Privacy Policy
Effective: 13 August 2026 · Last updated: 15 September 2026
BlendMyx is a small social music app. You make playlists together with friends — everyone submits a song, everyone votes, a winner emerges. This policy explains exactly what we collect, who we send it to, what happens when you delete your account, and what we keep afterwards.
Who we are
BlendMyx is operated by Ardea LLC. If you have a privacy question or request, email support@blendmyx.com. That address is also how you can ask us to delete your account if you cannot reach the app.
What we collect
Account details
When you sign up we collect your email address and either a password, a Google Sign-In identity, or a Sign in with Apple identity. Passwords are handled by Firebase Authentication — we never see or store your password ourselves. If you use Sign in with Apple and choose to hide your email, we receive Apple's private relay address instead of your real one. The first time you sign in with Apple, Apple may also share the name on your Apple Account; we use it only to suggest your username, and you can change that at any time.
Your profile
A username, an optional profile photo, and an optional local time zone if you choose to share it (off by default). Achievements and placement counts are recorded as you play.
What you create and do in the app
The blends you join, the songs you submit and any note you attach to them, the votes you cast, comments you post, direct messages you send, and your friend connections and blocks.
Spotify
You do not connect a Spotify account to BlendMyx, and we never receive your Spotify account details or a token for it. When you search for a song, submit a track, or open a round's playlist, BlendMyx's own servers talk to Spotify on behalf of the app: track search and metadata use an app-level Spotify credential, and playlists are created in a single Spotify account that BlendMyx owns. The track you pick, and the Spotify links to it and to the playlist, are stored with the blend. Opening a playlist takes you to Spotify's own app or website, where Spotify's privacy policy applies.
Notifications (optional)
If you allow notifications, we store a device notification token so we can send you push messages. Notification text can include usernames and blend names. Direct-message notifications deliberately do not include the message text.
Analytics and product usage
We use PostHog to understand how the app is used: screens viewed, actions taken (creating a blend, submitting, voting), performance measurements, and error reports. Your account ID and email address are attached so we can tell sessions apart. Like any web service, PostHog receives your device's IP address with each event and may derive an approximate region (such as country, state or city) from it; the app itself never asks for or reads your device's location. PostHog may also record session replays of app usage when we turn that on; text you type into inputs is masked, sensitive areas such as chat and feedback are excluded from recording, and replays capture the app's own technical console messages.
We also use PostHog on blendmyx.com before you sign in, to understand how people find and use the website. This may include the pages you visit, how you arrived at the site (such as from a search engine or another website), interactions such as clicking a signup or login button, and basic performance measurements. PostHog uses browser storage, including cookies, to associate activity from the same browser. If you later sign in, that earlier website activity may become associated with your BlendMyx account. We do not record session replays of the website.
Feedback you send us
The "Send Feedback" form on your profile sends whatever you write to PostHog, where we read it.
Optional diagnostics
Detailed error logs are off by default. They are only recorded if diagnostics are explicitly enabled on your device, and they contain technical information such as error messages, the screen you were on, and a session identifier.
What we do not do
- We do not show ads and there are no advertising SDKs in the app.
- We do not sell your personal information.
- We do not access your device's location (GPS), your contacts, or your photo library; the only photo we receive is one you pick for your profile. The approximate region our analytics provider derives from your IP address is described above.
What other people can see
- Your username and profile photo are visible to other signed-in BlendMyx users.
- Your profile photo file is publicly readable on the internet by anyone who has its link. Photos are re-encoded on upload, which removes embedded camera metadata such as location.
- Songs you submit, votes once a round closes, comments, and results are visible to members of that blend.
- The note you attach to a submission is hidden in the interface until results are shown, but it is not technically concealed from other members of the blend. Please do not put anything private in it.
- Direct messages are visible to the person you send them to.
Who we share data with
We use a small number of service providers to run BlendMyx. They process data on our behalf:
| Service | What it handles |
|---|---|
| Google Firebase | Sign-in, database, file storage, server functions, push notifications, and website hosting. |
| PostHog (United States) | Product analytics, session replay, error reporting, and the feedback you send us. |
| Spotify | Track search, track metadata and artwork, and playlist creation, requested by BlendMyx's servers with the app's own credentials. No account of yours is involved; Spotify sees your device only when you open a playlist or track link in Spotify itself. |
We may also disclose information if we are legally required to, or where it is necessary to investigate abuse or protect people's safety.
How we protect your data
- Traffic between the app and our servers uses HTTPS, and data is stored on Google Cloud infrastructure.
- Database access rules restrict what each account can read and write. The app-level Spotify credential BlendMyx uses is held only by our server functions; no client app can read it.
- Deleting your account requires a recent sign-in, so a stale session cannot destroy your account.
Deleting your account
You can delete your account in the app under Profile → Danger Zone → Delete Account. If you cannot reach the app, you can request deletion by emailing support@blendmyx.com. Full instructions are on the account deletion page.
Deletion is permanent and cannot be undone. Here is precisely what happens.
Deleted
- Your sign-in identity and email address. If you signed in with Apple, we also ask Apple to disconnect BlendMyx from your Apple Account; if that request cannot be completed, your account is still deleted and you can remove BlendMyx yourself under Settings → Apple Account → Sign in with Apple.
- Your profile details and your profile photo file.
- Your notification tokens.
- Your notifications, settings, blocks, achievements records, and the comments you posted.
- The text of chat messages you sent, in every conversation. Each message is replaced in place by "Message removed".
- Your friend connections.
- Your analytics profile and events in PostHog, including any session replays.
Kept, but disconnected from you
Some things you contributed are part of other people's records too. Removing them would change results other members already saw, so they stay — shown as "Deleted user" rather than your name:
- Votes you cast, songs you submitted, and final standings in blends you played. Blend results are calculated from these, so deleting them would silently rewrite completed rounds for everyone else.
- The record that a message existed at a given point in a conversation, so the other people in it keep their own messages and the order of the conversation. It shows as "Deleted user: Message removed"; the text itself is removed, as described above.
- A minimal placeholder profile so that the above still displays as "Deleted user" instead of breaking.
Free-text notes you attached to song submissions are removed as part of deletion.
Kept for safety and record-keeping
- Reports of abuse — both reports you made and reports about you — and moderator actions, where these are needed for safety, abuse prevention, enforcement, or to meet a legal obligation.
- A small permanent marker for each past friend request. It contains no message content and exists to stop friend-request records being replayed or forged.
- A limited deletion record noting that your account was deleted and which steps completed. It documents the deletion and prevents a deleted account or its data from being recreated.
How long we keep things
We keep information for as long as it is needed for the purpose it was collected for. Your account data is kept while your account exists and is removed when you delete it, as described above. Analytics and feedback are kept while they remain useful for understanding and improving the app. Optional diagnostic and error information is kept as long as needed for debugging, reliability and security. Safety, moderation and deletion records are kept while they are needed for those purposes or to meet a legal obligation.
Your choices and rights
- Access — ask us what information we hold about you.
- Correction — your username, photo and time zone are editable in the app; email us for anything else.
- Deletion — delete your account in the app, or email us.
- Questions — ask us anything about this policy.
Email support@blendmyx.com and we will help. You can also turn off notifications and leave the optional diagnostics setting off.
Age requirement
BlendMyx is intended for people aged 16 and over. It is not intended for children under 16, and we do not knowingly collect information from anyone under 16. If you believe someone under 16 has created an account, email support@blendmyx.com and we will remove it.
Changes to this policy
If we make a material change we will update the date at the top of this page. Continued use of BlendMyx after a change means the updated policy applies.
Contact
Ardea LLC — support@blendmyx.com