Privacy Policy
DRAFT for review. The effective date must be set and the policy checked before MyBand is released.
Effective date: [to be set at release]
Who we are
MyBand (the MyBand phone app and the MyBand Live website) is provided by Red Country Management Pty Ltd (ABN 94 626 948 310), Western Australia. Questions or requests about your information: support@mybandlive.com.
The short version
- We collect only what MyBand needs to work: your email address to sign in, and the band information you choose to enter.
- We don't sell your information, show advertising, or use advertising or analytics trackers.
- Your band's private details (venue contacts and money) are visible only to the band Owner, and our servers enforce that.
- Recordings you make stay on your phone unless you choose to share them.
Information we collect
Your account
To sign in we use your email address. We email you a one-time 6-digit code to prove the address is yours; we don't use passwords. After you sign in, a session key keeps you signed in for up to 90 days. On Android it is stored encrypted with the phone's secure key storage; on the website it is kept in your browser's storage for this site only.
We also keep the bands you belong to, your role and permissions in each, your answers about whether you can make an event (I'm in, Maybe, Can't make it), and, to keep paid features fair and affordable, daily counts of how many song lookups your account has made.
Band information you enter
Songs, lyrics, chords, notes and stage cues; setlists; gigs and rehearsals (dates, times, venues and addresses, who is playing); band notices that the Owner or Band Leaders post for the band; band and crew contacts (names, roles, phone numbers and email addresses you add); and, for band Owners, fees, expenses, payment status and travel or accommodation notes.
Band and crew directory
A band Owner can keep a directory of the band's musicians and crew, some of whom may not use MyBand themselves. As well as names, roles, phone numbers and email addresses, the directory can hold: instruments and stage requirements; music rights details (for example an APRA AMCOS member number or IPI number); legal name and date of birth for travel bookings; frequent flyer, airline, instrument and baggage notes; and travel and general notes.
Rights details, legal names, dates of birth and travel details are shown only to the band Owner and to Band Leaders the Owner allows to manage members. Our servers enforce this; the details are not just hidden on screen. If you add someone to the directory, please let them know and add only what the band needs. Anyone listed can ask us to see, correct or delete their details at the address above.
This information is stored on your phone. If you use MyBand Cloud (to share a band with other members or use the website), it is also stored on our servers so your band can see it. You decide what to enter; please only add other people's contact details where you have a reason to.
Recordings
The Recorder saves audio on your phone. MyBand does not upload your recordings. If you export a recording, it is saved to your phone's shared storage, where other apps you allow can see it.
Features that use other services
- Song Catcher (song recognition): when you ask MyBand to identify music, a short sound sample (about 10 seconds) is sent to AudD to identify the song. It is used only for that request.
- Song search and details: when you search for a song or fetch its tempo or licensed lyrics, the song title and artist are sent to MusicBrainz, GetSongBPM or Musixmatch. We don't send your personal details with these lookups.
- Purchases (MyBand Solo and Band Pro): payment is handled by Google Play. For Band Pro, MyBand receives the purchase's status, plan and renewal date from Google to switch it on for your band. MyBand Solo is checked on your phone with Google Play. We never receive your card or payment details.
- Sign-in emails: sign-in codes are sent through our email provider, Resend.
- Band notifications: when you are signed in, your phone gets a notification token from Google's Firebase Cloud Messaging so we can tell you about changes to your bands' events, shows ready to download, and new band notices. A notification contains the band name and either the event name and date or the start of the notice (up to 120 characters); fees, contacts and travel details are never included. The token is removed when you sign out or delete your account.
- Hosting: MyBand Cloud and the website run on Cloudflare. Your information may be processed on servers outside Australia.
- Scanning text: scanning printed lyrics or setlists uses Google's on-device text recognition; the image is processed on your phone.
Event reminders
If you leave Event reminders on (Settings), the app reminds you the evening before each event and two hours before you need to be there. These reminders are set on your phone from the events it already has; nothing is sent to us or anyone else to do this. On the lock screen they show only "MyBand event reminder"; the event name and venue appear once your phone is unlocked.
Who can see your band's information
Only signed-in members of a band can see that band's shared information, according to their role. Owners see everything. Band Leaders and Members see songs, setlists and gigs; private venue contacts and money records are kept for the Owner by our servers, not just hidden on screen. Published show packs are fixed copies for the band that leave out those private details.
Phone permissions
- Microphone: for the Recorder and Song Catcher, only while you use them.
- Notifications: to show that a recording is in progress (with a stop button), event reminders, and band notifications.
- Run at startup: so event reminders are set again after your phone restarts.
- Internet: for MyBand Cloud, sign-in and song lookups.
Backups
MyBand's data is deliberately left out of Google's automatic cloud backup, to protect your sign-in and private band details. You can save your own MyBand backup file from the app. When you move to a new phone with Android's phone-to-phone transfer, your band data can come across, but your sign-in does not.
Keeping and deleting your information
You can delete songs, setlists, gigs, contacts and your own band notices at any time, and remove people from bands you manage. You can delete your MyBand account at any time in the app (MyBand Accounts, then DELETE MY ACCOUNT) or on the Delete your account page. This removes your sign-in and every band you own, with all its information, and the band notices you posted in other bands. If you can't sign in, email support@mybandlive.com from the address you use and we will delete the account within 30 days, except where the law requires us to keep something. Information that belongs to a band you share with others (for example songs you added) may stay with that band for its other members.
Security
Information travels over encrypted connections (HTTPS). Sign-in codes are single-use, expire after 10 minutes and are limited against guessing. Our servers check each person's band role before returning or changing any band information.
Children
MyBand is not directed at children under 13, and we don't knowingly collect information from them.
Your rights and complaints
You can ask to see or correct the information we hold about you, or ask questions about this policy, at support@mybandlive.com. If you're in Australia and not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
Changes
If we change this policy, we will update the date above and, for important changes, tell you in the app or by email.