Privacy Policy

Last updated: February 26, 2026

1. Introduction

CatchIt! ("we", "our", "us") operates the CatchIt! Discovery application for macOS, the CatchIt! Listen application for iOS, and the catchit.io website (collectively, the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

2. Information We Collect

We collect the following types of information:

  • Account information: Email address and user ID, collected through Supabase authentication or Google OAuth sign-in.
  • Music metadata: Track titles, artist names, album names, genres, ISRC codes, track classifications, and any notes you add.
  • Audio recognition results: When you use Shazam recognition, audio fingerprints are processed by Apple's ShazamKit framework. We store only the resulting metadata (song title, artist, etc.), not the audio itself.
  • Device information: Device model and app version, stored alongside your discoveries for troubleshooting purposes.

Note: Our database schema contains location fields, but we do not currently collect or populate any location data.

3. How We Use Your Information

  • Provide, maintain, and improve the Service.
  • Authenticate your identity and manage your account.
  • Synchronize your data between your local device and the cloud.
  • Respond to your support requests.

We do not use your data for advertising, behavioral profiling, or sell it to third parties.

4. Data Storage and Security

  • Local storage: Your data is stored locally on your device in a SQLite database (offline-first architecture).
  • Cloud sync: Data is synchronized to Supabase cloud servers over HTTPS, protected by Row Level Security policies.
  • Temporary audio files: Audio processed for recognition is protected by multiple layers of security and automatically deleted after processing.
  • Logout: Signing out clears your keychain entries, caches, preferences, and local database.

5. Third-Party Services

We use the following third-party services to operate the Service:

We do not use any analytics SDKs, advertising networks, or third-party tracking tools.

6. Permissions

  • Microphone (iOS): Used solely for Shazam audio recognition in CatchIt! Listen.
  • Background processing (iOS): Used for background data synchronization.

7. Data Retention and Deletion

We retain your data for as long as your account exists. When you delete items within the app, they are marked as deleted and retained temporarily for synchronization purposes, then permanently removed.

To request full account deletion and removal of all your data, email us at support@catchit.io. Local data is removed when you sign out or uninstall the app.

8. Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us at support@catchit.io and we will take steps to remove it.

9. International Data Transfers

Your data may be processed in any country where our service providers operate. By using the Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

10. Your Rights

Depending on your location, you may have the following rights:

  • Access, rectification, and erasure of your personal data.
  • Data portability — receive your data in a structured format.
  • Restriction and objection to certain processing of your data.
  • Right to know and delete (California residents under CCPA).

We do not sell your personal information. To exercise any of these rights, contact us at support@catchit.io.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects when the latest changes were made. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, contact us at support@catchit.io.