Privacy Policy
Effective: 13 August 2026 · Last updated: 24 August 2026
BlendMyx is a small social music app. You make playlists together with friends — everyone submits a song, everyone votes, a winner emerges. This policy explains exactly what we collect, who we send it to, what happens when you delete your account, and what we keep afterwards.
Who we are
BlendMyx is operated by Ardea LLC. If you have a privacy question or request, email support@blendmyx.com. That address is also how you can ask us to delete your account if you cannot reach the app.
What we collect
Account details
When you sign up we collect your email address and either a password or a Google Sign-In identity. Passwords are handled by Firebase Authentication — we never see or store your password ourselves.
Your profile
A username, an optional profile photo, and an optional local time zone if you choose to share it (off by default). Achievements and placement counts are recorded as you play.
What you create and do in the app
The blends you join, the songs you submit and any note you attach to them, the votes you cast, comments you post, direct messages you send, and your friend connections and blocks.
Spotify (optional)
If you connect Spotify, we receive your Spotify account ID and display name, and we store an access token on our servers so BlendMyx can search tracks and build playlists for you. The permissions BlendMyx requests include reading your Spotify profile and email and creating and modifying playlists. You can disconnect at any time; because Spotify controls the connection itself, you can also remove BlendMyx from your Spotify account settings.
Notifications (optional)
If you allow notifications, we store a device notification token so we can send you push messages. Notification text can include usernames and blend names. Direct-message notifications deliberately do not include the message text.
Analytics and product usage
We use PostHog to understand how the app is used: screens viewed, actions taken (creating a blend, submitting, voting), performance measurements, and error reports. Your account ID and email address are attached so we can tell sessions apart. PostHog also records session replays of app usage; text you type into inputs is masked, and sensitive areas such as chat and feedback are excluded from recording. Replays also capture the app's own technical console messages.
We also use PostHog on blendmyx.com before you sign in, to understand how people find and use the website. This may include the pages you visit, how you arrived at the site (such as from a search engine or another website), interactions such as clicking a signup or login button, and basic performance measurements. PostHog uses browser storage, including cookies, to associate activity from the same browser. If you later sign in, that earlier website activity may become associated with your BlendMyx account. We do not record session replays of the website.
Feedback you send us
The "Send Feedback" form on your profile sends whatever you write to PostHog, where we read it.
Optional diagnostics
Detailed error logs are off by default. They are only recorded if diagnostics are explicitly enabled on your device, and they contain technical information such as error messages, the screen you were on, and a session identifier.
What we do not do
- We do not show ads and there are no advertising SDKs in the app.
- We do not sell your personal information.
- We do not collect your location, contacts, or photo library.
What other people can see
- Your username and profile photo are visible to other signed-in BlendMyx users.
- Your profile photo file is publicly readable on the internet by anyone who has its link. Photos are re-encoded on upload, which removes embedded camera metadata such as location.
- Songs you submit, votes once a round closes, comments, and results are visible to members of that blend.
- The note you attach to a submission is hidden in the interface until results are shown, but it is not technically concealed from other members of the blend. Please do not put anything private in it.
- Direct messages are visible to the person you send them to.
Who we share data with
We use a small number of service providers to run BlendMyx. They process data on our behalf:
| Service | What it handles |
|---|---|
| Google Firebase | Sign-in, database, file storage, server functions, push notifications, and website hosting. |
| PostHog (United States) | Product analytics, session replay, error reporting, and the feedback you send us. |
| Spotify | Only if you connect it: track search and playlist creation in your own Spotify account. |
We may also disclose information if we are legally required to, or where it is necessary to investigate abuse or protect people's safety.
How we protect your data
- Traffic between the app and our servers uses HTTPS, and data is stored on Google Cloud infrastructure.
- Database access rules restrict what each account can read and write. Your Spotify token is stored where no client app can read it — only our server functions can.
- Deleting your account requires a recent sign-in, so a stale session cannot destroy your account.
Deleting your account
You can delete your account in the app under Profile → Danger Zone → Delete Account. If you cannot reach the app, you can request deletion by emailing support@blendmyx.com. Full instructions are on the account deletion page.
Deletion is permanent and cannot be undone. Here is precisely what happens.
Deleted
- Your sign-in identity and email address.
- Your profile details and your profile photo file.
- Your Spotify connection token and notification tokens.
- Your notifications, settings, blocks, achievements records, and the comments you posted.
- Your friend connections.
- Your analytics profile and events in PostHog, including session replays.
Kept, but disconnected from you
Some things you contributed are part of other people's records too. Removing them would change results other members already saw, so they stay — shown as "Deleted user" rather than your name:
- Votes you cast, songs you submitted, and final standings in blends you played. Blend results are calculated from these, so deleting them would silently rewrite completed rounds for everyone else.
- Direct messages you sent remain visible to the people you sent them to, along with the record that they came from your (now deleted) account. A conversation belongs to both people in it.
- A minimal placeholder profile so that the above still displays as "Deleted user" instead of breaking.
Free-text notes you attached to song submissions are removed as part of deletion.
Kept for safety and record-keeping
- Reports of abuse — both reports you made and reports about you — and moderator actions, where these are needed for safety, abuse prevention, enforcement, or to meet a legal obligation.
- A small permanent marker for each past friend request. It contains no message content and exists to stop friend-request records being replayed or forged.
- A limited deletion record noting that your account was deleted and which steps completed. It documents the deletion and prevents a deleted account or its data from being recreated.
How long we keep things
We keep information for as long as it is needed for the purpose it was collected for. Your account data is kept while your account exists and is removed when you delete it, as described above. Analytics and feedback are kept while they remain useful for understanding and improving the app. Optional diagnostic and error information is kept as long as needed for debugging, reliability and security. Safety, moderation and deletion records are kept while they are needed for those purposes or to meet a legal obligation.
Your choices and rights
- Access — ask us what information we hold about you.
- Correction — your username, photo and time zone are editable in the app; email us for anything else.
- Deletion — delete your account in the app, or email us.
- Questions — ask us anything about this policy.
Email support@blendmyx.com and we will help. You can also turn off notifications, disconnect Spotify, and leave the optional diagnostics setting off.
Age requirement
BlendMyx is intended for people aged 16 and over. It is not intended for children under 16, and we do not knowingly collect information from anyone under 16. If you believe someone under 16 has created an account, email support@blendmyx.com and we will remove it.
Changes to this policy
If we make a material change we will update the date at the top of this page. Continued use of BlendMyx after a change means the updated policy applies.
Contact
Ardea LLC — support@blendmyx.com