What we collect, and why.

Teca is operated by LOUIE & TODD INC. ("we", "our"). This policy covers both the Teca iOS app and the teca.wtf landing page.

Data we collect

• Account identifier. When you sign in with Apple, we receive an Apple-issued user ID and, if you choose to share it, your name and a relay email. We use this to identify your account and sync your collection across devices.
• Your collection & wantlist. Records, crates, wantlists, setlists, and notes you add to Teca are stored on our server so they follow you between devices. You can delete any of this at any time from inside the app.
• Discogs link (optional). If you choose to sync with Discogs, you sign in on Discogs' own site. We store the access token Discogs issues, never your Discogs password, and use it only to read your Discogs collection/wantlist. Disconnect anytime from Discogs settings.
• Spotify link (optional). If you choose to connect Spotify, you sign in on Spotify's own site. We store the access token Spotify issues, never your Spotify password, and use it only to read your saved albums, tracks, and playlists so you can import them into your Teca wantlist or collection. Imported records are stored like any other entry in your account. Disconnect anytime from the Account screen in the app or from Spotify's app settings.
• Scan photos and videos. When you use AI Scan, the sleeve photo or a short scan video (up to about 10 seconds) is sent through our server to Google Gemini, a third-party AI service, for identification. Photos and videos are processed per request only and are not retained on our server.
• Product analytics in the iOS app. Release builds of the Teca app send usage events to PostHog, our product-analytics processor. This is a fixed list of 20 named events (things like app opened, signed in, scan started or succeeded, search performed, record added, crate created, setlist created, preview played), and when you are signed in the events are identified by your Apple-issued Teca user ID so we can see how the app is used across sessions. No advertising identifiers, no ad networks, and no tracking across other companies' apps or websites. Development and test builds send nothing.
• Waitlist signups. On the landing page we store your email and (optionally) phone number, plus the page that referred you, your browser's user-agent string, and a salted one-way hash of your IP address (we don't keep the raw IP) used to rate-limit abuse. Only used to email or text one note when early access opens. We keep waitlist entries until the app ships or you ask us to delete yours, whichever comes first.
• Product analytics on this website. The landing page loads PostHog, a product-analytics tool, which sets a first-party cookie holding a random visitor ID and records page views, clicks and other interactions, the referring page, and coarse technical details (browser, operating system, and an approximate city/country derived from your IP). We use it to see how many people reach the page and how many finish signing up. When you successfully join the waitlist, we pass your email to PostHog as the identifier for your visitor profile, so those events are linked to you. PostHog processes this data on servers in the United States, and can also record a replay of your visit to this page if we switch that feature on. Analytics are not loaded when the page is opened on localhost, and we don't run ad networks, ad SDKs, or cross-site advertising trackers. These events live in PostHog under our plan's retention settings; we don't keep a separate copy.
• Basic request logs. Standard server access logs (request time, path, status, hashed IP) retained ≤ 30 days for abuse prevention and debugging.

What we don't collect

• No ad SDKs, ad networks, or cross-site advertising trackers.
• No advertising identifiers (IDFA) and no tracking of you across other companies' apps or websites.
• No selling or renting of your data. We share it only with the processors listed below.
• No precise location, contacts, microphone, or health data.

Who processes your data

• Railway: application hosting + Postgres database.
• Apple: Sign in with Apple, receipts for optional subscriptions.
• Discogs: only if you connect your account.
• Spotify: only if you connect your account.
• Google Gemini: only for the sleeve photos and scan videos you submit.
• PostHog: product analytics for the iOS app and this website (US-hosted).

Opting out of analytics

On this website, any browser tracking-protection or content blocker that blocks us.i.posthog.com stops analytics from loading; the page works fine without it. In the iOS app, release builds always send the events listed above: with a random per-launch identifier while you are signed out, and tied to your user ID once you sign in. There is no in-app analytics toggle today. You can email us and we'll delete the analytics profile tied to your account or address, along with any waitlist entry.

Your rights

You can delete your account directly in the app: Account, then Delete account. This wipes your collection, wantlist, crates, and setlists from our server, signs you out everywhere, deactivates the account, and asks Apple to revoke Teca's Sign in with Apple access. Deleted data is not recoverable. If you sign in again later with the same Apple ID, you start over with a clean, empty account. You can also request access, export, correction, or deletion of your data at any time by emailing 32_false.ascot@icloud.com from the address tied to your account.

Children

Teca is not directed at children under 13 and we do not knowingly collect data from them.

Changes

If this policy changes in a material way, we'll update the "last updated" date above and email waitlist and account holders.

Contact

LOUIE & TODD INC.
Questions or data requests: 32_false.ascot@icloud.com