Privacy Policy

Who we are

Entrance Music (the "App") is operated by Blueshoon ("we", "us", "our"). The App is a social utility that plays a custom arrival soundtrack on a friend's phone when you come into close physical proximity of them. This policy explains what personal data we collect to make that work, how we use it, and the choices you have.

We don't run advertising. We don't sell your data. We try hard to collect as little as possible and to keep what we have locked down on our servers.

What we collect

Account information

When you sign in with Google, we receive your email address, display name, and profile photo URL from your Google account. We store these in our backend (Firebase) to identify you and display you to your friends.

Profile content you create

Your chosen entrance music (track title, artist, preview URL from iTunes, start time, duration)
Your custom entrance message and color theme
Photos or GIFs you upload for your entrance animation
Stickers you place on your entrance
Your friends list and incoming/outgoing friend requests
Your notification and proximity preferences

Location data

The App asks for foreground and background location permission. When you grant it, the App continuously updates your current latitude/longitude in our backend so our servers can detect when you and a friend are within your chosen trigger range (default 60 ft / ~18 m).

Location is the most sensitive data we handle. It's shared with our backend only; it's not visible to other users beyond the computed "is this friend nearby right now" signal.

Device push token

So that your friends can trigger the arrival sound on your phone, we store a push notification token (Firebase Cloud Messaging) tied to your account. It's removed when you sign out on that device.

Contacts (optional, on-device)

If you grant contacts permission, the App can check your contacts against registered users so you can add them as friends. Your contacts are processed on your device. Only the phone numbers we compare against are sent to our matching service, and we don't store a copy of your contact book.

Entrance history

Each time the App triggers (or intentionally skips) an entrance for a friend, we log a small record: who approached whom, when, the distance, and whether it played or was suppressed (e.g. by cooldown or silent hours). This history powers the cooldown logic and the "recent arrivals" feed on your home screen.

How we use it

To play the right music, with the right animation, for the right person at the right time.
To compute whether you're close enough to a friend to trigger an entrance.
To send you push notifications (friend requests, arrivals, acceptances).
To enforce per-friend cooldowns and silent hours so the App doesn't become obnoxious.
To detect and block abuse (daily rate limits on friend requests, blocked users).
To operate, maintain, and improve the service.

We do not use your data for advertising, sell or rent it to third parties, or profile you for any marketing purpose.

We use a small set of service providers to run the App. Each of them sees only the slice of your data needed for their job.

Google (Firebase, Google Cloud) — hosts our authentication, database, file storage, push-notification delivery, and cloud functions. Google's handling of this data is governed by Google Cloud's terms.
Apple (iTunes Search API) — when you search for music or preview a track, your search query is sent to Apple. Apple may log this request per its own privacy policy. We do not send them any account information.
Giphy — GIF search and image delivery. Your search text is sent to Giphy. We don't send them account info.
Expo / EAS — build and over-the-air update delivery. They see anonymous update-check requests keyed to a randomly generated install ID.

Other than these providers (and any disclosure required by law), we don't share your personal data with anyone.

How long we keep it

We keep your profile, friendships, and entrance history for as long as your account exists. If you ask us to delete your account, we remove your profile, your uploaded images, your friendships, and your entrance history. A location document tied to your account is also removed; background log entries tied to infrastructure may persist for up to 30 days before rolling off.

Your rights

You can, at any time:

Turn off location sharing in the App's settings, or revoke the permission in your device's system settings.
Disable push notifications from your device settings.
Remove friends, which stops all entrance triggers between you.
Clear the songs/images you've uploaded by replacing or removing them in the App.
Request a copy of your data, or delete your account entirely, by emailing us (see Contact).

If you're in the EU, UK, California, or another jurisdiction that grants data-subject rights (access, correction, erasure, portability, objection), those rights apply here too. Email us and we'll honor them.

Security

Data in transit between your device and our backend is encrypted (HTTPS/TLS). Data at rest on Firebase is encrypted by Google's infrastructure. Firestore access is gated by server-side rules so one user cannot read another user's data except for the narrow slices the App is designed to share (your display name and photo are visible to your accepted friends; your location is never directly visible to anyone).

That said, no system is perfectly secure. If we ever discover a breach of data that identifies you, we'll notify you promptly.

Children

Entrance Music is not directed at children under 13, and we don't knowingly collect data from them. If you believe a child has created an account, contact us and we'll remove it.

Changes to this policy

We may update this policy as the App evolves. When we do, we'll change the "Last updated" date at the top of this page. If the change is material (e.g. a new category of data or a new data-sharing partner), we'll also notify you inside the App.

Contact

Questions, data requests, or concerns: roy@blueshoon.com.