Privacy Policy
Last updated: October 18, 2026 — Data controller: Fabio Gaigher — info@sweetspotapp.it
Note on this website (gaigher.it/sweetspot): this static page does not use cookies, tracking scripts, or request data from third-party services (fonts and resources are loaded locally). The following instead concerns the data collected by the S.W.E.E.T.S.P.O.T. App once installed on your device.
1. Data we collect
Provided directly: email address (registration with email/password or Google), public nickname, information about your musical equipment (brand, model, type of guitars, basses, amplifiers and effects).
Profile photo (avatar): optional. It is stored in an area accessible to anyone who knows the file's address (not publicly listed). You can change or remove it at any time from the App.
Generated from App use: AI-generated audio presets, generation request history, ratings and text feedback, generation credit balance and usage.
Technical: device identifiers and technical information for operation and security purposes; interaction data with advertisements (Google AdMob, if applicable).
Interaction with marketplaces: when you tap one of the purchase buttons in a preset (Amazon, eBay, Temu, AliExpress, Thomann) we record the event — the chosen marketplace, the preset involved (if any) and the app's language — for aggregate usage statistics and to measure the effectiveness of purchase suggestions. We never record the specific page or product visited after the click.
Diagnostics and telemetry: events related to sharing or saving your presets, any technical errors that occur while saving, and information about the use of the generation service (e.g. AI model used, amount of processing requested, costs and response times) — collected for service operation, error correction, cost control and service improvement.
Guest account: an anonymous account is still created for technical operation. If you do not complete registration, this data is not associated with a personal identity and may be deleted after a period of inactivity.
Legal basis (GDPR):
- Performance of the service: account, presets, and in general the App's features that you actively use.
- Legitimate interest: diagnostics, security and abuse prevention, cost control, aggregate statistics (including those on marketplaces).
- Consent: personalized advertising and tracking via Google AdMob/UMP and, on iOS, App Tracking Transparency.
2. How we use your data
- Provide core functionality (generation of personalized presets)
- Save and sync your Rig and your presets
- Improve suggestion accuracy through aggregate analysis
- Show advertisements (only if applicable, via Google AdMob)
- Service-related communications
We do not sell your personal data to third parties.
3. Third-party services
| Service | Purpose |
|---|---|
| Supabase | Database, authentication, image storage |
| OpenAI | Preset generation via AI model |
| Google AdMob | In-app advertising (if applicable) |
| Google Sign-In | Optional authentication |
| Cloudflare Turnstile | Anti-bot verification on Guest access/registration — receives the verification token and the technical browser/WebView data needed for the challenge |
| Resend | Transactional email |
Note on OpenAI: to generate presets, we send OpenAI information about your musical equipment and the text of your request (e.g. artist/song or a description of the sound you're looking for). These calls are retained by OpenAI in its own logs for up to 30 days for security and abuse-prevention purposes, not merely processed transiently. Under OpenAI's API data policy, this content is not used to train their models. We never include your email, nickname or other direct identifiers in these calls.
Note on AdMob: if we show advertising, your device's advertising identifier (Advertising ID on Android, IDFA on iOS) may be used. Before loading any ad we require consent through Google's consent management platform (UMP, as required by the GDPR for users in the EU/UK/Switzerland); on iOS we additionally request, via Apple's App Tracking Transparency, a separate permission for IDFA access. If consent or permission is not granted, we do not load any ad for that session.
Transfers outside the EU: some providers (Google, Cloudflare, OpenAI, Resend, Supabase) may process data outside the European Union as well.
4. Affiliate links
Some of the links to external marketplaces shown in presets (Amazon, eBay, Temu, AliExpress) are affiliate links: if you make a purchase after clicking one, we may receive a small commission from the marketplace, at no extra cost to you. We never include personal data in these links — for eBay, for example, the tracking parameter "customid" always has the same fixed value ("sweetspot"), identical for all users and all searches.
As an Amazon Associate I earn from qualifying purchases.
5. Data retention
We retain your data for as long as your account remains active. You can request deletion at any time. Data retained by third-party providers (e.g. the OpenAI logs described in point 3) follow that provider's own retention policies and cannot be deleted through our account deletion procedure.
When an account is closed, some data is deleted and other data is made anonymous (the link to your account is removed, but the data remains, no longer traceable to you) — for the full list see the Account deletion page.
6. Your rights (GDPR)
If you are located in the European Union, you have the right to access, rectify, delete, request portability of your data, object to processing, or lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali). Write to info@sweetspotapp.it to exercise these rights.
7. Account deletion
You can request deletion of your account and all associated data directly from the App (Profile screen) or by writing to info@sweetspotapp.it with the subject "Account deletion request". Processed within 30 days.
8. Minors
The App is not directed at children under 13. We do not knowingly collect data from children under 13.
9. Security
We adopt reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS) and authentication-based access control.
10. Changes to this policy
We may periodically update this policy. Material changes will be communicated through the App or by email.
For any question: info@sweetspotapp.it