Privacy

Who we are

RecordBox is provided by MyRecords LLC. Contact [email protected] for privacy, account or support questions.

Information you choose to provide

We process your sign-in email or phone number and verified sign-in identifier; release and song details; artwork, audio, lyrics and designs; account backups; versions acquired through checkout; and the sharing links, invitations and feedback you choose to create. Do not upload content you do not have permission to use.

How RecordBox uses it

We use this information to operate your workspace, verify access, back up releases, restore your checked-out versions, prepare timed lyric drafts from uploaded audio, and deliver sharing features you request. Your editable release stays on your device until a feature such as account backup, lyric preparation or sharing sends the necessary material to our services. Finished images and videos render on your device.

Service providers and security

Our hosting and network providers, including DigitalOcean and Cloudflare, deliver and protect the service. Resend delivers email verification codes. When managed sign-in is enabled, Supabase processes authentication and our configured SMS delivery provider delivers phone verification codes. Apple or Google processes sign-in if you select that provider. Audio for automatic lyric preparation is sent to our configured transcription service. We do not sell your personal information or use it for advertising tracking. We process limited request/security diagnostics and app-attestation information to protect access. For signed-in accounts, our internal support dashboard receives app-open, export, backup and failure categories, platform and available build version. These reports contain no artwork, audio, release titles, raw error text or sign-in tokens; they are retained for up to 30 days, subject to a 2,000-report capacity, and removed with account deletion.

Release-page measurement

We measure release-page loads, destination actions and the steps of an optional anonymous creation journey to understand what works and where publishing fails. An explicit RecordBox creation link can carry an opaque source reference so we can connect a published page to the release or campaign that introduced its creator. These records identify bounded drafts and release objects, not unique people. We do not send form contents, artwork, music, pasted URLs or sign-in credentials into this measurement, and we do not use cookies, fingerprints or advertising pixels for it.

Do Not Track and Global Privacy Control suppress this optional measurement and referral attribution. Anonymous journey and behavioral records are retained for up to 180 days; source references expire after seven days. A publication’s source relationship may remain while the release exists, within a bounded 20,000-publication record capacity. Anonymous pages can be published before signing in. Copying a link or opening a share sheet does not prove that a release was publicly shared.

Sharing is your choice

Public links let anyone with the link see the selected release snapshot. Invite-only links require the invited account. A recipient may retain files they have already obtained. Revoking a link or deleting an account cannot recall copies already saved outside RecordBox.

Saving and retention

Local work and downloaded design versions remain on your device until you remove them, delete the account on that device, or the operating system clears app storage. Local finished-file history lasts up to 30 days and temporary native sharing files up to 24 hours; keep your own copy in Photos or Files. Backed-up releases and checked-out version recipes are retained while your account is active. Review links expire after seven days. Temporary processing files and expired sign-in codes are cleaned automatically.

Deleting your account

Open Project & saving, then Account & devices, then Delete account. A new email verification code confirms this destructive action. Deletion revokes account sessions and removes live account records, backed-up releases, checked-out versions and owned sharing links. A retryable cleanup process removes associated media and provider grants. Shared media referenced by another account remains for that account. Previously exported files are not deleted from Photos or Files.

Backups and offline devices

Restricted infrastructure backups may retain earlier data for disaster recovery. Contact us for the retention status of a specific deletion; immediate erasure of every historical backup is not claimed. They are for disaster recovery and are not available through the app. We retain minimal account-digest and release-id deletion records so a restore cannot reactivate deleted data. An offline device cannot receive a remote deletion until it reconnects; on reconnection, account access and downloaded data are checked and removed as appropriate. Contact us for details about a particular deletion request or any record we are required by law to retain.

Your choices

You can use a guest workspace, remove local downloads, revoke sharing links, request access to or correction of your information, or delete your account. Photos and Files access is used only when you choose an import or save action. Face ID checks happen on your device; RecordBox does not receive your biometric data. Reinstalling requires an online sign-in to recover account work and download eligible versions again.