Privacy notice

The Curator writes the stories of records and artists when you ask it: the provider receives what the Curator receives, and nothing of the circle goes into the

Last updated: 2026-10-30. The Italian text prevails where translations differ.

1. Who processes your data

The data controller is Davide Caricati. For any question or request about your data write to support@spinery.it.

2. What data and why

• Account: e-mail address, display name, password (stored only as a non-reversible hash, never in clear), language, and your profile photo if you choose to upload one. Needed to sign you in, for circle invitations and for service e-mails (address confirmation, new password, deletion).
• Signing in with Google (optional): if you sign in with “Continue with Google”, Google confirms who you are and passes us only three things: an identifier of your Google account, your e-mail address, already verified by Google, and your name, which becomes your starting display name and you can change. We do not receive your Google password or profile photo, and we send Google none of your collection data. The link serves only to sign you in: you remove it in the app (your photo or initial at the top right → My account → Sign-in methods), as long as you have another way to sign in, and it disappears at once when you delete your account.
• The collection: records, editions, copies with their provenance, prices, the notes and stories you write, photos of copies and covers, ratings, wishes, classifications. They are the service itself. They belong to your circle: its members see them, nobody else. Provenance may contain the names of other people (for example who gave a record as a gift): the members of the circle write them, and anyone who recognises themselves can ask for their removal by writing to support@spinery.it.
• Device: an installation identifier (Google Firebase) to deliver the notifications you turned on, and the app version. The text of some notifications (for example the title, artist and price of a wish) passes through Google Firebase. You can turn notifications off at any time in the app or in the system.
• Discogs (optional): if you link your Discogs account we keep an encrypted access token to import your collection and wantlist. You can revoke it from the app and from your Discogs settings.
• Artificial intelligence: it is part of the service you accept with the Terms (the Curator, the weekly suggestions, the monthly summary, adding from a photo, search help, the stories of records and artists); AI features are included, within a limit for each member; beyond the limit you can use a key of your own, from the provider you choose. Your key stays on your phone; it travels inside each request and is never stored on our servers nor written to logs. We count how many times you use the AI features and how much text they process, to apply the limits.

  When you use the artificial-intelligence features, Spinery sends the provider only what it needs:

  • for the Curator and the monthly summary, the circle's records and wishes with locations, members' ratings and estimated values and, when the question calls for it, the details of a record, including provenance, price paid and story;
  • for the weekly suggestions, the circle's records with your ratings, your wishes and past suggestions, never notes, provenance or prices;
  • for adding from a photo, the cover photo;
  • for the stories of records and artists, what the Curator receives, since it writes them when you ask it; nothing of the circle goes into the story that stays on the page for everyone.

  Other members' personal notes are never sent. With the included features the provider is Anthropic, chosen by us, which handles this content under its terms; with your own key, the provider you chose applies.

• Security: a log of the important operations on the account and the circle, the reports you send about AI texts and the backups of the database, to protect the service and to restore it after a failure.
• Acceptance of the Terms: when you accept the Terms we keep a record that is never changed: your account and e-mail address, the time, the version and fingerprint of each text we showed you (Terms, privacy notice, the acceptance page), the language, the two checkboxes (acceptance of the Terms and specific approval of clauses 5, 6, 8, 9 and 10), the app and system version, the IP address and the browser or app identifier (user agent). It serves only to prove that you accepted the Terms, which ones and when.
• Technical logs: the server does not log requests or IP addresses, except the IP address at the moment you accept the Terms (previous item). The hosting provider (fly.io) processes the IP address only to route traffic and protect the network.

There are no ads, no tracking and no third-party analytics, with one exception: the barcode reader (Google ML Kit) works on the phone and sends Google technical data about how it runs (phone model, versions, timings, errors and an installation identifier), which Google uses for diagnostics.

3. On what grounds

• The contract (art. 6(1)(b) GDPR), that is the Terms you accept to use Spinery: the account, signing in with Google if you choose it, the collection and the circle, notifications, service e-mails, the Discogs link you ask for, the artificial-intelligence features and the counting for their limits. Artificial intelligence is a part of the service, not an extra: this is why we do not ask you for a separate consent, and there is no consent to withdraw. If you no longer want your data to go through the AI features, you can delete your account; before that, you can always export your data.
• Legitimate interest (art. 6(1)(f)): the security of the service, the log of operations and the backups; and the circle's interest in keeping and telling the story of its records, which is why the AI's work also includes the ratings, locations and provenance written by the other members (never their personal notes), and why the names of other people stay in the provenance. The record of your acceptance of the Terms also rests on legitimate interest: no law obliges us to keep it, but without it we could neither prove the contract nor defend ourselves in court. You can object to this processing by writing to support@spinery.it; we keep the record of your acceptance anyway, as long as it serves that purpose (art. 21(1)).
• A legal obligation (art. 6(1)(c)): answering your requests about your data and keeping proof of how we carried them out.

To create an account you need an e-mail address, a name and to accept the Terms: without them we cannot provide the service. Everything else is up to you. Spinery takes no decisions based solely on automated processing that have legal or similarly significant effects on you: the Curator and the suggestions propose, you decide.

4. Where the data lives and who helps us

The server and the database are in Frankfurt (fly.io); photos and covers on Tigris; service e-mails go through Resend; requests to the included AI features go to Anthropic; notifications go through Google Firebase. These providers process data on our behalf, only for these purposes and under a contract that obliges them to protect it. Record data comes from Discogs, music previews from Apple iTunes and live videos from YouTube: they are independent services, to which we send none of your personal data; a preview is downloaded from Apple, which sees the phone's IP address, and a video, when you open it, opens on YouTube, outside Spinery. For the videos Spinery uses the YouTube API Services: the Google Privacy Policy applies as well. If you sign in with Google, Google processes your data for the sign-in as an independent controller, under the same policy.

Some providers are United States companies or also process data outside the European Union: fly.io and Tigris are US companies, Resend processes data in the United States and Google may process it outside the Union. These transfers are covered by the European Commission's standard contractual clauses and, for those who have joined it, by the EU-U.S. Data Privacy Framework. Requests to the included artificial-intelligence features go to Anthropic, which processes them in the United States under the European Commission's standard contractual clauses, does not use them to train its models and deletes them within 30 days, except for what is needed for safety or required by law.

5. For how long

As long as your account exists. If you delete your account (in the app: your photo or initial at the top right → My account → Delete the account, or on the Delete your account page) your personal data is erased within 30 days; the backups, which serve only to restore the service after a failure, expire on their own within the following 30 days: within 60 days in all, backups included. The collection belongs to the circle and stays with its members; if you are the last one, it is deleted with you; your notes, ratings and wishes go with your account. The log of operations and the reports about AI texts are kept for 12 months; an account that is never confirmed is deleted after 7 days. The record of your acceptance of the Terms is the exception: it stays as long as the account exists and, after deletion, only its essentials remain (a non-reversible fingerprint of the e-mail address, the versions and fingerprints of the texts, the time and the two checkboxes) for 10 years, the ordinary limitation period under Italian law (art. 2946 of the Civil Code), because it may be needed to defend ourselves in court (art. 17(3)(e) GDPR); then it is deleted.

6. Your rights

You can ask for access to your data, rectification, erasure, restriction and portability, and object to the processing based on legitimate interest: write to support@spinery.it, we answer within one month. The export in the app gives you all the circle's data in one file, and you can have your data even if you do not accept a new version of the Terms: if you cannot get it from the app, we send it to you on request. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (how to), or with the authority of the country where you live.

7. Cookies

The public website and the server's public pages use no cookies: no profiling cookies, no statistics cookies, no technical cookies. The only cookies are technical ones in the console reserved for the service's administrators: one keeps the administrator's session open, the other remembers whether they prefer the light or the dark theme. They do not concern people who use Spinery.

8. Minimum age

To use Spinery you must be at least 14, or the minimum age of your country if it is higher. In Italy the law sets 14 as the age for using a service like this on your own (art. 2-quinquies of the Italian Personal Data Protection Code, which implements art. 8 of the GDPR) and artificial-intelligence systems (art. 4 of Italian Law 132/2025). In other countries the age may be higher, up to 16, and then the age of your country applies: the common rule is article 8 of the GDPR. Spinery is not directed to people under that age and does not knowingly collect their data.

9. Changes

The date at the top says when this notice was last updated. Substantial changes are announced in the app.