About the service · Updated October 8, 2026

Privacy policy

Dizzy is a private listening room for bands, currently in friends testing. This policy explains the information used to provide it.

Information we use

Google sign-in provides your account identifier, verified email address, name and profile picture. We use them to sign you in, identify you to bandmates and match invitations to the invited email. We request basic identity scopes, not access to your Gmail messages, Google Drive files or Google Calendar.

The app stores band names, membership and invitation details; uploaded rehearsal audio and recording metadata; songs, takes, marks, comments and reactions; scheduled rehearsals and availability you publish; and account preferences. Listening presence can show bandmates that you are listening and, when enabled, your position and Follow state. You can turn listening-position sharing off in account settings.

How information is shared

Band content is available to signed-in members of that band according to their roles. Bandmates can see your name and profile picture. Owners manage invitations and membership; a Listener role does not grant editing rights. The public website uses fictional examples and does not publish private band recordings.

Convex provides authentication and shared app data. Cloudflare Pages hosts the website and app, and private Cloudflare R2 storage holds audio. Google processes sign-in. Resend processes invitation recipients and the email contents, including the band name and invitation link. These providers process information needed to deliver their services and may keep operational or security records under their own policies. If you use a separately enabled payment flow, Polar processes payment information; Dizzy stores the customer/subscription identifiers and status needed to reconcile that flow. The current friends-testing service does not offer a public paid launch.

We use this information to operate the service, protect access, handle support and resolve errors. We do not sell Google identity or band content or use it to serve advertising. Authorized operators may access service data when needed for support, security or recovery.

Browser storage and diagnostics

The app uses browser storage for sign-in state, preferences and saved drafts. Drafts can remain on your device until cleared; protect access to shared devices. The public website has no added analytics or advertising tracker. The app collects daily counts of predefined problem categories without attaching user or recording identifiers, error text or URLs to those counts; these counts expire after about seven days. Hosting providers may separately process request metadata such as IP addresses for delivery and security.

Retention, removal and recovery

Shared content remains available until an authorized removal or deletion. Removing band access prevents new authorized requests, but cannot recall copies someone already downloaded or audio already buffered; issued playback links can remain valid for up to five minutes.

Permanent rehearsal or mark deletion retains minimal receipts containing opaque identifiers so recovery does not revive accepted deletions. Those receipts are kept while older snapshots or exports could be restored. Database backups omit audio; restored data must preserve current permissions and deletion state. Backups and temporary recovery exports can contain earlier data, and full-app recovery is not guaranteed. We cannot promise immediate physical erasure from provider backups, logs or internal retention systems.

Contact privacy@getdizzy.net to request access, correction or deletion of your personal information, including account information. We may need to verify your identity and distinguish your personal information from shared band content and records needed to preserve deletion or security guarantees. Clearing browser storage does not delete shared server data.

Contact and changes

For privacy questions, use privacy@getdizzy.net. For app help, use support@getdizzy.net. We will update this page when the service's data practices change and provide notice or request consent where required before using Google data for a new purpose. See our terms of use.