Skip to main content

Privacy Policy

1. The Short Version​

We built BandMath to help musicians manage their money, not to mine your personal data. We only collect the information we absolutely need to make the app function, process your subscription, and allow your band to track expenses and take payments. We will never sell your personal data to advertisers or third parties.

2. What Information We Collect​

To provide the BandMath service, we collect:

  • Account Data: Your email address and basic profile information to create and secure your account.
  • Financial & App Data: The numerical data, expense logs, and inventory numbers you input into the ledger.
  • User Uploads: Any photos or documents you choose to upload for receipt tracking.
  • Payment Information: If you upgrade to the Pro Tier, your payment details are collected directly by Stripe. BandMath does not store or have access to your full credit card number.

3. Stripe Connect & In-Person Payments (Tap to Pay on iPhone and Tap to Pay on Android)​

If your band uses our Stripe Connect integration to process fan payments via Tap to Pay on iPhone or Tap to Pay on Android, you will be required to provide identity verification (KYC) and business details directly to Stripe. This highly sensitive data is handled entirely by Stripe’s secure infrastructure. BandMath does not host or store your government ID, bank account routing numbers, or your fans' credit card data.

4. Third-Party Services We Use​

We run a lean operation and rely on a few trusted third-party tools (subprocessors) to keep the app running. Your data interacts with:

  • Supabase: Our secure backend database where your user account, app data, and receipt uploads are stored.
  • FlutterFlow: The framework that builds and hosts the app interface.
  • Stripe: To process your Pro Tier subscription and facilitate your band's Tap to Pay on iPhone and Tap to Pay on Android transactions.
  • Substack: To manage our email list and send you transparent development updates.

5. Your Data Rights (GDPR)​

You own your data. Under the General Data Protection Regulation (GDPR), you have the right to:

  • Ask for a copy of the personal data we hold about you (which you can do via the native export tool in the app).
  • Request that we correct any inaccurate information.
  • Withdraw your consent for marketing emails at any time.
  • Request that we completely delete your account and data from our active systems.

6. Cookies​

We keep things simple and respect your privacy. The BandMath website and web app only use strictly necessary cookies required for the site to function, to keep you securely logged in, and to route you to our payment processor. We do not use non-essential, invasive marketing or tracking cookies.