Amp’d Privacy Policy
Last updated 25 October 2026.
Amp’d lets friends on different music services build playlists together. This page explains what Amp’d collects, why, and how to delete it. Amp’d is run by Aniket Agarwal ("we"). Questions: hello@aniketagarwal.com.
What we collect
Your account and phone number. You sign in with your phone number. Each time, we send the number to Twilio, which texts you a code to prove it’s yours. Your number is kept with your account so you can sign in with it again. Accounts made earlier with Sign in with Apple also keep the identifier Apple gave us, and the email address if Apple shared one.
Your profile. The display name, username and avatar you pick (an emoji, or a photo you choose), your anthem song, and which music service you prefer.
What you make in the app. Playlists, the songs you add, notes on songs, reactions, chat messages, and playlist covers (photos you choose, drawings, text and stickers). Other members of a playlist can see what you add to it, including when you joined, added a song or reacted. Your display name, username, avatar and anthem can be seen by other people using Amp’d.
Being found by friends. When you sign up, friends who have your number saved can find you on Amp’d and add you to playlists. To do that we keep a scrambled copy of your number (a SHA-256 hash) to match against friends’ contacts. You can turn this off at any time in Profile → Friends can find me, which deletes the scrambled copy. Your number is never shown to other people.
Your contacts, if you allow it. Only to find friends who already use Amp’d. Your contacts’ phone numbers are scrambled (SHA-256) on your phone, and only the scrambled numbers are sent to us. We compare them with the numbers people have added to Amp’d and send back who matched. We do not store your contacts, their names, their numbers or the scrambled numbers, and we never contact anyone from your contacts. When you invite someone by text, Amp’d opens your phone’s Messages app with the invite filled in; you see the whole message and send it yourself, from your own number.
Friends without the app. When someone adds songs from a playlist’s web page, they get a temporary anonymous account; the name they type and the songs they add are stored like any other member’s.
Notifications. If you allow notifications, we store your device’s push token so we can tell you when someone joins, adds you to a playlist, reacts or messages. It is removed when you sign out.
Reports and blocks. When you report a message, note or person, we keep the report: who sent it, who it’s about, the reason you picked and a copy of what was reported, so we can review it. We look at reports within 24 hours and remove content or accounts that break the rules. When you block someone, we keep that so their messages and notes stay hidden from you and they can’t add you to playlists. You can unblock people in Profile → Blocked People.
Music service connections.
- Apple Music. With your permission, Amp’d searches the Apple Music catalog, plays songs, shows your recently played songs so you can add them, and can save a playlist to your library. Your listening history is read on your device to show it to you; it is not stored on our servers. Only songs you choose to add to a playlist are saved. Song searches and 30-second previews come from Apple’s iTunes Search service.
- Spotify and Tidal. If you connect one, you sign in with that service and we receive a token that lets Amp’d search it and save playlists to your account. The token is kept in your device’s Keychain.
- YouTube. When a song isn’t available on your service, Amp’d looks it up on YouTube and plays it in YouTube’s embedded player. Amp’d uses YouTube API Services; YouTube’s use of your data is covered by the Google Privacy Policy and the YouTube Terms of Service.
What we don’t collect. No advertising identifiers, no location, no analytics or tracking across other apps or websites. We don’t sell personal data.
How we use it
Only to run the app: to sign you in, show your playlists to you and the people you share them with, help you find and add friends, send the notifications you allow, match songs across services, and keep the service working and secure.
Who else handles it
- Supabase stores Amp’d’s data and runs its server code, on servers in the United States.
- Twilio receives your phone number to text you a sign-in code.
- Vercel hosts the playlist web page friends use without the app.
- Apple (push notifications, Apple Music and iTunes Search), Google (YouTube), Spotify and Tidal handle the parts described above.
Each is only given what it needs for that job. Cover photos and stickers are stored as files whose web addresses are public to anyone who has the link.
Keeping and deleting your data
Your data is kept while your account exists. You can delete your account at any time in the app: Profile → Delete Account. This permanently removes your profile, your phone number, the playlists you own (for everyone in them), and the songs, notes, reactions, messages and cover images you added. You can also ask us to delete your data by writing to hello@aniketagarwal.com.
Song matches found on YouTube are kept for at most 30 days.
Children
Amp’d is not for children under 16, and we do not knowingly collect their data.
Changes
If this policy changes in a way that matters, we will update this page and the date above.