Privacy Policy

Summary

• The App connects to your Spotify account using Spotify’s official OAuth.
• We do not run a backend that collects your personal data. Tokens are stored securely on your device (Keychain).
• Your playlist artwork is processed on-device and uploaded directly to Spotify when you choose to sync.
• We do not sell or share your data with third parties for advertising.
• Third-party collection: Spotify may collect limited analytics about the connection (e.g., number of connections to Rewrapped and the country where they occur). We only see aggregated, non-identifiable statistics. See Spotify’s Privacy Policy.
• We do not use tracking technologies or display advertising.

Information We Access

With your permission, the App may access the following through the Spotify Web API:

• Basic account information (e.g., user ID, display name) to show your profile and attribute playlists to your account.
• Your top tracks and related metadata in selected timeframes, to build and update playlists.
• Playlist details you own or collaborate on, to create, rename, update descriptions, replace tracks, add tracks, and set artwork.

Permissions (Scopes) We Request

For transparency, the App may request these Spotify scopes:

• playlist-modify-public, playlist-modify-private, playlist-read-private, playlist-read-collaborative, ugc-image-upload, user-read-private, user-top-read

Granting a scope lets the App call the corresponding Spotify endpoint to fulfill your request. Granting a scope does not mean we store data; we don’t.

How We Use This Information

• Authenticate you with Spotify (OAuth).
• Generate or update playlists according to your selections.
• Set playlist cover images you choose in the App.
• Show status and results inside the App (e.g., playlist URIs, track counts).

Local Storage & Security

• Spotify access and refresh tokens are stored in the iOS Keychain.
• Artwork selected in the App is processed on-device and sent directly to Spotify when you tap update.
• We recommend using a device passcode/Face ID/Touch ID to protect your device.

Third-Party Collection (Spotify)

We do not collect or store personal data and we do not operate servers for this App. When you connect your Spotify account, Spotify may collect and process information under its own policies—for example, usage analytics and coarse location (country) related to connections with Rewrapped. We receive only aggregated, non-identifiable statistics (e.g., total connections and countries) and no user emails, usernames, or listening histories. See Spotify’s Privacy Policy.

Data Sharing

We do not sell your personal information. Data flows to Spotify only as necessary to perform actions you request (e.g., creating or updating your playlists, uploading artwork). Spotify’s handling of data is governed by its own policies. See Spotify’s Privacy Policy.

No third-party advertising SDKs are used. We do not engage in cross-app tracking.

Retention

Tokens are retained on your device until you sign out or delete the App. Playlist data lives in your Spotify account and is subject to Spotify’s retention practices.

Your Choices

• Revoke access: You can sign out in the App at any time, which clears tokens from your device.
• Spotify account controls: You can manage connected apps in your Spotify account settings.
• Delete the App: Removing the App from your device deletes local data held by the App.

Children’s Privacy

The App is not directed to children under 13. If you believe a child provided us information, contact us and we will assist with removal steps.

International Users

Your use of Spotify’s services may involve transfers of information per Spotify’s policies. Rewrapped does not operate servers for this App.

Changes to This Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and include changes in a subsequent app release or on our website, if applicable.

Contact Us

If you have questions or requests about this Privacy Policy, contact us at rewrapped@kylewhirl.com.