Privacy

The app

The Type Four app plays the music already on your device, and nothing about your music — your library, your tapes, what you have written on them, what you listen to — is ever sent to us. There is no account. When Android's own backup is on — and on most phones it is, by default — your tapes can travel with it, between your phone and your Google account, and never through us.

Two things do reach us from the app: the weekly usage summary described below, which you can switch off, and an audio log, only if you choose to send one.

The audio log is for when playback goes wrong. Tapping Send audio log in Settings opens your own email app with a message to us and a technical log of the deck's recent audio events attached — timings, sound levels, error codes, the app's version and settings, and the phone's make and model, its Android version, and its processor and memory, but no music titles, file names or personal details. Nothing is sent unless you send that email, and once you do, we handle it like any other message you write to us (below).

The weekly usage summary

To learn which parts of the app people use, the app sends us a short summary at most once a week, when you open it. It is on by default. You can turn it off at any time in the app's Settings with the switch called “Help improve Type Four”; while it is off the app counts nothing and sends nothing, and switching it off clears anything it had counted but not yet sent.

A summary holds how many times each of the app's features was used since the last one — tapes made, edited or deleted, Workshop screens opened, the play, flip, wind and eject buttons pressed, the Pro screen opened or closed, and similar counts. It also holds the app's version; the region set in your phone's language settings (not your location); roughly how many tapes are on your shelf (none, 1–5, 6–15, or 16 or more); your total listening time, rounded to the nearest hour; which of the app's settings are switched on; and the length you have chosen for new tapes. It never includes the names of tapes, tracks, artists or albums, anything written on a tape, file names, or anything you type.

The summary itself contains no account, device ID, advertising ID or other identifier, and we store nothing that links one summary to another or to you. Summaries are received and stored by a small service of ours that runs on Cloudflare. We do not store your IP address, or anything else about the connection: only the summary and the day it arrived. Your IP address does reach Cloudflare as part of the request, as with any connection on the internet, and Cloudflare's security systems may record it if a request is blocked as abuse.

Summaries are kept for up to 13 months and then deleted. Our reports show only totals, and hide any figure that covers fewer than five installs of the app. In so far as any of this counts as personal data, our lawful basis is our legitimate interest in understanding which parts of the app are used, so that we can improve it (Article 6(1)(f) UK GDPR); you can object at any time by turning the switch off.

Purchases

Type Four Pro is bought through Google Play. Google handles the payment, and we never see your payment details; Google's own privacy policy covers that part. When you buy Pro, Google Play tells the app, the app checks the purchase on your phone, and your phone remembers that Pro is unlocked. We receive no record of your purchase. The weekly usage summary does not record whether you have bought Pro, although the rough size of your shelf can hint at it, since the free version holds seven tapes.

The unlock is kept only on your phone, and is left out of Android's backup. If you reinstall the app or move to another phone, Pro is restored from your Google account through Google Play. Google Play may also check from time to time that your copy of the app was installed from Google Play.

This site

This website collects an email address only if you ask to hear how to get the app. That address is stored with a timestamp and used only to tell you that — an invitation when there is a public beta to join, and an announcement when each version ships — then deleted, either right after the iOS announcement goes out or sooner if you ask us to remove it. The site is hosted on Cloudflare Pages, and the address itself is stored in Cloudflare's key-value store on our behalf. Like every host on the internet, Cloudflare's operational logs see IP addresses as part of serving requests and warding off abuse — standard, short-lived infrastructure logging, not used to identify anyone.

• No cookies.
• No ads, no trackers — the only analytics counts visits, not people (below).

Cookies and analytics

This site sets no cookies and stores nothing on your device. We serve our own fonts, so viewing a page does not connect you to any third-party font service — the site's security policy enforces that rather than merely promising it.

We use Cloudflare Web Analytics to count visits. Nothing is set that would let anyone recognise you on a later visit — no cookie, no device fingerprint, no visitor identifier — and Cloudflare does not track individual visitors across the sites it counts. The figures we see show that a page was viewed, never who viewed it or in what order. It records the page viewed, the site that referred you, your country, and your device type, browser and operating system, together with measurements of how quickly the page loaded. Your IP address reaches Cloudflare as part of the request and is used to determine the country; it is not used to identify or follow you. Cloudflare keeps detailed measurements for seven days and aggregated figures after that.

The measurement script is Cloudflare's, loaded from their domain; if you'd rather not be counted, a content blocker will stop it — the site works identically without it.

Where your information goes

Some of the services behind this site are provided from outside the UK. Our email is provided by Proton, and anything you write to us is held in that mailbox.

Proton AG is in Switzerland, which is covered by UK adequacy regulations, so no additional safeguards are required for that transfer. Proton uses its own suppliers, some of them outside Switzerland, under the safeguards set out in its data processing agreement.

Cloudflare, Inc. is in the United States. It is certified under the UK Extension to the EU–US Data Privacy Framework, which the UK government has approved by adequacy regulations. Cloudflare's data processing agreement also incorporates the International Data Transfer Addendum to the European Commission's standard contractual clauses, which applies should that certification cease.

Most of what reaches Cloudflare is technical information about a request, and the app's weekly usage summary, which is counts with no identifier. The waitlist address is not: it is stored in Cloudflare's key-value store as an address you typed in, so that transfer carries a direct identifier rather than a measurement.

You can ask us for more information about the safeguards that apply.

Who we are

Type Four is made by Tin Harbour, a trading name of Monivo Ltd, registered in England and Wales (Company No. 16505254), 71‑75 Shelton Street, Covent Garden, London, WC2H 9JQ. Monivo Ltd is the data controller for what the app and this site collect (ICO registration ZC005537). The waitlist email is processed on the basis of your consent (Article 6(1)(a) UK GDPR), and you can withdraw it at any time by asking us to delete your address.

Your choices and rights

Depending on the circumstances, you can ask to access or correct your personal information, have it erased, or restrict its use. You can object to processing based on legitimate interests. Where applicable, you can also request data portability or withdraw consent. These rights are subject to the conditions in data-protection law. Write to hello@tinharbour.com and we will help you exercise them. You can complain to the Information Commissioner's Office at ico.org.uk, whether or not you have contacted us first.

Usage summaries are the exception. Because nothing stored with a summary identifies who sent it, we cannot find the summaries that came from your phone, so we cannot show them to you, correct them or delete them one by one (Article 11 UK GDPR). Turning off “Help improve Type Four” stops any more being sent.

Questions, or want your email deleted?

Write to hello@tinharbour.com — for privacy questions or to have your email removed from the launch list at any time.

If you write to us we receive your address and whatever you choose to put in the message, and we use it to reply and to deal with any follow-up; our lawful basis is our legitimate interest in responding to people who get in touch (Article 6(1)(f) UK GDPR). Writing to us does not add you to anything. We keep correspondence for as long as it takes to resolve your enquiry and delete it when it is no longer needed. That mailbox belongs to Tin Harbour, the studio behind Type Four, and its notice at tinharbour.com/privacy carries the detail.