Bandee

Privacy Policy

Last updated 14 August 2026 · Effective 14 August 2026

This policy explains what Magnito Studio ("Bandee", "we") collects when you use the Bandee app and services, why, and the choices you have. We keep it short and specific.

The short version

We collect the minimum to run the Service: your account details, the audio you choose to analyze, and basic usage needed for billing and reliability.
We process your audio on our cloud servers to create your stems and chart. We delete the original uploaded file after processing; the resulting stems and chart are stored so you (and any private team you share with) can play them back.
We do not sell your data. We do not make your recordings public or searchable by other users.

What we collect

Category	Examples	Why
Account	Email address, display name, optional profile photo	Create and secure your account; show who is on a team
Your audio & results	Recordings you import; the stems, chart, and lyrics we generate; edits you make	Provide the core Service and let you and your private teams play them back
Usage & billing	Analysis minutes used, subscription status and plan, purchase receipts from the app store	Enforce plan limits and manage subscriptions
Device & diagnostics	App version, platform, device model, error and performance logs, and a crash report if the app stops unexpectedly	Keep the app working and fix problems
Notifications	A push token issued to your device by Apple or Google	Tell you when a bandmate posts in a setlist you are part of. You can turn notifications off on your device at any time.

We do not knowingly collect data from children under 13 (or the minimum age where you live).

How your audio is handled

When you import a song, the audio is sent to our processing servers, separated into stems, and analyzed.
The original uploaded audio is deleted after processing. The generated stems, cover image, and chart are stored (identified by a content fingerprint) so playback is instant and re-downloads are free.
Stems are stored encrypted at rest on your device, and access to shared stems is limited to members of the private setlist they belong to.
Your personal edits (section names, colors, lyric corrections) are stored with your account so they follow you to a new device.

Sharing with others

Bandee only shares your content where you direct it: within the private, invite-only teams and setlists you create or join. Team members see the songs in the setlists they belong to. There is no public feed, no cross-user search, and we do not redistribute your recordings.

Service providers (sub-processors)

We use trusted providers to run the Service:

Supabase — accounts, authentication, and profile data.
Cloudflare R2 — storage of generated stems, cover art, and charts.
Modal — cloud compute that performs the audio analysis.
Apple App Store / Google Play — subscription billing (we receive purchase status, not your full payment details).
Apple and Google — delivering push notifications. They receive a token that identifies your device, not the contents of your chats or your library.
Resend — sending email (account and band emails, and product-update emails if you have those switched on). They receive your email address and the message.
Firebase Crashlytics (Google) — if the app crashes, it sends a technical report: what went wrong, the app version, and the device model and system version. It is not tied to your account, your songs, or your bands.
Lyric lookup services (such as LRCLIB) — when we look for published lyrics we send only a song title and duration. We never send your audio, your account, or anything identifying you.

We do not use advertising networks, and nothing in the app follows you across other apps or websites. We do not measure your behaviour in the app. The only third-party kit embedded is the crash reporter above, which speaks up when the app breaks and stays silent otherwise.

Email we send you

Two kinds, and they are treated differently:

Service email — band invites, receipts, security and account notices. These answer something you or your band did, they carry no marketing, and they are part of having an account, so they are not something you can switch off while the account is open.
Product updates — occasional email about what is new in Bandee. Every one carries a one-click unsubscribe, and there is a Product updates switch in Settings that does the same thing. Turning it off never affects the service email above.

New accounts start with product updates on, except in the EEA, the UK and Switzerland, where they start off and only ever arrive if you switch them on yourself. We do not sell or rent your email address, and we do not send you anyone else's marketing.

How long we keep data

Original uploaded audio: deleted after processing.
Generated stems and charts: kept while associated with your library, and removed on account deletion. We do not currently expire them for inactivity.
Account and billing records: kept as long as your account is active and as required for legal and financial obligations.
Support conversations on our Facebook Page: when our assistant answers you there, we keep up to the last six messages of that conversation for 24 hours so it can follow what you are asking about, and any image you send is read to answer you and not stored. Older messages are discarded automatically, and the whole conversation is discarded as soon as a person from our team replies. Facebook identifies you to us by a page-scoped id that cannot be linked to your Facebook profile or to your Bandee account, so the assistant cannot see your account, your songs or your payments from there. Conversations answered by our pre-written replies keep no message text at all.

Your choices and rights

Edit your profile and remove downloads in the app.
Delete your account, which removes your account data and library associations. Contact us if you need help.
Depending on where you live (e.g. EEA/UK, California), you may have rights to access, correct, delete, or port your data, and to object to certain processing. To exercise them, contact us at the address below.
Turn product-update email off in Settings, or with the unsubscribe link in any of those emails.
Manage or cancel subscriptions in your App Store / Google Play account.

Security

We use industry-standard measures including encryption in transit, encryption of stems at rest on the device, and access controls scoped to your account and your teams. No system is perfectly secure, but we work to protect your data.

International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

Changes

We may update this policy; material changes will be notified in the app or by email. The "Last updated" date above reflects the current version.

Contact

Privacy questions or requests: privacy@bandee.app. Copyright notices: dmca@bandee.app.