Effective date: September 8, 2026
Last updated: September 8, 2026

This Privacy Policy explains how Sideby ("Sideby," "we," "us," or "our") handles information when you use the Sideby mobile app. Sideby is operated by Darío Martínez Bajo, an individual based in Spain. A postal address is available on request. For privacy questions or requests, contact dariomartinezbajo@gmail.com.

Sideby is designed to be local-first. Your record collection, room design, and cover photos are stored on your device and are not uploaded to Sideby servers.

Information we handle

Collection and room data

Sideby stores the following information locally on your device:

• Records you add, including titles, artists, release details, and cover images

• Your shelves, record placement, decorations, and room appearance

• The name you choose to enter during onboarding, your onboarding progress, and app preferences

• Images generated for the Sideby widget

Sideby does not currently provide user accounts or cloud synchronization. A name entered during onboarding remains on your device; we do not receive it. We do not collect your email address, contacts, precise location, or a cloud copy of your collection.

Camera and cover photos

If you grant camera permission, Sideby uses the camera to photograph a record cover. The image is processed and stored locally in the app's private storage. Sideby does not upload your camera photos to us, PostHog, RevenueCat, Discogs, or an image-recognition service.

You can deny camera permission, but features that require scanning a cover will not work. Sideby does not record or use audio. The current Android camera configuration may nevertheless cause Android to list microphone permission alongside camera permission.

Analytics and technical data

When Sideby is built with PostHog analytics configured, Sideby uses PostHog to collect a limited set of events about how the app is used, such as whether onboarding was completed, the camera was opened, a photo was captured or retaken, a record was placed, or the room was customized.

These events may include limited properties such as the onboarding step, photo attempt number, type of customization, whether a record was the first one added, a broad range for the number of records in the collection, and basic app, operating-system, and device information supplied by the analytics software.

Sideby configures PostHog to disable session replay, automatic app-lifecycle events, IP-based geolocation, and remote feature flags. We do not send PostHog your photos, record titles, artists, release identifiers, exact collection size, name, email address, or precise location. PostHog uses an automatically generated identifier to distinguish app installations or devices; Sideby does not connect that identifier to your identity.

Purchases and subscriptions

Sideby uses RevenueCat to manage purchase offerings, subscriptions, lifetime purchases, entitlements, and purchase restoration. RevenueCat receives an automatically generated anonymous customer identifier and information needed to verify and manage your purchase status.

Payments are processed by Apple through the App Store. Sideby and RevenueCat do not receive your full payment-card details from Apple.

Remote cover images

Some record cover images included in the current app are loaded from Discogs' image delivery service. When your device requests one of these images, Discogs or its delivery provider receives the address of the specific cover image requested and may receive information normally sent with an internet request, such as your IP address and basic request or device information. Sideby does not upload your camera photos or send a separate copy of your collection or onboarding name to Discogs.

How we use information

We use information only to:

• Provide the app's collection, scanning, customization, widget, and purchase features

• Save your collection and room on your device

• Process and restore purchases and determine access to paid features

• Understand broad feature usage and improve reliability and usability

• Prevent abuse, diagnose failures, and protect the app and its services

• Respond to support and privacy requests

We do not sell your personal data. We do not use your information for third-party advertising, cross-app tracking, or profiling for advertising purposes.

Legal bases

Where the General Data Protection Regulation (GDPR) applies, we rely on:

• Performance of a contract to provide the app and manage purchases

• Legitimate interests to understand broad product usage, improve the app, diagnose failures, prevent abuse, and keep the service secure

• Consent for access to the camera and where consent is otherwise required by law

• Legal obligations where we must retain or disclose information to comply with applicable law

You may withdraw consent through your device settings. You may also object to processing based on legitimate interests by contacting us.

Service providers

We share information only with providers needed to operate Sideby:

Provider Purpose

PostHog Privacy-limited product analytics, processed through PostHog's EU service endpoint

RevenueCat Purchase, subscription, entitlement, and restoration management

Apple App distribution, camera permission controls, App Store payments, purchase history, and the iOS widget environment

Discogs and its image delivery provider Delivery of certain record cover images included in the app

These providers process information under their own privacy policies and may process it outside your country.

International transfers

PostHog analytics are sent to its European Union endpoint. RevenueCat, Apple, Discogs, and their providers may process information in the United States or other countries. Where the GDPR requires safeguards for a transfer outside the European Economic Area, we rely on applicable transfer mechanisms, such as adequacy decisions or the European Commission's Standard Contractual Clauses.

Storage and retention

Your collection, room, preferences, onboarding name, and cover photos remain in Sideby's private storage on your device. Sideby's local data is removed when you delete the app, subject to normal device backups and operating-system behavior. Widget images are stored locally in Sideby's shared iOS app-group container so the widget can display them. The operating system may also temporarily retain camera files or cached remote images under its normal storage and cache-management behavior.

PostHog retains limited analytics data, and RevenueCat retains purchase and entitlement records, for as long as reasonably necessary to provide their respective services, meet legal obligations, resolve disputes, and enforce agreements. Apple may retain transaction records under its own legal and accounting obligations. You may contact us to request deletion of data under our control. Some purchase records may need to be retained by Apple, RevenueCat, or us where required by law or necessary to preserve transaction records.

Your choices and rights

You can:

• Deny or revoke camera access in iOS Settings

• Remove Sideby's local data by deleting the app, subject to device backups and operating-system behavior

• Contact us to request access to, correction of, deletion of, restriction of, or a copy of personal data under our control

• Object to certain processing or withdraw consent where applicable

If you are in the EU or EEA, you also have the right to lodge a complaint with your local data-protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.

Because Sideby does not currently provide accounts or cloud synchronization, we generally cannot retrieve or delete local app data on your behalf. That data remains under your control on your device.

Security

Sideby's local data is kept within the app's private storage and iOS app-group storage used by the widget. Connections to PostHog, RevenueCat, Apple, and remote image services use encrypted HTTPS connections. No method of storage or transmission is completely secure, but we use reasonable technical and organizational measures appropriate to the information we handle.

Children's privacy

Sideby is not directed to children under 14. We do not knowingly collect personal data from children under 14. If you believe a child has provided personal data to Sideby or one of its services, contact us and we will take appropriate steps to delete it.

Changes to this policy

We may update this Privacy Policy when Sideby's features, providers, or legal obligations change. We will publish the updated policy and revise the date at the top. If a change materially affects how we handle personal data, we will provide additional notice where required.

Contact

For questions, concerns, or privacy requests, email dariomartinezbajo@gmail.com.