keep a listening diary, follow artists, and hear about new releases and nearby shows. This policy explains what we collect, why, who else is involved, and the choices you have. Questions: appdestroy@gmail.com.

What we collect

Account. Your email address and sign-in method. If you sign up with email, your password is handled by Firebase Authentication and never seen by us. If you use Google or Apple, we receive your account identifier and email (Apple may give us a private relay address).
Profile (public). Username, display name, bio, profile photo and your top four albums, plus counts of your logs and reviews and a summary of your public ratings.
Listening activity. The albums you log, ratings, listen dates, reviews, favorites and relistens. Public entries are visible to other Auxly users; private entries are visible only to you (counts on your profile include them, but never their content).
Artists and saved albums. The artists you follow and your Listen Later list. Other Auxly users can see these.
Settings (private). Your notification preferences, people whose reviews you've hidden, and, if you use them, your Last.fm username and your city.
Location. Only if you tap "Use my location" or search for a city. We store the city name and coordinates rounded to about 10 km, never your exact position. Turning your device location on or off for Auxly is always up to you.
Notifications. To send push notifications, the app registers your installation with Firebase Cloud Messaging. We don't store device tokens; your device subscribes to topics for the artists you follow and to a private random topic for show alerts. The alerts also appear in your Activity tab.
Reports. If you report a review, we keep the report and the reason.
Usage analytics. We use Google Analytics for Firebase to understand how the app is used: screens viewed and actions such as signing in, logging an album, following an artist or opening a ticket link, along with device and app information Firebase collects automatically (such as device model, OS version and an app instance identifier). Analytics events are associated with your Auxly user ID. We don't use your device's advertising identifier.

How we use it

To run Auxly: your account, profile, diary, reviews, follows, the Activity tab and push notifications.
To show you new releases from artists you follow, shows near your city, and suggestions based on the artists you follow.
To keep Auxly safe: reviewing reported content, hiding reviews that receive multiple reports, and enforcing our terms.
To understand and improve the app (analytics).

We don't sell your personal information, we don't show ads, and we don't track you across other companies' apps or websites.

Services we rely on

Google Firebase (Google LLC) stores and processes all Auxly data: Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging and Analytics. Data is stored in the United States.
Deezer provides album, artist and track information, artwork and 30-second previews. Our servers request catalog data; artwork and previews load directly from Deezer to your device, so Deezer receives your device's IP address.
Ticketmaster provides concert listings, requested by our servers. Tapping "Get tickets" opens Ticketmaster, whose own privacy policy applies there.
Last.fm receives your Last.fm username only if you choose to import your top artists.
MusicBrainz and Apple's iTunes Search are used by our servers to identify albums. No personal information is sent.
Your device's map service (Google on Android, Apple on iOS) turns your location or city search into a city name. It receives that location or search text.

Keeping and deleting your data

We keep your data while you have an account. You can edit your profile, delete individual logs and reviews, unfollow artists and remove your city at any time in the app. Delete your account in Settings and we delete your profile, logs, reviews, follows, saved albums, settings, notifications, reports you filed, username and profile photo, usually within minutes. Analytics data is kept by Google Analytics for up to 14 months and isn't linked to a deleted account's content.

Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal information, and to object to or restrict some processing. Most of this you can do directly in the app; for anything else, email appdestroy@gmail.com and we'll respond within 30 days. Where the law requires a legal basis, we rely on providing the service you asked for (your account and content), our legitimate interests (keeping Auxly safe and improving it), and your consent (location and notifications, which you can withdraw in your device settings).

Children

Auxly isn't intended for children under 13 (or the minimum age in your country), and we don't knowingly collect their information. If you believe a child has an account, contact us and we'll delete it.

Security

Data is encrypted in transit, access to it is limited by security rules, and only you can read your private settings and entries. No system is perfectly secure, but we work to protect your information.

Changes

If we change this policy in a meaningful way, we'll update the date above and let you know in the app.