Privacy notice
Who is responsible
This notice covers the Apple Music-only public release candidate and the separate TestFlight testing service. Spotify and Soundiiz features described below apply only to TestFlight builds 31–33 where available; they are disabled in the public release candidate. Public App Store availability is not yet confirmed.
Mixtape (OldSchoolMixtape) is operated by YOURYACHTAI LTD, company 16581906, registered office 167–169 Great Portland Street, 5th Floor, London, England, W1W 5PF. For privacy questions or to exercise your rights, email Adrian@coetsee.org. This notice covers the Mixtape app and its supporting service. Apple and other services you choose to use have their own privacy notices.
Information you provide
We process your sign-in phone number, account identifier, display name and account settings. When you add people, we process the names and contact details you select or enter, including people who do not yet use Mixtape. The app uses a contact picker; it does not need you to upload your entire address book. Please only provide another person’s details when you have a legitimate reason to connect with them.
We process songs you save or share, music catalogue identifiers, titles, artists, artwork references, source links, mixtape names, personal messages, group membership, People Lists and delivery information. We also process information you include in feedback, support requests, reports or appeals. Avoid including sensitive information about yourself or others in notes or support requests unless it is necessary.
Private collections, drafts and backups
Your private collection and unsent drafts are not shared with other ordinary users. When signed in, your library is backed up to the Mixtape service so it can be restored. This can include saved people and contact details, songs, lists, drafts, private notes, local song play counts and request history.
These backups are server-readable, not end-to-end encrypted. “Private” describes access by other app users; it does not mean that the service operator or authorised infrastructure providers are technically unable to access the information. Access must be limited to operating, securing and supporting the service.
Music and imported links
Mixtape uses Apple Music and MusicKit for catalogue searches, song information, artwork and user-initiated playback. Apple processes requests under its own terms and privacy policy. An Apple Music subscription and your permission may be needed. Mixtape sends song references and messages to recipients; it does not distribute audio files through its delivery or library-backup service.
When you choose a screenshot for song matching, text recognition runs on your device. Titles and artists you choose to search are sent to Apple Music. The screenshot itself is not uploaded by this matching feature. Mixtape does not automatically read your Instagram Saved collection. Imported links, link previews and YouTube metadata requests can contact the source provider, which may receive your IP address and the requested link. If you open WhatsApp, a browser or another music service, that service’s own privacy terms apply.
Spotify song links In Build 32, you can share an individual song from Spotify or Apple Music into Mixtape and combine their references in one mixtape. For Spotify links, Mixtape may contact Spotify to resolve a shortened link and read public song metadata. Spotify receives the requested link and normal connection information, including your IP address. Matching searches send the title and artist you choose to Apple. You confirm the recording; Mixtape retains the Spotify source link when an Apple catalogue match is chosen. It does not download the recording or import your whole Spotify library.
Your listening-service choice is stored locally. Opening an individual song in Spotify uses its original link where available or an external recording/title-and-artist search. Spotify processes these requests under its own terms. Playback and available recordings depend on your service account.
Playlist export and Soundiiz
Build 32 offers separate playlist copies in Apple Music or Spotify. Nothing is sent to Soundiiz merely because you select Spotify. Only after you confirm the export does Mixtape send Soundiiz the playlist title and selected song titles, artists, available albums and ISRC recording codes, with the app name and Spotify destination. Recipient identifiers, personal notes, Mixtape account details and source URLs are not included in this export payload. The playlist title itself is included, so choose a name you are comfortable sharing. Normal service connection information, such as your IP address, can also reach Soundiiz.
Soundiiz returns a temporary import link, normally valid for 24 hours. Anyone with that link can read the submitted tracklist until it expires. Treat it as a shareable link, not a private Mixtape account page. Link expiry does not prove deletion of all provider records. You continue on Soundiiz, sign in or create a separate Soundiiz account, connect Spotify, check the matches and approve the transfer. Soundiiz and Spotify apply their own terms and privacy practices; Soundiiz privacy and terms are at Soundiiz privacy and terms. Mixtape does not collect your Soundiiz or Spotify password through this flow.
A ready import link is not a completed Spotify playlist. Mixtape does not receive a transfer-completion confirmation from Soundiiz; check its result and your Spotify library. This handoff accepts up to 200 selected songs and does not silently truncate larger lists. There is no automatic synchronization: later changes to your Mixtape do not update an exported playlist.
For Apple Music export, you review the recordings and confirm creation through MusicKit. Apple receives the playlist name and selected recording identifiers. Music permission, an appropriate account and catalogue availability apply. Your original Mixtape and its song order are preserved whichever output you choose.
Technical information and notifications
We process installation identifiers, app version and build, last-open and last-sync timestamps, notification permission status, push tokens and notification preferences. We use these to operate delivery, identify outdated versions and investigate problems. Operational data is associated with your account. It is not a public online-status indicator or a read/listening receipt for other people.
Apple Push Notification service delivers alerts if you allow them. You can change notification permissions in your device settings. Notification alerts use general wording instead of private notes or song titles. Service providers may also process IP addresses, request timestamps, security logs and error information when your device connects. Apple may supply crash reports or TestFlight feedback according to your Apple settings and choices.
Why we use information
We use account and library information to provide the service you request: sign-in, connections, private backup, sharing, playback integration and delivery. Where UK or European data-protection law applies, the basis is performance of our agreement with you.
We use proportionate operational records, selected information about non-user contacts, fraud-prevention information and support/safety records for our legitimate interests in running a reliable service, enabling requested connections and protecting users. We must balance those interests against your rights. We use consent where required for optional permissions or optional processing; you can withdraw consent without affecting earlier lawful processing. We also process information where needed to meet a legal obligation.
You do not have to supply optional notes, contacts or screenshots. Without a sign-in phone number we cannot provide account-based sharing; refusing Apple Music or notification permission affects the corresponding feature. We do not use your information for automated decisions producing legal or similarly significant effects.
Who receives information
The people you choose receive your shared songs and messages. Group participants see the group’s contributions and contributor information. After you send an ongoing Our Mixtape, later songs added to it are shared with the connected person. Removing your copy does not remove someone else’s delivered copy. A recipient may save, export or share what you send.
We use Supabase for account authentication, database storage and backend services; Twilio Verify for sign-in verification messages; and Apple for MusicKit, notifications and any App Store transactions. We use authorised support and infrastructure providers where necessary to operate the service. If you contact us by email, email service providers process your message. We may disclose information where required by law, to protect users and legal rights, or as part of a lawful transfer of the service with appropriate notice and safeguards.
We do not sell personal information or use private messages or Apple Music data for targeted advertising. Any App Store payment is handled by Apple; Mixtape may process transaction identifiers and entitlement status, but does not receive your full payment-card details.
Storage and international processing
The current Mixtape database is configured in London, United Kingdom. This does not mean all processing stays in the UK: Apple, Supabase, Twilio, Soundiiz and their service providers can process information in other countries.
Supabase and Twilio publish data-processing terms describing their processing and international-transfer arrangements. We are checking the arrangements applicable to Mixtape before public launch. We cannot currently confirm a particular safeguard for every provider transfer. Contact Adrian@coetsee.org for the current position and copies or details of applicable safeguards. This notice does not represent that all provider processing remains in the UK.
How long information is kept
Account, library and delivery records are kept while needed to provide your account and the copies of music history you choose to retain. Removal, account deletion and the continued rights of other participants affect how long particular records are needed. Information should not be kept simply because storage is available.
Restricted in-app safety cases have a configured expiry of 90 days from the original request; an appeal does not restart the expiry. After expiry, the case is no longer available through the normal user and support interfaces. Scheduled cleanup now removes eligible expired records and retries only user-requested account erasures. Expiry is not a promise of deletion from every system within 90 days; provider backups and logs have separate retention processes that are still being verified. Contact us for a deletion request or its progress. Other records, including authentication logs, operational logs, provider snapshots, email correspondence and any legally required transaction records, have separate retention requirements. Their duration is determined by the purpose, security and dispute-resolution needs, legal obligations and the provider’s verified deletion/backup cycle.
A minimal deletion-suppression record may be needed to prevent an erased account from reappearing after a restore. Provider backup and log periods are still being verified. We do not promise instant deletion from all backups. Retention is assessed against the continuing service, security, legal and dispute-resolution need for the record; contact us for the position applying to a particular request.
Your choices and rights
Use Account to request a copy of your server account data or request account deletion. You can also email Adrian@coetsee.org. We may ask for proportionate information to verify your identity. Deletion may need retries and provider follow-up; a request being accepted is not a promise that every system or backup has already been erased. Other people’s received copies, their exports and records that must lawfully be retained may remain.
Depending on the law that applies, you may request access, correction, deletion, restriction or a portable copy of your information, and withdraw consent for consent-based processing. Rights have legal exceptions. If another user supplied your contact details and you do not have an account, you can still contact us about your information.
YOUR RIGHT TO OBJECT: You may object to processing based on legitimate interests. Explain your circumstances when you contact us, and we will consider the objection under applicable law. You may complain to the UK Information Commissioner’s Office at ico.org.uk or to your local data-protection authority. You do not have to contact us first to complain.
Children and sensitive information
Mixtape uses Apple’s Declared Age Range response to decide whether to allow adult music content. Without a qualifying adult response, explicit and unrated music remains protected; content identified as clean can be permitted. Mixtape stores a local adult-verification receipt tied to the signed-in account without a daily expiry so the app and its share extension can share the result. This receipt contains an account identifier and timestamp, not a date of birth. Signing out, switching accounts, an under-18 response, a declined or unavailable response, or an invalid receipt removes adult-content access. The receipt survives normal app restarts and is not a claim that Apple will notify Mixtape of every remote change. This is not a guarantee that age has been independently proven, and Apple Music and Screen Time restrictions continue to apply. An App Store age rating describes distribution suitability; it does not independently verify a person’s age. If you believe a child has provided information inappropriately, contact us so we can assess and address it. Music choices and personal messages can reveal sensitive details; please take care with what you include and whom you send it to.
Website and changes to this notice
The Mixtape website is hosted by GoDaddy. Hosting can process IP addresses, browser/request information and performance data. GoDaddy may add hosting performance-measurement code. We have not completed an assessment of all cookies or measurement added by the host. This notice does not claim that the site is cookie-free. You can control stored cookies through your browser settings; doing so can affect website functionality.
We will update this notice when our practices change and show the revision date. Where required, we will give additional notice or obtain consent before materially different processing.