Privacy at Auxed.

01

Overview

This policy explains how RocketScience IT handles information when you use the Auxed app on iPhone or Android, or visit an Auxed website. RocketScience IT, based in the Netherlands, is responsible for Auxed.

We use information only to operate Auxed, keep it secure, deliver the features you request, diagnose failures, and provide support. We do not sell or rent personal information, build advertising profiles, or use it for cross-app tracking.

02

Your account and profile

Auxed uses Sign in with Apple and Sign in with Google through Firebase Authentication. Apple, Google, and Firebase provide identifiers needed to authenticate your account. Depending on your provider choices, Firebase may also receive an Apple relay address or Google account email address. Auxed never receives your Apple Account or Google password and does not display your email address to other people.

The Android app requests a Google identity token only. It does not request access to your Google data, and Auxed does not retain a Google access or refresh token.

Your Auxed profile contains the display name you confirm, a preset avatar colour, and an optional profile photo. Auxed also stores a random internal account identifier so that app records do not need to use your sign-in provider identifier directly.

If you upload a profile photo, Auxed stores bounded display and master copies in private Firebase Cloud Storage. The photo and your display name are shown only where needed for people who are connected to you through Auxed.

03

Recommendations, friends, and groups

To provide its core features, Auxed stores your accepted friendships, invitations, blocks, group memberships, group settings, and the recommendations you send or receive.

A recommendation can include the original Apple Music or Spotify link, its provider and item type, optional music metadata and artwork, an optional personal note, its direct or group destination, timestamps, and explicit reactions. The original provider link remains the source of truth even when metadata is unavailable.

Ordinary link sharing does not require access to your music account. Auxed does not inspect your listening history or treat opening a link as proof that you listened. Senders do not receive passive opened, seen, or listened receipts. Explicit emoji and text reactions are shared with the recommendation’s participants; only the original sender receives reaction alerts.

On iPhone, optional MusicKit features request Apple Music permission to share the current song through a Shortcut or add a supported song or album to your library after you choose that action. This permission is not needed to share or open ordinary music links.

Friends and group members see only the profile and shared information needed for that relationship. Manual group invitations remain private until accepted: pending invitees cannot see the member list or receive group recommendations. Group appearance can include an owner-selected colour, mark, or privately stored image, which may be copied into recommendations from that group. Invitation links and group links are opaque credentials. Generic web landing pages do not inspect them or reveal who created them.

04

Notifications, security, and diagnostics

If you enable notifications, Auxed stores a random installation identifier, notification registration token, notification preference, and limited delivery state. Apple Push Notification service and Firebase Cloud Messaging deliver the notification. A recommendation or reaction alert may include a display name, limited music presentation, the optional recommendation note, or a text-reaction reply so the alert is useful. This content may be visible on the Lock Screen according to your device's notification-preview settings; the app remains the source of truth.

Firebase App Check, Apple App Attest, and Google Play Integrity may process device and app-integrity information to help distinguish authentic Auxed installations from abuse.

Auxed uses Firebase Crashlytics for crash and reliability diagnostics. Crashlytics may process crash traces and limited app, device, and operating-system information. Auxed sends fixed diagnostic categories rather than names, music links, messages, friend or group details, invitation credentials, or authentication secrets.

Auxed uses Firebase Analytics in the main iPhone and Android apps to understand aggregate app adoption and basic feature use. It may process automatically collected app interactions and limited app, device, operating-system, and approximate region information using a pseudonymous app-instance identifier. Auxed does not attach your Auxed account identity or user-generated content to analytics events, and disables advertising-identifier collection and personalized-ad signals.

Auxed uses RevenueCat to check, purchase, and restore Auxed Plus. RevenueCat receives your internal Auxed account identifier, purchase and entitlement information, and limited technical information. Payment details are handled by the App Store or Google Play; Auxed does not receive your payment-card details. Your Plus status is not shared with friends or group members.

The app also keeps protected local caches and a durable on-device queue for recommendations that still need to be delivered. The iPhone Share Extension and Android Sharesheet can write to that queue; the Home Screen widget reads only one small latest-recommendation snapshot written by the main app. That snapshot stays until a newer received recommendation replaces it or an account, relationship, or empty-inbox lifecycle event clears it.

05

Music services and service providers

Auxed shares information with service providers only where needed to provide the app, complete a request you make, protect the service, comply with law, or handle support.

• Google FirebaseAuthentication, database, server functions, profile and group-image storage, push delivery, app attestation, crash diagnostics, aggregate app analytics, and website hosting.Firebase privacy information
• GoogleSign in with Google, Google Play distribution and purchases, and Play Integrity app attestation.Google Privacy Policy
• AppleSign in with Apple, push notifications, TestFlight and App Store distribution and purchases, App Attest, and optional MusicKit current-song sharing and add-to-library actions.Apple Privacy Policy
• Apple MusicBest-effort catalogue metadata, artwork, storefront availability, and optional exact track and artist matching when you share a supported link.Apple Music & Privacy
• SpotifyBest-effort public metadata and optional exact track and artist matching for supported Spotify links. Auxed does not ask you to sign in to Spotify.Spotify Privacy Policy
• RevenueCatAuxed Plus purchase verification, entitlement checks, and restoration using your internal Auxed account identifier.RevenueCat Privacy Policy

Resolving music presentation can send the public provider identifier or link information needed for that request to Apple Music or Spotify. Provider failure never invalidates the recommendation itself.

06

Storage, location, and retention

Auxed stores its primary database in Google Cloud's European eur3 multi-region and runs its server functions in europe-west1. Firebase Authentication and globally operated services may process information outside the European Economic Area, including in the United States. The providers above describe their international-transfer safeguards in their own terms and privacy information.

Account, relationship, group, and recommendation information is generally kept while your account is active and while it is needed to provide the relevant private history. Friend invitation links expire after seven days; reusable group links stay available until rotated, disabled, or the group is closed. Stale notification installations are pruned, and successful on-device music presentation caches expire automatically.

Operational security, crash, and aggregate analytics records are kept according to configured operational needs and the applicable provider terms. We aim to keep them only as long as they remain useful for product decisions, reliability, security, legal obligations, or resolving a request.

Deleting your Auxed account removes your login, profile, profile photo, relationships, owned groups, group memberships, invitations, blocks, notification devices, and private account projections through a resumable deletion process. A recommendation already retained by somebody else may remain in that person's inbox, but its sender becomes “Deleted user” and your personal annotation and reactions are removed. Store purchase records are handled separately by Apple or Google and RevenueCat; contact us for purchase-related personal-data requests. A minimal non-login deletion record may remain to prevent accidental restoration and document completion.

07

Your choices and privacy rights

You can edit your display name and avatar, manage friends and groups, block or unblock people, change notification permissions, stop retrying a pending recommendation, sign out, or delete your account from within Auxed. Notification permission can also be changed in your device settings.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the use of your personal information, and to receive a portable copy. Where processing relies on consent, you may withdraw that consent.

Email info@rocketscience-it.nl to make a privacy request. We may ask for enough information to locate the relevant account and confirm that the request belongs to you. You may also complain to your local data-protection authority; in the Netherlands, this is the Autoriteit Persoonsgegevens.

08

The Auxed website

The Auxed website does not use advertising or analytics cookies. Firebase Hosting delivers and protects the pages and may process basic request information such as your IP address, browser information, requested page, and timestamp for delivery, security, and operational purposes.

Invitation and group landing pages are deliberately generic and marked not to be indexed. They do not look up the credential in the URL, expose its validity, or reveal the identity of the person who shared it.

09

Changes to this policy

Auxed will continue to change as it develops. We will publish updates on this page and change the date at the top. If a change materially affects how we handle personal information, we will provide a clearer notice where appropriate.

10

Questions or requests?

Auxed is made by RocketScience IT in the Netherlands. Email info@rocketscience-it.nl and we will be glad to help.