Privacy Policy
Last updated: 15 October 2026
Privacy in one paragraph
BandFlow is a self-hosted app for bands. Your songs, setlists and account live on the PocketBase server you choose. This website sets no cookies, and the app has no analytics, ads or crash reporting. The BandFlow developer never receives your band's data.
Who is responsible
BandFlow is an independent project developed by Maurii03 and published on GitHub. This page applies to the website, the Android app and the iOS app when it ships.
This website
No cookies, no analytics, no tracking scripts. Nothing you do on this page is recorded by BandFlow.
The server that hosts this site may keep standard access logs (IP address, date, requested page) for security and diagnostics, like any web server. How long they are kept depends on whoever operates that server.
The BandFlow app
When you use the app, this data is stored on the PocketBase server your band connects to:
- Account: email address, display name and a hashed password.
- Band content: songs with chords, lyrics, structure and notes; setlists; proposals and votes; attachments; band membership.
Members of a band can see their own band's content; nobody else can. The app sends nothing back to the developer: it talks only to your server.
The default public server
The app suggests a default server (bandflow.duckdns.org) so you can try BandFlow quickly. If you use it, that server is operated by the BandFlow developer, who processes the data above only to run the service (GDPR art. 6(1)(b)).
Data stays until you delete your account — ask for deletion via the contact below. You can move to your own server at any time.
Your rights
If you are in the EU/EEA, the GDPR grants you access, rectification, erasure, portability, restriction and objection rights over your data. Most of these you can exercise directly in the app; for the rest, use the contact below. You may also lodge a complaint with your supervisory authority (in Italy: the Garante per la protezione dei dati personali).
Third parties
Ko-fi: donations are processed by Ko-fi on ko-fi.com. Payment data never reaches BandFlow.
App stores: if you install BandFlow from Google Play or the App Store, the store handles the download and may collect data under its own policy. This site self-hosts its font; links to other sites open those sites.
Children
BandFlow is not directed at children under 16. If you believe a minor has an account on the default server, contact the developer to have it removed.
Changes to this policy
This page always shows the latest version, dated at the top. Meaningful changes will be noted here; continuing to use the app after a change means you accept the updated policy.
Contact
For any privacy question or request, open an issue on the project repository: