BDAA Privacy Policy
Last updated: 2026-05-21
This is the privacy policy for the BDAA mobile app (the "app") and the service that powers it (the "service"). The app is the official companion app for the BDAA Convention.
We tried to write this in plain English. If anything is unclear, email us at the address at the bottom of this page and we'll explain.
Who we are
The app and the service are operated by the organizers of the BDAA Convention. The service runs on a server that the organizers control. We are not a company. We don't sell anything. We don't have advertisers.
What we collect
We collect only what we need to make the app work.
| What | Why |
|---|---|
| Your email address | To sign you in. We send you a magic link or one-time code each time you sign in on a new device. |
| Your instrument selection | So we can show you the right sheet music and audio for your part. |
| A push notification token | So we can deliver schedule changes and announcements to your phone. Generated by your operating system. |
| Basic device info (platform, app version, last sync time) | To deliver the right content to your device and diagnose problems. |
| What you've downloaded | So your device can sync only what's changed. |
Third-party sign-in
If you choose to sign in with Google or Apple, your browser or device communicates directly with that provider to authenticate you. BDAA only receives your email address and a one-time identity token; no other information is read or stored. You can still sign in by email magic link if you prefer not to use a third-party provider.
Usage analytics
The server keeps an aggregate usage log: for each participant we record times of app opens and sign-ins, the deeplinks of push notifications tapped, the time spent with sheet music open, the time spent with reference audio playing, and the IP address of each request (used only to derive country for aggregate statistics). We do not log user agents, device identifiers, the content of music annotations, or which specific piece a participant is viewing. The log is not shared with third parties and is used only by BDAA organizers to understand how the app is used.
What we do not collect
- We do not collect your name, location, contacts, photos, microphone, or camera input.
- We do not track you across apps or websites.
- We do not show ads.
- We do not sell or share any of your data with anyone for marketing, analytics, or any other purpose.
- We do not use third-party analytics SDKs (no Google Analytics, no Mixpanel, no Sentry, no Crashlytics).
Who we share your data with
We share your data with two service providers, and only to the extent needed to deliver the app's features:
- Resend — receives your email address when we send you a magic sign-in link. See resend.com/legal/privacy-policy.
- Firebase Cloud Messaging (Google) — receives your push notification token and the body of any push we send to your device. We use Firebase only for push delivery. See firebase.google.com/support/privacy.
That's it. We don't share your data with anyone else, ever.
Where your data is stored
All your data is stored on a server controlled by the BDAA Convention organizers. The server is hosted on a virtual machine; the organizers are the only people with administrative access.
How long we keep your data
- Email and instrument selection: for the duration of the convention you signed up for, plus a short grace period afterwards. We may keep your email on the participant roster across years if you attend multiple conventions, so you can sign back in next year.
- Push token: until your device unregisters it (e.g. you uninstall the app or sign out).
- Usage analytics: aggregate event log entries (app opens, sign-ins, push taps, sheet/audio durations, IP-derived country) are retained for the duration of the convention year and purged when the event closes. Short-lived server HTTP logs (past few days) are rotated out continuously.
Your rights
You can:
- See what we have on you. Email us and we'll tell you.
- Change your email or instrument in the app's settings.
- Delete your account. Sign out from the app, or email us to remove your email and any associated data from the server. We'll do it within a few days and confirm by email.
Children
The app's content — schedules, sheet music, reference audio, and announcements — is suitable for all ages. There is no age restriction on signing in; younger participants of the BDAA Convention are welcome to use the app the same way everyone else does. We collect the same minimal data described above regardless of the participant's age.
Changes to this policy
If we change this policy in a meaningful way (e.g. we start collecting something new, or we add a new processor), we'll update the date at the top and notify signed-in users via an in-app announcement before the change takes effect.
Contact
Questions, requests, or complaints:
This policy is governed by the laws of the State of California, USA.