Privacy Policy

We get information from you, from your device, and from services we use or that you connect, such as Apple, Adapty, Twilio, ipapi.is, Last.fm and Discord. You need a phone number to sign up.

Account and profile. Your phone number (used to sign in with one-time passcodes), username, display name, avatar, bio, an optional location and link you may add, the genres you pick when you sign up, the images, photos and GIFs you upload (avatars, profile banners, profile backgrounds, profile-widget media, crate covers and club photos), and other profile details you choose to add.

Things you write and send. Ratings, song notes, profile notes, prompt answers, poll votes, club chat and Booth posts, crate and club names, trade messages, reports, and feedback you send us, plus any email address, handle or Discord name you add to feedback so we can reply.

In-app activity. Ratings, claims, card collections, album progress, marketplace listings, offers and trades, auctions and bids, the games you play and your picks in The Call, activity events, and notifications you receive. We also keep who you follow and block, the artists you follow, the artists and albums you hide, your wishlist and crates, the reactions you send on Live, and moderation records, like reports you make or that are made about you and any limits, suspensions or bans on your account.

Referrals and rewards. Invite codes you create or use, who invited whom, and credits, rewards, or virtual items earned through referrals or in-app activity.

Creator Program. If you apply to the Creator Program at notabl.fm/creators, we collect what you put in the form: your name, email address, TikTok, Instagram and YouTube handles, the follower range you pick, links to your videos, the music you post about, your country, your notabl username if you have one, your answer about how you'd show notabl, and the boxes you tick to say you're 18 or older and agree to the program rules. If you join the program, we also keep your handle and the name we show for you, your creator code and link, the tag we make for your code, which notabl account is yours if you have one, whether your code is active or paused, our own notes on your creator record, how many people joined with your code and how many of them counted, what you've earned and what we've paid you (the amount and date of each payment), and the PayPal email address you give us so we can pay you. If you're in the US, we may also ask you for a tax form (a W-9), as the program rules say. It has your legal name, address and taxpayer number.

Device and technical. Device type, operating system, app version, push notification tokens, crash logs, your IP address, and a hashed device identifier, plus basic technical info needed to run the app. We collect and analyze your IP address and hashed device identifier to keep notabl secure and to detect and prevent fraud, spam, and duplicate or abusive accounts. We look up the IP addresses used to sign in to learn their approximate location (city, region, country, time zone and rough map coordinates) and their network provider. For some addresses, our older lookups also tell us whether they were a VPN, proxy or data center. When you sign in with your phone number, we check what kind of line it is (for example mobile or internet).

Analytics. We use PostHog to understand how notabl is used, like which screens and features you use. Analytics is on by default from the first time you open the app. Once you sign in, these events are linked to your notabl user ID and username, and they include your device model and your iOS and app versions. Analytics events can also include a few simple facts about your account: whether you have Premium and which plan, whether you're in a club, whether Last.fm is connected, whether notifications are on, when you signed up and how you arrived (for example an invite or a campaign code). PostHog also receives your IP address when events are sent. We don't use analytics for ads. You can turn analytics off anytime in Settings > Privacy > Help improve notabl.

Crash and error reports. We use Sentry to find and fix crashes and errors. Reports include your user ID and username, device and app details, and the app activity leading up to the problem. When an error happens, a report can include a short replay of the screen just before it, with all text and images hidden.

Music listening. If you connect Last.fm, we check your Last.fm account about once a minute and save what you play (track, artist, album and time). We keep this detailed history for 30 days and use it for the Live tab, listening stats and charts, taste matches, weekly recaps, and your "now playing" status. What you're playing now shows on the Live tab to everyone signed in to notabl. Your weekly play count on the top listeners chart can be seen by anyone, even without an account. Turn on Hide me from Live (Settings > Privacy) to stay off Live, listening charts and in-sync moments, and to hide your name in card history. While you're hidden, we still save your plays for your own stats and recaps. Other people signed in to notabl can look up which Last.fm account you've connected. When you open someone's profile, your phone may load their recent plays from Last.fm directly, so Last.fm sees your IP address. You can disconnect Last.fm at any time.

Invite links and taste matching. When you first set up your account, if a web link is on your clipboard, the app checks it once and keeps it only if it's a notabl invite link, so your friend gets credit. We also compare your ratings and claims with other people's to show taste matches and people you might like.

Purchases and subscriptions. When you buy notabl Premium or Credits, the transaction is processed by Apple, and we use Adapty to manage it. We receive your purchase and subscription status to deliver what you bought. We do not receive or store your full payment-card details.

Discord. If you link your Discord account, we store your Discord user ID (see section 4).

• Operate and maintain the app
• Authenticate you via phone number and one-time passcode
• Display your profile, collections, and activity
• Power ratings, claims, the marketplace, trades, auctions, clubs, and games
• Show taste matches and people you might like
• Send push notifications you've allowed, and time some of them by the country your IP address is in, when we know it
• Prevent spam, fraud, and abuse, including finding linked or duplicate accounts
• Improve performance, fix bugs, and develop new features
• Track referrals and award in-app credits or rewards
• Review Creator Program applications, count sign-ups from creator codes, and pay creators
• Process purchases and deliver Premium features and Credits
• Connect optional services you link, such as Last.fm or Discord
• Post some public activity to our Discord server (see section 4)

What's public. notabl is a social app, and most of your profile is public. Public means anyone can see it, including people who don't use notabl. There's no setting in the app to make your whole profile private.

Your web profile at notabl.fm/@username shows your username, display name, avatar, banner and background photo, bio, note, join date, Now Spinning, profile look, your counts (claims, First Presses, Diamonds, ratings, followers and following), global rank, average rating, displayed tags, pinned Grails, top artists, a preview of your collection, and your crate names. Search engines may find and show it.

Your ratings are public. Anyone can see which songs you rated, the score you gave and when, including people who don't use notabl. Your average rating and rating count are on your profile and your web profile.

Also public, even without an account:

• your full collection (each card's song, position, tier, finish and claim date) and your pinned Grails
• your crates, with their names, covers and cards
• your tags and how you got them, including a creator's tag if you joined with a creator's code
• the artists you follow, and who you follow. Private following (Settings > Privacy) hides your following list, but you still appear in the followers list of each person you follow
• your leaderboard rank and your place on the weekly top collectors chart, each shown with your username, display name, avatar, counts (like claims, First Presses, ratings and trades) and whether you have Premium
• if you've connected Last.fm and aren't hidden from Live, your place on the weekly top listeners chart, with your username, display name, avatar, play count and whether you have Premium
• open card auctions, with the seller's username, display name and avatar, and the current top bid and top bidder's username
• public trade listings, including their message

People signed in to notabl also see:

• card history, which names the people who pressed or held a card (for example "Held by @name since March"), unless that person is hidden from Live, suspended from signing in, deleted, or blocked by you or blocking you
• the clubs you're in
• auction bid history
• song notes, prompt answers and profile notes
• Live listening and your connected Last.fm account (see section 1)
• whether you have Premium
• your location, link and the genres you picked, if you added them
• some of your settings and account details, like your notification choices and quiet hours, whether you're hidden from Live or keep your following private, and when you joined, accepted our terms and confirmed your age

Off the app: some claims and leaderboards are posted in our Discord server (see section 4). Share cards you create show your username.

If you're a creator in the Creator Program: your creator code, the tag we make for your code (usually your handle), and the first letters of the name we show for you on your creator link page are public. Everyone who joins with your code gets your tag, and it can show on their profiles.

notabl has a community Discord server. Our bot posts some public activity there: First Press, Diamond and Platinum claims, rare finishes like Test Pressing and Misprint, and a top collectors board, each with the collector's username and avatar. The top collectors board also shows display names and collection counts. This can include any public profile, whether or not you've linked Discord. The bot can also show any public profile's stats when someone asks for them in the server.

If you link your Discord account, we store your Discord user ID and share your username and Premium status with our bot so it can give you roles. You can unlink anytime in Settings > Community > Link Discord. If you entered a contest through our Discord, like the 2026 World Cup picks, we keep your picks with your notabl account, your notabl username and your Discord user ID.

Discord's own terms and privacy policy apply to what you do there.

We rely on the following services to run notabl:

• Supabase: hosts our database, sign-in and file storage on Amazon Web Services servers in the US.
• Twilio: sends your sign-in codes and checks what kind of line your phone number is. Internet (VoIP), pager and voicemail numbers may be refused.
• ipapi.is: we send it the IP addresses used to sign in to notabl, and nothing else: not your name, number or user ID. It tells us an IP address's approximate location (city, region, country, time zone and rough map coordinates) and its network provider.
• PostHog: product analytics, linked to your account (see section 1).
• Sentry: crash and error reports, with your user ID and username (see section 1).
• Adapty: manages in-app purchases and subscriptions. It gets your notabl user ID, your device's vendor ID, your device's advertising identifier if your iPhone makes it available, your IP address and purchase details.
• Apple: the App Store, in-app purchases and subscription billing, push notifications (APNs), and Apple Music catalog data, artwork and previews, which your phone loads from Apple directly. What you type in search is sent to Apple Music, sometimes through our server, to find songs.
• Lovable and Google Fonts: host our website and its fonts (see section 14).
• FormSubmit: delivers the Creator Program application form on our website to our email inbox. Your browser sends the form straight to FormSubmit, so it gets what you type in the form, your IP address and basic browser details. FormSubmit says it keeps a copy of each form for 30 days.
• Fastmail: hosts our email, including messages you send to contact@notabl.fm and Creator Program applications.
• PayPal: pays creators in the Creator Program. It gets the creator's PayPal email address and the amount.
• Last.fm: music listening data, only if you connect it (see section 1).
• Discord: only if you link it, plus the public posts described in section 4. Our Discord bot runs on a separate hosting service.

We don't show ads, and we don't sell your data or share it for advertising. Each provider also has its own terms and privacy policy, which apply to how it handles information.

Your choices. You can:

• turn off analytics in Settings > Privacy > Help improve notabl
• turn off some notification types in Settings > Notifications > Manage notifications, or all notifications in your iPhone's Settings
• stay off Live with Hide me from Live in Settings > Privacy
• hide your following list with Private following in Settings > Privacy (see section 3)
• disconnect Last.fm
• unlink Discord in Settings > Community > Link Discord
• delete your account (see section 11)

Withdrawing consent doesn't affect what we did before you withdrew it.

With your permission, we send push notifications. Some are about your account and collection, like trades, auctions, claim resets, claims left, warnings that your collection is fading, clubs and new followers. Some are news from notabl. You can turn some types off in Settings > Notifications > Manage notifications, and you can turn all of them off in your iPhone's Settings.

Invite codes and referral links let us track who invited whom. When a new user signs up with your code and qualifies, both of you may earn in-app credits, tags, or other rewards. We may store the relationship between inviter and invitee to operate this system and to prevent abuse, and we check whether the two accounts use the same device. Anyone who opens your invite link sees your username, display name and avatar.

Creators in the Creator Program have a code too. It works like an invite code, with the same link page and the same one-time clipboard check. If you join with a creator's code, or add one in your first 7 days, you get that creator's tag, and you don't get invite credits for it. To decide whether your sign-up counts toward what that creator earns, we look at when you joined, how many songs you rated in your first week, whether your account has been deleted, banned or suspended, and whether it's on the same device as the creator or an older account. We keep that result. We don't show creators who joined with their code. They see numbers, like how many people joined and how many counted. But tags are public (see section 3), so anyone who sees a creator's tag on your profile, including the creator, can tell you joined with their code.

notabl does not sell your personal information. We share data only with the service providers needed to run notabl (see section 5), with services you choose to connect, through the public Discord posts described in section 4, or when required by law, to enforce our Terms, or to protect users from harm. If notabl is sold or merges with another company, your information may be transferred to the new owner as part of that deal.

Where it's stored. notabl is run from the United States. Our database, sign-in system and file storage are on servers in the US, and so are our analytics (PostHog) and crash reporting (Sentry). If you use notabl from outside the US, including from the UK or the EU, your information is sent to and stored in the US. If you apply to the Creator Program from outside the US, your application comes to us in the US too. Some of our other providers may also handle it in other countries.

Why we're allowed to use it.

Your right to object. Where we rely on legitimate interests, you can object at any time by emailing contact@notabl.fm, and we'll stop unless we have a strong reason to continue, like preventing fraud.

Automatic decisions. Some checks run automatically:

• If an account is used on a device linked to a banned account, it's locked within minutes.
• A phone number that has been banned can't be used to sign up.
• When you sign in, internet (VoIP), pager and voicemail numbers may be refused.
• Accounts our systems link together, for example by device or internet connection, can be left out of referral rewards, and their claims may not count in The Call or toward club rewards.
• A sign-up from a creator's code isn't counted toward that creator's pay if the account rated fewer than 5 songs in its first 7 days, if it's on the same device as the creator or an older account, or if it has been deleted, banned or suspended.

If you think we got it wrong, email contact@notabl.fm and a person will review it.

We protect your data with access controls, encryption in transit and at rest through our host, and server rules that stop the app from changing things it shouldn't. Sign-in is by one-time code, so there's no password to steal. No system is perfect. If a breach affects you, we'll tell you as the law requires.

Deleting your account. You can delete your account anytime in the app: open Settings, scroll to the bottom and tap Delete account. You can also request deletion by emailing contact@notabl.fm.

What happens right away:

• You're signed out on every device, and your phone number is released so it can be used for a new account.
• Your profile is taken down. Your username is replaced with a placeholder, your display name becomes "Deleted User", and your web profile stops working. Your bio, note, location, link, the genres you picked, avatar, banner, Now Spinning song and Last.fm username are cleared.
• Your cards start going back to the pool within minutes, and the next collector in line for each song moves up. A big collection can take a few hours.
• Your pending trades are cancelled. Any auction you're selling in is cancelled and its top bidder gets their credits back, and you're taken out of auctions you're bidding in.
• You leave your club, your pending club invites and join requests are cancelled, and your follows, tags, pinned Grails, saved profile looks, notification tokens and your activity inbox are deleted.
• Your credits, bonus claims and other items are lost.

What we keep today, and why:

• Your ratings, under the placeholder. They still count toward song averages, and like all ratings they can still be read (see section 3).
• Your history: your credit history and the history of your trades, sales and cards, so other people's collections and card histories stay correct. Card history no longer shows your name.
• Things you wrote, like song notes, prompt answers, profile notes, club chat and Booth posts, under the placeholder. Feedback you sent us is kept as you sent it.
• Other records linked to your old account, like your wishlist, crates, the artists you followed, your current profile look settings, your linked Discord ID, your game scores and contest picks, your invites (who invited whom, and whether you joined with a creator's code), and your weekly recaps.
• Your photos: your avatar and banner are taken off your profile. Your profile background photo stays in your old account's profile look settings, your crate covers stay with your crates, and club photos stay with the club. Today no image files are deleted from our storage, so anyone who already has a direct link to one may still be able to open it. You can ask us to remove them by emailing contact@notabl.fm.
• Purchase records, including the details Apple and Adapty send us about each purchase (such as your IP address, your device's vendor ID and, in some cases, its advertising identifier), for our accounting.
• Anti-fraud records: your old username, your IP address history and IP lookups, and a hashed device ID, to help prevent fraud and stop banned people from coming back.
• Our providers: deleting your account doesn't automatically delete what PostHog, Sentry and Adapty already hold about you. They keep it under their own retention settings.

Your detailed listening history from Last.fm is still deleted within 30 days. Backups are purged on a rolling basis, typically within 90 days. Deleting your account doesn't cancel Premium. Cancel it in your Apple Account settings.

Deleting things you wrote. When you delete a song note, a club chat message or a Booth post, it's hidden from everyone, but we still store it. Prompt answers you delete are removed, unless they were already hidden after reports. Profile notes you clear are removed.

How long we keep data.

Where we list no set end date, nothing deletes that data automatically today, and we keep it while we run notabl. You can still ask us to delete your information (see section 12).

Depending on where you live, you may have rights over your personal information. Wherever you live, you can ask us to see, fix, or delete your information. Email contact@notabl.fm and we'll help.

If you are in the EEA or UK, you have the right to access, correct, delete, or port your data; to object to or restrict certain processing (see section 9); and to withdraw consent at any time (for example, by disconnecting Last.fm). You also have the right to lodge a complaint with your local data protection authority. We process your information to provide the Service (contract), to operate and secure it (our legitimate interests), to comply with the law, and, where applicable, with your consent. Section 9 explains which reason applies to each use.

If you are in California, you have the right to know what personal information we collect, to access, delete, or correct it, and to opt out of its sale or sharing. notabl does not sell or share your personal information. We won't treat you differently for using any of these rights.

To exercise any of these rights, email contact@notabl.fm. We may ask you to confirm it's you, for example with a code sent to your number. Someone you authorize can make a request for you. We'll respond within the time the law requires. Notabl LLC is the data controller responsible for your information.

notabl is for people 13 and older. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, contact us at contact@notabl.fm and we'll delete their account (see section 11). This includes parents who think their child under 13 is using notabl.

When you visit notabl.fm, our website host, Lovable, runs an analytics script that records page visits, and your browser loads fonts from Google Fonts. Both see your IP address and basic browser details. If you open an invite link, the page shows the inviter's username, display name and avatar, saves the invite code in your browser, and may copy the link to your clipboard so the app can credit your friend. Web profiles at notabl.fm/@username show public profile information only (see section 3). We don't run ads or ad trackers on our website. If you apply to the Creator Program on our website, your browser sends the form to FormSubmit, which emails it to us (see sections 1 and 5). A creator's link works like an invite link, but the page shows the creator's code and the first letters of their name instead of a profile.

Do Not Track. Our website and app don't respond differently to browser "Do Not Track" signals, because there's no agreed standard for them.

We may update this Privacy Policy from time to time. When we do, we'll change the version and dates at the top. We'll tell you about important changes in the app or by other reasonable means before they take effect. Continuing to use notabl after changes take effect means you accept the updated policy.

For privacy questions, account deletion requests, or other concerns, email contact@notabl.fm.