Privacy Policy

For BandAide · Last updated 25 June 2026

BandAide ("the app", "we", "us") is operated by Bring the Craic, LLC. This policy explains what information the app collects, how it is used, who it is shared with, and the choices you have. We have tried to keep it short and plain, because the app's approach to data is simple: we collect only what the app needs to do its job, and we do not track you or sell your data.

1. Who is responsible for your data

Bring the Craic, LLC is the data controller for information processed through BandAide. If you have any questions, requests, or concerns about your data or this policy, contact us at kgriffes@gmail.com.

2. Who can use BandAide

BandAide is currently a private, invitation-only application. You typically have an account because an existing member invited you to a band. The app is not directed to children, and it is not intended for use by anyone under 16. Please do not use BandAide or provide any information through it if you are under 16.

3. What information we collect

Information you provide

• Account and profile details: your name, email address, and an avatar/initials used to identify you within the app.
• Band and studio data you enter: bands, members, songs, setlists, gigs, merchandise, financial entries, studio projects, gear, calendar events, and electronic press kit (EPK) information.
• Contacts (CRM): names, email addresses, phone numbers, and other contact details you choose to store for venues, promoters, or other contacts.
• Invitations: when you invite someone to a band, we store the name and email address you enter so the invitation can be created and sent.

Information collected automatically

• Authentication data: when you sign in with Google, we receive basic profile information (such as your name, email address, and profile picture) needed to create and identify your account.
• Calendar access (only if you connect it): if you connect a band's Google Calendar, we request permission to manage calendar events (the Google calendar.events scope) so the app can create and update that band's events in Google Calendar. We use this only to sync events you create in BandAide. We do not read or store the rest of your calendar for any other purpose.
• No analytics or tracking: BandAide does not use Google Analytics, advertising networks, tracking pixels, or similar technologies. We do not build advertising profiles, and there are no third-party trackers in the app.

Note: the app uses only the cookies and local storage strictly necessary to keep you signed in and to operate. It does not use cookies for advertising or cross-site tracking.

4. How we use your information

• To provide the app's features — letting you and your bandmates manage your own gigs, setlists, songs, finances, contacts, calendar, and related data.
• To sign you in and keep your account secure.
• To send transactional emails, specifically band invitations, so the people you invite can join.
• To sync calendar events to a band's Google Calendar, if and only if that band has connected one.

We do not use your information for advertising, and we do not sell or rent it.

5. Who we share information with

We do not sell your personal information. We share data only with the service providers that make the app function ("processors"), and only as needed to provide the service:

• Supabase — our database, authentication, and backend hosting provider. The data you enter is stored here. See Supabase's privacy policy at supabase.com/privacy.
• Google — used for sign-in and, optionally, calendar sync. See Google's privacy policy at policies.google.com/privacy.
• Resend — used to deliver invitation emails. See Resend's privacy policy at resend.com/legal/privacy-policy.

We may also disclose information if required by law, or to protect the rights, safety, or property of our users or others.

BandAide's use of Google data

BandAide's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide and improve the sign-in and calendar-sync features described above, and we do not transfer or use it for advertising, or for any purpose unrelated to those features.

6. How long we keep your information

We keep your information for as long as your account is active or as needed to provide the app. If you want your account and associated personal data deleted, contact us at kgriffes@gmail.com and we will delete it, subject to any data we must retain for legal reasons. Note that data shared within a band (for example, gigs or setlists you created) may remain visible to that band after your departure, as it forms part of the band's shared records.

7. How we protect your information

Data is stored with our backend provider (Supabase) and protected in transit using encryption (HTTPS). Access to band data is restricted to members of the relevant account. No system is perfectly secure, but we take reasonable measures to protect your information.

8. Your choices and rights

• You can view and edit much of your information directly within the app.
• You can disconnect a band's Google Calendar at any time to stop calendar syncing.
• You can request access to, correction of, or deletion of your personal data by emailing kgriffes@gmail.com.
• Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. We will honor valid requests under applicable law.

9. Changes to this policy

We may update this policy as the app evolves. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you within the app.

10. Contact

Bring the Craic, LLC
Email: kgriffes@gmail.com

This policy describes the app's actual data practices as of the date above. It is provided in good faith and in plain language; it is not legal advice. As BandAide grows or its data practices change, this policy should be reviewed and updated accordingly.