Privacy Policy

Bardfolk is built privacy-first. This policy explains who we are, what we collect, how it's used and stored, and the control you have over it.

Bardfolk is operated by Limelight Digital LLC, a Utah limited liability company ("Bardfolk," "we," "us"). We're the company responsible for your personal data, the data controller in legal terms. You can reach us anytime at bardfolk.official@gmail.com.

What we collect

• Account details. Your email address (and, if you use Google or Apple sign-in, the basic profile they share: name and email).
• Profile. Anything you choose to add: display name, username, bio, avatar, and links.
• Your content. The songs and poems you create: lyrics, chords, notes, audio recordings, cover images, and their details.
• A session cookie. A single secure cookie that keeps you signed in. We don't use advertising or cross-site tracking cookies.
• Information collected automatically. To deliver and protect the service, our hosting and storage providers receive standard technical data: your IP address, device and browser type, and access logs (timestamps and which resources were requested). We use this only to run, secure, and troubleshoot Bardfolk, never to track you across other sites or for advertising.
• Privacy-friendly analytics. To understand how Bardfolk is used and improve it, we use Vercel's cookieless analytics. It measures aggregate usage (such as page views, referrers, and general location) and general performance. It does not use cookies, does not track you across other sites, and does not identify you personally.

How we use it

Only to run the service: to sign you in, store and display your songs, share content exactly as you direct, keep the service secure, and respond when you contact us. We don't sell your data, and we don't use your writing to train AI models.

Our legal bases (for EU and UK users)

Where data-protection law asks us to name a legal basis, here's ours:

• To provide Bardfolk. Signing you in, storing and showing your content, and enabling the sharing you choose. This is the performance of our contract with you.
• To keep Bardfolk safe and working. Security, abuse prevention, and troubleshooting. These are our legitimate interests in running a reliable, safe service.
• To follow the law. Responding to valid legal requests and copyright notices. This is a legal obligation.
• Anything optional that asks first. For example, future marketing emails. This is your consent, which you can withdraw at any time.

Where it’s stored

Your account and content are stored with Supabase (database and file storage), and the app is hosted on Vercel. If you use Google or Apple sign-in, Google or Apple handles that authentication. These providers act as our service providers, processing data on our behalf and under contract to deliver Bardfolk.

International users

Bardfolk is operated from the United States, and our providers process data in the US and other countries. If you use Bardfolk from outside the US, your information will be transferred to and processed in the US. Where the law requires it, these transfers are covered by Standard Contractual Clauses or another lawful transfer mechanism.

Who can see your content

Everything you create is private to you by default. It becomes visible to others only when you choose: by accepting a friend, by making your profile public, or by creating a share link. You can mark individual songs private, unfriend someone, make your profile private again, or revoke a share link at any time.

Collaborators

When you add a friend as a collaborator on a song, they can view and edit that song's words, chords, recordings, and details, and they'll see your name and avatar in its collaborator list. While someone is editing a shared song, their name is briefly visible to that song's other collaborators (so you don't overwrite each other). You can remove a collaborator at any time, which ends their access immediately.

Keeping it secure

Access is enforced at the database level (row-level security), and audio is served through short-lived signed links rather than public URLs. We store your recordings to play them back to you and to anyone you share them with. We do not analyze them to create voiceprints or to identify anyone, and we don't use them as biometric identifiers. No system is perfectly secure, but your content is never public unless you make it so.

How long we keep your data

We keep your account and content for as long as your account is active. When you delete your account, we permanently remove your profile, songs, recordings, and files immediately. Routine backups and security logs that may contain limited data are purged on a rolling basis (typically within 30 to 90 days). We may keep limited information longer where the law requires it, for example to handle a copyright dispute.

Your rights

Depending on where you live, you have some or all of these rights over your personal data:

• Access a copy of what we hold about you;
• Correct anything that's wrong;
• Delete your data;
• Restrict or object to certain processing;
• Take it with you (a portable copy); and
• Withdraw consent where we relied on it.

You can do most of this yourself in the app: export everything from the Backup section of your Account, or remove everything from the Delete account section, or email us at bardfolk.official@gmail.com. We won't treat you differently for exercising these rights. You can also request deletion here.

EU, EEA, and UK users also have the right to complain to your local data protection authority.

California residents: we do not sell or share your personal information (as the CCPA and CPRA define those terms), and we don't use it for cross-context behavioral advertising. You can exercise the access and deletion rights above the same way.

Children

Bardfolk isn't directed at children. You must be at least 13 to use Bardfolk, and where your country sets a higher minimum age for online services (up to 16 in parts of the EU), you must meet that age or have a parent's permission. We don't knowingly collect data from anyone under these ages; if we learn we have, we'll delete it. Because recordings can contain a person's voice, please don't upload recordings of children.

Changes

We may update this policy as Bardfolk grows. We'll revise the date above when we do, and for significant changes we'll give you reasonable notice.

Contact

Questions about privacy? Email bardfolk.official@gmail.com, or write to us at:

Limelight Digital LLC
929 W Sunset Boulevard, Suite 21-538, St George, UT 84770