Privacy Policy

Last updated: March 26, 2026

The short version: SetListr is designed to be privacy-friendly. We don't require an account, we don't collect your email or name, we don't use third-party analytics or tracking SDKs, and almost all your data stays on your device.

Who we are

SetListr is an iOS application developed by Mike Noe, an independent developer based in Connecticut, United States. In this policy, "we," "us," and "our" refer to the developer of SetListr.

What data we collect

Device identifier

When you first launch SetListr, the app generates a random unique identifier (UUID) and stores it securely in your device's Keychain. This identifier is used solely to authenticate API requests to our backend server. It is not linked to your Apple ID, name, email, or any other personal information.

Search queries

When you search for artists or venues, your search text and the number of results returned are sent to our backend server. This data is used to improve search suggestions. Search logs are not linked to any personal identity.

Location data

If you grant location permission for the Discover tab, your approximate coordinates (city-level accuracy) are used to find nearby concerts. Location is requested only when you initiate or refresh a search — there is no background or continuous tracking. You can also enter a custom city instead of using device location. Recent custom locations (up to 10) are stored locally on your device.

Setlist.fm username (optional)

You may optionally enter your setlist.fm username in Settings to sync concerts you've marked as "attended" on setlist.fm. This username is stored securely in your device's Keychain and is sent to our backend only when syncing attendance data. We do not store your setlist.fm password or any other credentials.

App version and request metadata

Each API request to our backend includes your app build number, a timestamp, and an authentication signature. These are used for security, version compatibility checks, and rate limiting.

What we do NOT collect

We do not use any third-party analytics, crash reporting, or advertising SDKs.

Data stored on your device

The following data is stored locally on your device and is never sent to our servers:

This data is removed when you delete the app, except for Keychain items (device ID and optional setlist.fm username), which persist until manually cleared through iOS Settings.

Apple Music

SetListr uses Apple's MusicKit framework to search the Apple Music catalog, play songs, and create playlists. All Apple Music interactions happen directly between your device and Apple's servers. We never access, collect, or transmit your Apple Music library, listening history, or subscription status to our servers.

An active Apple Music subscription is required for playback and playlist features. Browsing setlists does not require a subscription.

Our backend server

All API requests from the app are routed through our backend server (hosted on Cloudflare Workers) rather than directly to third-party APIs. This server acts as a secure proxy to:

Cloudflare may process request metadata (IP address, headers) in accordance with their privacy policy.

Data retention

Data sharing

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes. Data is shared only as described in this policy:

Children's privacy

SetListr is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Your rights

You can exercise the following rights at any time:

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For significant changes, we will include a notice in the app.

Contact us

If you have questions about this privacy policy or your data, contact us at: