Privacy policy
This policy covers every app from Oops Studio and this website. Today the apps are friendtips and Concerto. Before we release another app, we add it here. It describes what each app does with data in the version you can install today. If a later version handles data differently, we update this page before that version ships. See Changes.
Oops Studio is a small studio in the Netherlands. For anything on this page, write to hello@oopsstudio.nl.
In short
- We do not sell data, and we do not show ads.
- We do not track you across other apps or websites.
- No app asks for your location.
- Concerto counts how the app is used, without your name, email address or IP address. The friendtips app counts nothing.
- This website and the share pages count page views and button taps, in the same way. They use no cookies.
friendtips
Your account. When you first view or add a list, the app makes an anonymous account for you. It is a random id. It has no name and no email address.
Email sign-in. To import and manage your own lists, you sign in with your email address. We then store that email address with your account. We send you a sign-in email with a link and a code. We send no other email. You can add a name. friendtips shows that name on lists you import and on links you share.
Lists you import. When you import a Google Maps list, you give us its link. We read the places on that list and store them as your list on our server. People who open your list can see its places and your name.
Requests to our server. The app asks our server for the lists it shows. Our server keeps ordinary technical logs, which include the IP address that a request came from. We use those logs to keep the service running and to find faults.
Data on your phone. The app stores a copy of your lists and the place photos on your phone, so it opens quickly. That copy is removed when you delete the app.
Deleting your account. In the app, go to Settings and tap Delete account. This deletes your account, your email address and the lists you imported.
Concerto
The microphone. While you tell Concerto to listen, it uses the microphone. Apple’s ShazamKit turns the sound into a signature: a short digital summary of the music that cannot be turned back into sound. ShazamKit sends that signature to Apple to find the song. Concerto does not record or keep the sound, and it does not send the sound to us.
Set lists on your phone. The songs that Concerto finds are saved on your phone. They stay there until you delete them or delete the app.
Shared set lists. When you tap Share on a set list, Concerto uploads it to our server, so the link works. The upload has the name of the set list, the date and time it started, your time zone and the songs. Anyone with the link can see it. Stop sharing deletes it from our server. To limit uploads, our server stores a hash of your IP address for 24 hours. A hash is a code made from the address, from which the address cannot be read back.
Spotify links. When you tap Spotify on a song, Concerto asks our server for the Spotify link. The request has the song’s title, artist and recording code (ISRC). It has nothing about you.
Song previews and covers. Concerto gets album covers and 30-second previews from Apple’s iTunes service. Apple’s privacy policy applies to those requests.
Notifications. If you allow them, Concerto tells you when it stops listening, for example after a phone call. The phone makes these notifications itself. Nothing is sent to us.
Usage counts. Concerto sends usage counts to TelemetryDeck. A usage count says that something happened in the app: the app opened, listening started or stopped, a song was found, a set list was shared, notifications were turned on, or Share Concerto was tapped. Some counts have more detail:
- When Concerto finds a song: the song’s title and artist.
- When listening stops: the number of songs found, and how long Concerto listened.
- When you share a set list: the app you shared it to, the name of the set list, and its link. The name is the one you gave the set list, or else the artist or the date. If you tap Stop sharing, the name and the link stay in the usage counts, but the link no longer works.
Each count also has the app version, the iOS version, the iPhone model, and the region and language set on the phone. Each install has a random id, which TelemetryDeck hashes before it stores it. TelemetryDeck stores no name, no email address and no IP address. We use the counts to see how many people use Concerto, in which countries, which parts of the app they use, and which songs it finds.
This website
oopsstudio.nl and share.oopsstudio.nl have no ads. They send usage counts to TelemetryDeck. A usage count here says that a page was viewed, or that a button was tapped, such as “Download on the App Store” or “Get friendtips”. A page view also has the address of the page, the address of the page you came from, the browser language, and the type of browser and device. TelemetryDeck finds the country from the request.
The pages use no cookies, and store nothing on your device. To count visitors, TelemetryDeck makes a code from the IP address and the browser. That code changes every day, so it cannot follow you from one day to the next. TelemetryDeck stores no name, no email address and no IP address. We use the counts to see how many people visit, where they come from, and which buttons they tap.
Our hosting company keeps ordinary technical logs, which include the IP address of each request.
If you write to us, we receive your message and your email address. We keep them so we can reply. We do not add you to a mailing list.
Why we handle this data
To provide the apps and keep them working. Under the GDPR, our basis for the technical logs and the usage counts is legitimate interest: running a secure service, finding faults, and learning which parts of an app or a website people use. For your account, your lists and your shared set lists, our basis is that you ask us to provide them. We do not use any of this data for advertising or profiling.
Other companies involved
These companies handle data for us, on our instructions:
- Supabase hosts the databases for friendtips and for shared Concerto set lists, in Frankfurt, Germany.
- Vercel hosts this website, the share pages and the Concerto server. Vercel is a US company. It transfers data under the EU–US Data Privacy Framework.
- TelemetryDeck, a company in Germany, receives the usage counts from Concerto, this website and the share pages.
- Resend sends the friendtips sign-in emails.
- GitHub runs the friendtips imports of Google Maps lists.
Some links take you out of our apps. From that point, the other company’s privacy policy applies, not ours:
- Apple runs ShazamKit and the iTunes service, as described above.
- Google Maps opens when you ask for directions to a place.
- Spotify and Apple Music open when you tap a song.
- bunq runs the tip jar. Any tip is between you and bunq. We do not see your card or bank details.
How long we keep data
- Server logs: only as long as they help with security and faults. Then we delete them.
- A friendtips account and its lists: until you delete the account.
- A shared Concerto set list: until you tap Stop sharing.
- Usage counts from Concerto, this website and the share pages: TelemetryDeck keeps them for as long as our TelemetryDeck plan allows. They have no name, no email address and no IP address, unless you typed a name into a set list that you shared.
- Email: while the conversation is useful. We delete it if you ask.
Your rights
Under the GDPR, you can ask what personal data we hold about you. You can ask us to correct it or to delete it. Write to hello@oopsstudio.nl and we will answer.
You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Children
Our apps are not made for children.
Changes
We update this page when the way an app handles data changes. We then change the date at the top. The change appears here before the version that it describes is released.
Contact
Oops Studio, the Netherlands. hello@oopsstudio.nl