Privacy Policy

Who controls your information

Ampli-Fi is operated from the United Kingdom by Owen Liversidge, trading as Ampli-Fi. Owen Liversidge is the controller of personal information used to run the service. Our postal address is Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom. Contact feedback@amplifi.music with the subject “Privacy or data request” for privacy questions or rights requests.

This policy covers the Ampli-Fi website and iPhone app. Some providers named below also act as independent controllers for information they use for their own purposes; their privacy notices apply to that use.

A quick summary for younger members

Ampli-Fi is public. Other people may see and share what you put in your profile, discussions, replies, and images, so do not post private information such as your home address, school, phone number, or live location.

We privately record only whether you say you are 13–17 or 18 or over, not your date of birth. Teen accounts receive additional advertising protections and are not eligible for personalised ads. You can report or block someone and can ask a parent, guardian, or trusted adult to help with a privacy or safety concern.

Information we collect

Account and legal records include your email address, authentication credentials securely handled by Supabase, Supabase user ID, account timestamps, the Terms and Privacy versions accepted, and database-generated acceptance timestamps. Ampli-Fi application code does not read your password in plain text.

Age information is the private band you select: 13–17 or 18 or over. We do not currently ask for a date of birth or identity document. If a proportionate age-assurance control becomes necessary, this policy and the signup explanation will be updated before collecting additional age data.

Public profile and community information can include display name, username, avatar, location you choose to add, biography, instruments, genres, influences, experience, goals, gear details and images, discussions, replies, labels, links, stars, amplified answers, reputation, and member role.

Safety and interaction information includes blocks, reports, report reasons, the reported content, moderation status and notes, content-filter results, enforcement actions, notification records, and evidence needed to investigate misuse or protect people.

Device, advertising, and technical information can include a push-notification device token and installation identifier, consent choices, iOS tracking-permission status, IP address and approximate location inferred from it, browser or device details, identifiers used by advertising technology where permitted, ad interactions, request and security logs, crash or performance diagnostics produced by providers, and the search or page request sent to the service.

Support information includes feedback type, subject, message, optional reply email, privacy requests, rights complaints, advertisement reports, and our correspondence with you.

Where information comes from

Most information comes directly from you when you create an account, build a profile, post, interact, choose settings, report content, or contact us. Other information is generated by your use of Ampli-Fi, your device, safety controls, and the service providers used to deliver the app.

We may also receive information from another member’s report, from a rights holder or authority, or from public sources where reasonably necessary to investigate fraud, infringement, safety, or unlawful activity.

Public information

Profiles and contributions are designed to be public. They may be viewed without signing in, indexed by search engines, copied in screenshots, quoted, linked to, or reshared by other people. Deleting content from Ampli-Fi does not remove copies made independently by others.

Email, password information, private age band, block list, consent state, and private account records are not intentionally placed on your public profile. Moderators can access restricted information only where their role and the database rules allow it.

Why we use information and our lawful bases

Contract: we use account, profile, content, interaction, authentication, notification, and technical information to create your account, publish what you ask us to publish, provide community features, remember requested settings, and deliver the service you request.

Legitimate interests: we use proportionate account, content, report, device, and log information to secure Ampli-Fi, prevent spam and fraud, moderate content, protect members, improve reliability, understand and fix faults, establish or defend legal claims, and operate non-personalised or contextual advertising where consent is not legally required. Our interests are providing a safe, sustainable musician community; we balance them against your rights, especially where a child is involved.

Consent: where required, we rely on your choice for non-essential cookies or device storage, personalised advertising, cross-company tracking, and optional device permissions. You can withdraw a choice through the Google privacy controls, iOS Settings, browser settings, or the relevant Ampli-Fi setting without affecting earlier lawful processing.

Legal obligation and public interest: we use or disclose information where reasonably necessary to comply with law, valid legal process, regulatory duties, or legally required safety reporting. In an emergency, vital interests may justify use needed to protect someone’s life or physical safety.

If you do not provide the account information marked as required, we cannot create or operate your account. Optional profile fields and device permissions are not required for the core community service.

Safety filtering and moderation

High-confidence automated rules examine public text before publication and may stop content that appears to match a serious safety category. Member reports and human decisions are also used to investigate content and accounts. These measures do not guarantee that every harmful item will be detected.

Ampli-Fi does not currently make decisions based solely on automated processing that have a legal or similarly significant effect on you. If a filter stops a post, you can revise it or contact us. You can challenge a moderation or account decision through Feedback or feedback@amplifi.music.

Advertising and consent

Accounts declared 13–17, accounts without a confirmed adult band, and accounts subject to a more protective setting receive teen-treated non-personalised Google ads or Ampli-Fi house promotions. Personalised Google ads are available only to accounts declared 18 or over when the applicable Google consent state permits personalisation and iOS App Tracking Transparency permission is authorised.

Google’s advertising technology may process IP address, general location, device and advertising identifiers where available, consent signals, ad interactions, and diagnostics. Google may use historical activity and inferred interests for personalised ads when permitted. Non-personalised ads can still use context, general location, frequency controls, fraud prevention, and limited measurement where allowed.

Ampli-Fi may send an ad request up to eight controlled music, instrument, and screen-category words, such as guitar, gear, or effects pedals. We do not use raw post or reply text, search terms, usernames, or private profile fields as ad-request keywords.

Review Google choices in the iPhone app’s Privacy & data area or the web consent controls when available. Change iPhone tracking permission in iOS Settings. If the necessary advertising storage or vendor permission is refused, Ampli-Fi uses house promotions rather than Google Limited Ads.

Who receives information

Supabase provides authentication, database, and public image storage. Vercel hosts and delivers the website and may process request, security, and diagnostic data. Google provides Mobile Ads, AdMob, Google Publisher Tag, and consent-management technology. Apple distributes the iPhone app, provides App Tracking Transparency controls and push-notification delivery. Resend delivers web feedback messages to the configured Ampli-Fi mailbox.

These providers receive only the information needed for their role or produced through use of their technology. We may also share relevant information with professional advisers, insurers, a buyer or successor during a genuine business reorganisation, rights holders, regulators, law enforcement, emergency services, or safety organisations where lawful and reasonably necessary.

We do not sell member profile or post data as a standalone list. Some privacy laws use broad definitions of “sale”, “sharing”, or “targeted advertising” that can cover personalised advertising; where those laws apply, the consent and privacy controls described above are provided for that activity.

International transfers

Ampli-Fi is used worldwide and its providers operate internationally. Information may therefore be processed in the United Kingdom, European Economic Area, United States, and other countries where a provider or authorised sub-processor operates. Those countries may have different privacy laws from your own.

Where UK or European law requires a transfer safeguard, we use an applicable adequacy regulation or decision, or contractual protections made available in the provider agreement such as standard contractual clauses and the relevant UK addendum, together with appropriate technical and organisational measures. Contact feedback@amplifi.music to ask for more information about safeguards relevant to your data.

How long information is kept

Active account, profile, and community information is generally kept while the account or content remains active. You can edit profile information and delete individual discussions or replies using the available controls and edit windows. Removed information may remain briefly in caches and provider backups until they are overwritten under normal schedules.

When you delete your account, Supabase sign-in data is permanently deleted; profile details are replaced by a “Deleted user” tombstone; uploaded images, location metadata, notifications, stars, blocks, push registrations, and reports you submitted are deleted. Public discussion and reply text remains de-identified so other people’s conversations are not broken. Delete those contributions first if you do not want their text retained.

Legal acceptance evidence, moderation and security records, complaints, and related correspondence are kept only for as long as reasonably needed to demonstrate agreements, enforce rules, protect people, resolve disputes, meet legal obligations, or establish and defend claims. Feedback and privacy correspondence is kept until the request is dealt with and for a reasonable follow-up period. Technical logs, consent records, caches, and backups follow the relevant provider’s configured schedule and may be retained longer when needed for security, fraud, or law.

We review retention criteria as the service and its risks develop. We may aggregate or de-identify information so it no longer identifies a person, and may keep that form for service and safety analysis.

Your choices and privacy rights

You can edit profile details, delete eligible content, block members, manage push permission, review advertising choices, change iOS tracking permission, clear browser or app storage, and delete the account using the controls described in the service.

Depending on where you live and which law applies, you may have rights to access a copy of personal information; correct it; delete it; restrict or object to processing; receive portable information you supplied; withdraw consent; opt out of targeted advertising, sale, or sharing as locally defined; and complain to a privacy regulator. You will not be discriminated against for using a legal privacy right.

Email feedback@amplifi.music with the subject “Privacy or data request”. Describe the account and request. We may ask for proportionate information to verify identity and protect the account. We will respond within the period required by applicable law and will explain any lawful exception. An authorised agent may submit a request where local law allows and authority can be verified.

In the United Kingdom, you can complain to the Information Commissioner’s Office at ico.org.uk. You may also contact the privacy or data-protection authority where you live. We would appreciate the opportunity to address the concern first, but you do not have to contact us before a regulator where law says otherwise.

Children and local age rules

Ampli-Fi is not for children under 13. A higher minimum age may apply where a member lives, including where local law sets a higher age for social-media accounts or requires guardian involvement. Members must meet that local minimum as well as the Ampli-Fi minimum.

We use a coarse self-declared age band and protective defaults rather than collecting a full date of birth. Teen accounts are not eligible for personalised ads. We assess age and child-safety controls against the risks and may introduce a more reliable, privacy-preserving method where legally required or proportionate.

If you believe someone below the applicable minimum age has an account, report it through Feedback or feedback@amplifi.music. We may restrict the account and delete or preserve information as the applicable child-privacy and safety law requires.

Security

Ampli-Fi uses access controls, row-level database rules, encrypted network connections, restricted administrative functions, rate limits, and other technical and organisational measures designed to protect information. No online service can promise absolute security. Use a unique password and tell us promptly if you suspect unauthorised access.

Changes and contact

We may update this policy when the service, providers, or law changes. The effective date and version appear on this page. We will provide prominent notice of a material change and request a fresh choice where law requires it.

For privacy questions, rights requests, or complaints, use Feedback or email feedback@amplifi.music with the subject “Privacy or data request”.