GruKit Privacy Policy

Your account. When you sign in with Apple, Google, or an email address, Firebase Authentication gives us your user ID, email address, and display name. We use them to create and secure your account.

Audio Finder. When you start Audio Finder, including from Control Center or Siri, GruKit listens through the microphone and uses Apple's ShazamKit to identify the song. GruKit does not record or keep the audio. The songs it identifies (title, artist, artwork, and links) are saved in your Audio Finder history on your device.

Discogs lookups. To show the matching release and its prices, GruKit sends the song title and artist, or the barcode you scanned, to Discogs. Barcode searches pass through a Granulab server, which asks Discogs on your behalf. If you connected a Discogs account in an earlier version of GruKit, its access token stays on your device, is used only to fetch price suggestions, and is removed when you sign out.

Camera. With your permission, the Barcode Scanner uses the camera to read a record's barcode. The camera image is processed on your device; only the barcode number is sent for the search.

Motion sensors. Turntable Health and Vibration Shield read your device's motion sensors. These readings are processed on your device and never leave it.

Notifications and announcements. If you allow notifications, we store your device's push token with your account so Firebase Cloud Messaging can deliver alerts and app announcements. We also record which announcements you have read so we don't show them again.

Crash reports. Firebase Crashlytics sends us crash reports with technical details about your device and the app, together with your account's user ID, so we can find and fix problems.

App security and configuration. Firebase App Check confirms requests come from the genuine app, and Firebase Remote Config lets us turn features on or off without an app update.

What we don't collect. GruKit does not use advertising or analytics tracking, does not offer subscriptions or in-app purchases, and does not use your photo library.

On your device. Your Audio Finder history, Flight Bag settings, and app preferences are stored on your device. Signing out clears your Audio Finder history.

With Firebase. Your account, push token, announcement read status, and crash reports are stored with Google Firebase services operated for Granulab.

Earlier versions. Earlier versions of GruKit managed a record collection and saved Audio Finder history to your account. This version removes the old collection data from your device, and copies your saved Audio Finder history to your device the first time you open History. Any of that data still held on our servers is deleted when you delete your account, or sooner if you ask us.

We use reasonable administrative, technical, and organizational safeguards to protect data, but no system can be guaranteed completely secure.

GruKit uses these services to provide its features: Apple ShazamKit, Sign in with Apple, Google Sign-In, Firebase Authentication, Cloud Firestore, Firebase Cloud Messaging, Firebase In-App Messaging, Firebase Crashlytics, Firebase App Check, Firebase Remote Config, and the Discogs API.

These providers process only the data needed for the services they support, and their handling of data is also governed by their own privacy terms and policies.

We do not sell your personal information or share it with data brokers or advertisers.

We share data only as needed to provide what you asked for: signing you in, identifying songs, looking up records on Discogs, delivering notifications, reporting crashes, securing app requests, or responding to lawful requests.

You can request access to your data, or request deletion of your account and associated service data, by emailing info@granulab.xyz or by using the in-app deletion flow described at /grukit/account-deletion.

You can turn camera, microphone, motion, and notification access on or off at any time in iOS Settings.

We keep personal data only as long as needed to run GruKit and your account, meet legal obligations, resolve disputes, and enforce our agreements.

Data on your device stays there until you sign out, delete it in the app, or remove the app.

When you delete your account, we delete or anonymize the service data we control within a reasonable period, except where we must keep it for legal, tax, fraud-prevention, security, or accounting purposes.