Privacy Policy

Last updated: November 5, 2026

This policy describes what Bandy collects, why, and what you can do about it. Bandy is the iPhone app Bandy Widget and the website getbandy.app, made by Aleksandr Egorov ("we", "us"). It is written for the current version of the app: a test build distributed through TestFlight.

1. The short version

No accounts. You don't sign up, and we don't know who you are.
One pic at a time. The pic you drop goes to our server so your band's widgets can show it. The next pic from anyone in your band replaces it.
No tracking. No analytics, no ads, no advertising identifiers, no third-party SDKs. We don't sell anything about you.

2. What we collect

The pic you drop. The photo you take with the camera or pick from your library. Our server resizes it to two sizes (about 600 and 1200 pixels) and stores those. We never use pics for marketing, never sell them, and never show them outside your band.
Your band code. A shared code built into your TestFlight build that tells the server which band you are in. It is not tied to your name, phone number or Apple ID.
Technical logs. Like any server, ours logs each request: IP address, time, request path and the app's version string. Logs are kept by our hosting provider for up to 30 days and are used only to keep the service running and to investigate abuse.

The app currently sends no name with a pic: the server records it as dropped by "someone".

3. What we don't collect

Your name, email, phone number, contacts, location, your photo library beyond the one pic you pick, advertising identifiers, device fingerprints, analytics or crash reports through third parties. Nothing leaves your iPhone unless you drop it.

4. Camera and Photos

Bandy asks for camera access when you open the camera screen and uses it only to take the pic you are about to drop. Picking from your library goes through Apple's picker, so Bandy sees only the pic you choose. You can turn camera access off in Settings at any time; the widget keeps working.

5. Where your data lives

Our server and its Postgres database run on Railway (Railway Corp., USA) in the European Union (europe-west4, Amsterdam) region. Railway processes the data on our behalf and does not use it for its own purposes. The website is served by Cloudflare, which sees the ordinary technical details of each page request. No one else receives your data.

6. How long we keep it

The picUntil the next pic from your band replaces it, or until we delete it on request

Band codeFor as long as the band exists

Server logsUp to 30 days

7. Your rights

Wherever you live, you can ask us to delete the current pic or tell you what we hold. Write to privacy@getbandy.app. Because there are no accounts, we may ask you to describe the pic or confirm your band code so that we delete the right thing.

If you are in the EU, EEA or UK: we process pics to deliver the service you asked for (GDPR Article 6(1)(b)) and server logs in our legitimate interest in keeping the service secure (Article 6(1)(f)). You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your data protection authority.

8. Children

Bandy is not for children under 13, and we don't knowingly collect anything from them. If you believe a child has used Bandy, write to privacy@getbandy.app and we will delete what we hold.

9. Changes

When this policy changes, the date at the top changes with it. Changes that matter are announced in the app's release notes.

10. Contact

Privacy questions and deletion requests: privacy@getbandy.app. Everything else: Support.