NeedleCheck Privacy Notice
Last updated: 13 October 2026.
NeedleCheck is in a closed test with a small group of invited people. This notice explains what the test version of the app collects, why, where it goes and how long it stays. We will update it when the app changes, and show the new date at the top.
Who is responsible
Anton Astapenka, a private person in Poland, is the controller of your data. Contact: privacy@needlecheck.app
Short version
- You do not need an account. The app creates an anonymous ID for your installation.
- A barcode scan sends only the barcode number.
- We do not use analytics, advertising or crash reporting in the test version.
- We do not sell your data.
What we collect and why
| Data | Why | Where it is stored | How long |
|---|---|---|---|
| Anonymous user ID and sign-in tokens | To let the app use our server and to protect it from misuse | Supabase (EU, Frankfurt); tokens also in your phone's secure storage | Until you ask us to delete it by email (see "Your rights") |
| Barcode number | To find the album | Not stored. Our server keeps answers in memory for up to 1 hour to make repeat scans faster | Up to 1 hour in memory |
| Search text you type | To find the album | Not stored. Same short in-memory cache | Up to 1 hour in memory |
| Your country (from your phone's region setting) | To show the albums and previews available in your country | Not stored | Only for the request |
| Technical logs (time of request, IP address, result code) | Security and error search | Supabase platform logs | 1 day |
We do not collect your name, email, phone number, birth date, contacts, photos or location. The app asks for camera access only to read barcodes. The camera image is processed on your phone and does not leave it.
Who receives data
We use these services to run the app:
- Supabase (hosting, database, server functions). Region: EU (Frankfurt).
- Apple (album data, cover images, 30-second previews). Our server asks Apple for album data with the barcode, search text and country. When you play a preview or see a cover, your phone loads it directly from Apple, so Apple receives your IP address. See the Apple Privacy Policy.
- MusicBrainz (MetaBrainz Foundation). When Apple does not know a barcode, our server asks MusicBrainz with the barcode number only.
- Cloudflare hosts this page.
"Open in Apple Music" and "Open in Spotify" open those apps or websites. Their own privacy policies apply there.
Legal basis
- To provide the features you use (scan, search, previews): performance of our agreement with you (GDPR Art. 6(1)(b)).
- Security and error search: our legitimate interest in a safe service (GDPR Art. 6(1)(f)).
Age
NeedleCheck is for people aged 16 and over. The app asks you to confirm this before the first scan.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable format. Write to privacy@needlecheck.app. The test version has no accounts, so include your user ID from the Profile screen of the app. We delete all data linked to that ID within 30 days.
You can also complain to a data protection authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl), or the authority of the EU country where you live.
Changes
This is a test version. When we change what we collect, we update this notice and the date at the top before the change reaches the app.