Privacy Policy

Effective February 1, 2026 · Version 1.0

This Privacy Policy explains how GeoBeats ("GeoBeats", "we", "us", or "our") collects, uses, and shares information when you use the GeoBeats mobile application and related services (collectively, the "Service"). We built GeoBeats to be a fun, real-time social music experience — and we only collect what we need to make that experience work.

1.Information We Collect

a) Account & Spotify Data

GeoBeats lets you sign in with your Spotify account via Spotify's official OAuth flow. When you connect Spotify, we receive:

Your Spotify display name, user ID, and profile image.
Your currently playing track metadata (title, artist, album art, track ID).
Short-lived access & refresh tokens used solely to display your now-playing track and — only when you explicitly tap "Play" or "Listen Along" — to start playback on your own Spotify Connect device.

We never post to your account, never modify playlists, and never read your saved library, email, or payment details.

b) Location Data

To power the live map, GeoBeats collects your device's approximate location while the app is open only when you explicitly choose to go "live". You can hide your pin at any time from within the app. Location is never collected in the background.

c) Microphone Audio (Song Radar)

When you tap the Song Radar button, the app records a short clip (approximately 4–10 seconds) of ambient audio from your microphone. The clip is transmitted to our server, fingerprinted, and forwarded to the Shazam recognition service for identification. The audio clip is discarded immediately after recognition and is never stored, transcribed, or associated with your identity.

d) Technical & Usage Data

Device type, operating system version, and app version.
Crash reports and anonymous performance metrics.
Session events (when you connect, when you join a Listen Along session).

2.How We Use Information

To render your pin on the real-time map for other GeoBeats users near you.
To display your currently playing track to people you share a session with.
To sync playback between hosts and listeners during a Listen Along session.
To identify songs via Song Radar.
To diagnose crashes and improve the Service.

We do not sell your personal data. We do not serve advertising. We do not run behavioral profiling or cross-app tracking.

3.Sharing With Third Parties

GeoBeats shares limited data with a small number of trusted service providers strictly to deliver the Service:

Spotify — for authentication and playback control (Spotify Privacy Policy).
Mapbox — for map rendering (Mapbox Privacy Policy).
Shazam (Apple Inc.) — for audio fingerprint recognition (Apple Privacy Policy).

We may disclose information if required by law or in response to a valid legal request. We will not disclose data otherwise.

4.Data Retention

Live presence data (location, now-playing) is ephemeral and held in memory only while you are online. It is deleted the moment you go offline or hide your pin.
Spotify tokens are stored encrypted at rest and invalidated when you disconnect your account.
Song Radar audio is never persisted.
Crash/diagnostic logs are retained for up to 90 days.

5.Your Rights & Controls

Hide your pin: tap the visibility toggle in-app at any time.
Revoke Spotify access: visit spotify.com/account/apps and remove GeoBeats.
Delete your account: email privacy@geobeats.live and we will erase all associated data within 30 days.
Microphone & location: iOS and Android both let you revoke these permissions at the OS level in Settings → GeoBeats.

If you are located in the EEA, UK, or California, you have additional rights under GDPR / UK-GDPR / CCPA including the right to access, correct, port, or delete your data, and the right to lodge a complaint with your local supervisory authority.

6.Children

GeoBeats is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has used the Service, contact us and we will promptly delete the data.

7.Security

All traffic between the GeoBeats app and our servers uses TLS 1.2+. Spotify tokens are stored encrypted at rest. However, no system is perfectly secure, and we cannot guarantee absolute security.

8.International Transfers

GeoBeats is operated from the United States. By using the Service, you consent to the processing of your information in the United States.

9.Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective" date at the top of this page and, for material changes, notify users in-app before the changes take effect.

10.Contact Us

Questions, requests, or concerns about this Privacy Policy?

GeoBeats
Email: privacy@geobeats.live
Support: support@geobeats.live