Privacy Policy

Last updated October 8, 2026 · Applies to KaraokeList for iPhone and Android, and this website

1. Who this is from

KaraokeList is an iPhone and Android app made by Michael Jones, an independent developer. For anything in this policy, including a request to see or delete your data, write to support@karaokelist.app. I read that address myself.

This policy covers the KaraokeList apps and this website. If you tap through to a venue's website, a karaoke host's song book or a lyrics search, you have left KaraokeList and that site's own policy applies.

2. What we collect

In broad strokes, these are the kinds of data KaraokeList may handle. Not all of them apply to everyone: most depend on which features you use, and several only happen if you allow them.

• Account details, if you make an account: an account identifier, and your email address if you gave one. If you used Apple's Hide My Email, I only ever see the relay address.
• What you put into the app: your setlist, the songs you sing and the nights you sing them, your ratings and how songs felt in your voice, your notes, your profile answers, your stage name, lists you paste in, song books you open, and anything you add to the karaoke map.
• Location, only when you allow it and only as section 5 describes.
• Purchases: what you bought and how many uses you have left. Payment itself is handled by Apple or Google, and I never see a card number.
• Usage and diagnostics: which features get used, crash and error reports, and basic facts about the device (its model, system version, app version, language and country). The app also makes a random install identifier, which describes nothing about you and may be used, for example, to stop abuse and keep invites fair.
• Messages you send me, with the screenshot you chose to attach.

Some things stay on your phone. Venue coordinates (the map position of a bar you logged a sing at) and places you mark as private (a friend's house, an office party) are stored on the device and never leave it. The text of a list you paste in is stored on the device and never synced; we may send its lines to the providers in section 6 to help match them to songs. Reminders such as the morning-after recap, if you allow notifications, may be scheduled on your phone.

3. Your account, and what syncs

KaraokeList opens with no account, and most of it never asks for one. The setlist, logging a night, pasting in a list, identifying a song, sending me a note and browsing the karaoke map all work signed out. An account is for the things that need one, including, for example, syncing, a stage name, song suggestions and the other features that run on our suggestion service, contributing to the map, invites, Apple Music playlist sync on iPhone, and buying.

You can sign in with Apple, with Google, or with an email address and password. Once you are signed in, your data may be copied to a cloud database and attached to your account, so it can still be there on a new phone. It is not published and not visible to anyone else. Your remaining uses may be kept on the server too, so a use you paid for can't be lost with your phone.

4. How we use it

We may use the data described above for purposes including, for example:

• To run the app: for example, syncing your list, writing your suggestions and Voice Print, finding a song you describe, and the rest of what you ask it to do.
• To keep it working and fair: for example, fixing crashes, preventing abuse, and counting uses.
• To improve and develop KaraokeList: understanding which features people use, making them better, and building new ones. This may include looking at data across everyone who uses the app, combined or de-identified: for example, which karaoke rooms run which hosts and song books, or which kinds of songs tend to go well. Used that way, no one is singled out, and we don't try to work out who anyone is.
• To answer you, when you write to me.

What we don't do is just as plain: we never sell your data, we never share it for advertising, and we don't build an advertising profile of you.

5. Location

Location is optional, and the app only asks while you're using it. It reads your location only while you are looking at the screen that needs it: for example, when you tap the venue field while logging a sing, when you open the Places tab or switch to its map, when you tap "I'm here" to find the bar you're in, and, if you have already allowed location, when you open a karaoke host's song book, to name the venue you're in. While the Places map is on screen it may show your position as a dot. It never reads your location in the background, never asks for background access, and keeps no trail.

It may ask for a precise fix, because "which of these bars are you in" needs one, but precision is yours to give. Approximate location still lists the neighborhood, and saying no loses nothing: the search still runs, and whatever you type always saves.

A reading may be used as the patch of the world to search in. It may be sent to the map and place-search providers in section 6, and is not sent to the suggestion service or kept against your account. Where a reading helps name a venue, only the venue is kept, never where you were standing.

6. Who helps run it

KaraokeList relies on a small number of outside companies, each doing one job. They process data on my behalf to provide that service, not for their own purposes.

Google (Firebase and Google Cloud)	May be used for, among other things, accounts and sign-in, the cloud database and server functions, checking that requests come from a genuine copy of the app, usage analytics, and crash reports.
Google (Gemini)	The suggestion service, which we may use for features including, for example, song suggestions, "what's that song?", your Voice Print, song facts, and helping match the lines of a pasted list. It receives only what each feature needs, such as song details and your profile answers, sent from our server. It does not receive your name, your email, your stage name or your location. Where "what's that song?" uses Google Search, Google keeps those searches for up to three days, without anything that says who asked.
Apple and Google sign-in	If you choose to sign in with them.
RevenueCat	Purchases. It may receive your account identifier, the purchase, and basic device facts (a device-level identifier, model, language and store country), so a purchase can work on both iPhone and Android. If you arrived from an Apple Ads search, Apple's campaign token may be sent here too. No advertising identifier.
Apple and Google stores	Payment.
Apple (ShazamKit, music catalog, Maps)	May be used, for example, for identifying a song by listening, which sends a fingerprint of the audio and never a recording; looking songs up and loading cover art, including matching the lines of a list you paste in; and searching for places. On Android the map itself may be Google's.
Discord	May be used to deliver to me the notes you send, requests made on the deletion page, and, on older Android versions, error reports.

Their policies: Google, Firebase, Apple, RevenueCat, Discord. If a provider changes, this table changes with it. What we send the suggestion provider is not used to train its models.

7. Microphone and camera

Microphone. Used only while the Identify screen is open and listening, to make the fingerprint described above. Nothing is recorded or saved, and closing the screen ends it.

Camera. On iPhone, used only while the scan screen is open, to read a karaoke host's QR code. Nothing is recorded, and no image leaves your phone. You can paste the link or pick a photo of the code instead, and picking a photo needs no access to your library. On Android, scanning uses Google's code scanner, which needs no camera permission from KaraokeList. A song book opens in your phone's own browser, and the app reads nothing from the host's page.

8. What other people see

KaraokeList has a shared map of bars that host karaoke, built from what singers contribute. Browsing it needs no account. Contributing needs one and is always deliberate: adding or correcting a venue, voting on its nights, reporting it, or tapping "Yep, it's on" after a sing. What becomes public is the venue information, credited to your stage name. Your stage name is free text and not unique.

Your stage name is the only thing about you other singers ever see: in those map credits, and to the one friend an invite links you with. Your email, your real name, your setlist, your ratings and your sings are never shown to anyone. Logging that you sang somewhere never puts it on the map, and a place you marked as private never can.

Invites and the clipboard

• On iPhone, an invite link is carried through the install on the clipboard. When the app first opens for a guest, it asks the system whether the clipboard holds something that looks like a link, which answers yes or no without the app reading it. The link is read only if you tap Apple's Paste button.
• On Android, the code arrives from Google Play's install referrer. If you haven't used an invite yet, the app may also check the clipboard when it opens, for a KaraokeList invite link or code. Anything else is ignored, and nothing from the clipboard is sent or logged unless it is one of ours.
• Who invited whom is worked out only from the code, never from your IP address or device. The install identifier may be used to keep it to one invite reward per phone.

9. Analytics, and reports when something breaks

The app may use Firebase Analytics to count how features are used, which may include each use of the suggestion service against your account identifier, plus the basics Firebase collects by default (app opens, sessions, device model and system, country). There is no advertising identifier in either app, and nothing that tracks you across other apps or websites. The iPhone app declares no tracking.

If the app crashes or hits an error, a report may go to Firebase Crashlytics with the device facts and where the fault happened. Reports are designed never to contain your name, email, account identifier, setlist, location or a venue name.

"Message the developer" (in Settings, or by shaking your phone) can send what you typed, a screenshot of the screen you were on, your stage name if you have one, basic device facts, and your email if you're signed in, so I can reply. You see all of it before you send, and nothing goes unless you tap send.

This website may use Google Analytics, which sets a cookie and records page views and roughly where readers are. It isn't connected to your KaraokeList account, and any content blocker will turn it off without breaking the site.

10. What KaraokeList never does

• No selling or sharing of personal information, as those words are defined by California law or any other. There never will be.
• No advertising, no ad networks and no data brokers.
• No tracking you across other apps or websites.
• No lyrics. The app stores and shows none; it links out to the publisher's page.
• No posting anything for you. Sharing is always your own tap, through your phone's share sheet.

11. How long it is kept, and deleting it

Your synced data may be kept for as long as your account exists. You can delete your account from inside the app, in Settings. It happens straight away, cannot be undone, and also clears the copy on that phone. Our server then deletes everything else held against the account, including your uses and purchase record, your invite records, and your stage name from everything you contributed to the map. Unused uses are lost with it.

You can also ask to clear your data but keep your account, or delete an account after you've uninstalled, on the deletion page or by email.

A few things may be kept after deletion, and none of them carries your setlist or your name:

• Venue information you contributed may stay on the map, because others rely on it, but your stage name is removed from it.
• Crash reports and usage counts. Ask me and I'll clear the usage counts.
• A note that a phone has claimed an invite reward, with no account on it, so a phone gets one, ever.
• Data already combined or de-identified for improving the app, which no longer identifies you.
• Notes you sent me and deletion requests, kept as messages and as a record the request was honored. Ask and I'll delete your notes.

Purchases are one-time, so there is nothing to cancel. Refunds are Apple's or Google's to give.

12. Children

KaraokeList is made for adults who go to bars and is not directed at children. It is not intended for anyone under 13, and I do not knowingly collect anything from a child under 13. If you believe a child has created an account, write to me and I will delete it.

13. Your rights

Wherever you live, you can ask for a copy of what is held about you, ask me to correct it, or ask me to delete it. Most of that is a button in the app already, but the email address works too, and I will answer within 30 days.

If you are in the EU or the UK

Under the GDPR you have the rights of access, rectification, erasure, restriction, portability, and objection. The legal bases I rely on are: performance of a contract for your account and the features you use; legitimate interests for usage analytics, abuse prevention, and improving and developing the app, which you can object to by writing to me; and consent for location, the microphone, the camera, notifications and your Apple Music library, each asked for separately and each of which you can withdraw in your phone's settings. You may complain to your local supervisory authority.

If you are in California

Under the CCPA and CPRA you have the right to know what is collected, to delete it, to correct it, and to opt out of sale or sharing. There is nothing to opt out of: KaraokeList does not sell or share personal information, and has not in the preceding twelve months. The categories collected are identifiers, purchase history, your own content, product-usage and diagnostic data, and, only when you allow it, geolocation. Where we use de-identified data, we keep it de-identified and do not try to re-identify anyone. I will not discriminate against you for exercising any of these rights.

14. Where it is held, and security

Your synced data is stored in the United States. The suggestion service may answer from a data center anywhere its provider runs one; what it receives is described in section 6, and nothing that names you. If you are outside the US, using the app involves that transfer, which those providers' standard contractual clauses cover.

Everything is encrypted in transit and at rest. Server-side rules let each account read and write only its own data, apart from the shared karaoke map. No method is perfect, but there is no advertising pipeline here and nothing of interest to anyone but you.

15. Changes

If this policy changes, the date at the top changes with it. If a change is material, such as a new kind of data, a new company involved or a new purpose, we may also let you know inside the app.

16. Contact

Michael Jones · support@karaokelist.app

Questions about this policy, requests about your data, or a correction to something above: all to the same address.