Privacy Policy

Introduction

Digli ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application.

Information We Collect

Information You Provide

• Email Address: Used for authentication and account recovery
• Album Photos: Images you capture of album covers for recognition
• Collection Data: Albums you save, bookmark, or add to your library
• User Feedback: Any feedback you submit through our feedback form

Automatically Collected Information

• Usage Data: How you interact with the app (scans, saves, searches)
• Device Information: Device type, operating system, unique device identifiers
• IP Address: For rate limiting and security purposes
• Log Data: Error logs and performance metrics

How We Use Your Information

We use the collected information to:

• Provide and maintain our album recognition service
• Authenticate users and secure accounts
• Process and recognize album covers using AI (OpenAI GPT-4o-mini)
• Retrieve album metadata from Discogs and preview audio from Apple iTunes
• Store and manage your album collections (Dig Pile, Shelf, Want List)
• Improve recognition accuracy and app performance
• Prevent fraud and abuse through rate limiting
• Respond to user feedback and support requests
• Analyze usage patterns to improve features

Data Storage and Security

Your data is stored securely on our servers in Canada. We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted authentication using JWT tokens with httpOnly cookies
• Secure HTTPS connections for all data transmission
• Server-side API key management (never exposed to client)
• Rate limiting to prevent abuse (50 recognition requests per hour)
• Regular security audits and updates

Third-Party Services

We use the following third-party services that may collect and process your data:

OpenAI

Album cover images are sent to OpenAI's API for recognition. OpenAI processes images according to their Privacy Policy. Images are not stored by OpenAI after processing.

Discogs

We retrieve album metadata from Discogs API. If you connect your Discogs account, we store OAuth tokens so we can read your collection and sync records into Digli. Album titles and artists are sent to Discogs for metadata lookup. Discogs processes this data according to their Privacy Policy.

Apple iTunes

We look up short audio previews and album metadata via the iTunes Search API. Album titles and artists are sent to Apple for preview matching. Apple processes this data according to their Privacy Policy.

Spotify

We use the Spotify API to match albums, retrieve track popularity data, and provide album artwork and links. Album titles and artists are sent to Spotify for matching. Spotify processes this data according to their Privacy Policy.

Data Retention

We retain your data as follows:

• Account Data: Until you delete your account
• Album Scans: Until you delete individual albums or your account
• Authentication Codes: Automatically deleted after 10 minutes or 3 failed attempts
• Recognition Cache: Stored indefinitely to reduce costs and improve performance
• Usage Logs: Operational events retained for 90 days for debugging and service reliability

Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Delete your account and all associated data
• Export: Email a CSV from Settings → Account → Email CSV
• Object: Opt-out of certain data processing activities

How to Delete Your Data

You can delete your account and all associated data in the app:

1. Open Settings from your profile avatar
2. Go to Account
3. Choose Delete my account and confirm

Deletion is immediate and irreversible. Your account, scans, shelf, want list, and bookmarks are permanently removed.

You can also use Feedback in the Digli iPhone app (Account → Feedback) if you need help with deletion or a data request.

Note: Recognition cache data (anonymized album recognition results) may be retained to improve service for all users, but will not be linked to your identity.

Children's Privacy

Digli is not intended for users under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, please contact us immediately via Feedback in the Digli iPhone app (Account → Feedback).

International Data Transfers

Your data is stored and processed in Canada. If your data is transferred to other countries (such as when using third-party services like OpenAI), we ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and Canadian privacy laws.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by updating the "Last updated" date and, if appropriate, through in-app notifications. Your continued use of Digli after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy or our data practices, contact us via Feedback in the Digli iPhone app (Account → Feedback).

For Canadian Residents: You have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA). We comply with Canadian privacy laws regarding the collection, use, and disclosure of personal information. Please contact us for more information about your privacy rights under PIPEDA.

For California Residents: You have additional rights under the California Consumer Privacy Act (CCPA). Please contact us for more information about your CCPA rights.

For EU/UK Residents: You have rights under the General Data Protection Regulation (GDPR). Please contact us for more information about your GDPR rights.