Privacy Policy
In short. We collect the minimum needed to run B·SET. You sign in with Apple or Google, no password. Your moments stay on your phone (and, with PERFORM, online for 60 days at most). Crowd-reaction detection happens on your phone: no sound is sent anywhere for it. No ads, no data selling, no cookies on this website. You can delete everything from the app.
1. Data controller
Adrien Bisset, sole proprietor (entrepreneur individuel), SIREN 879 390 284, 12 rue du Général Camou, 75007 Paris, France, is the controller of your data in the B·SET app and on the b-set.app website.
For any question about your data: the contact form (subject "Personal data") or .
2. Data we process
| Category | Data | Where |
|---|---|---|
| Account | Email address (or Apple relay address if you hide yours), Apple or Google account identifier, plan (free / PERFORM), subscription end date, "founder" flag. | Supabase, EU (Ireland) |
| Purchases | Your B·SET account identifier, subscription status, purchase history sent by the store. No payment details at B·SET. | Apple / Google, RevenueCat (United States) |
| Usage analytics | Usage events (opening key screens, starting WATCH, moments, purchases…), a device identifier generated by the app, your email address when signed in, technical information (model, OS, app version). No session recording, no automatic screen capture. | PostHog, EU |
| Moments | Video and sound of moments, and the set they belong to. | Your phone; with PERFORM: a copy on Cloudflare R2 for 60 days |
| Event info | Event link you paste (Shotgun, Resident Advisor, Dice…), and venue name, city and date read from the public event page. | With the set |
| Contact | Name, email, subject and message sent through the contact form or by email. | Web3Forms (form delivery), our mailbox |
We don't ask for your legal name, precise location or contacts.
3. Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Create and manage your account, run the app, store and sync your moments, manage your subscription | Performance of the contract (our terms) |
| Keep accounting records and respond to requests from authorities | Legal obligation |
| Secure the service, prevent fraud and abuse, handle notices | Legitimate interest |
| Measure usage to improve B·SET (analytics) | Legitimate interest, which you can object to at any time (see section 11) |
| Reply to your messages | Legitimate interest (or pre-contractual steps) |
We don't use your data for advertising, don't sell it and make no automated decisions producing legal effects about you.
4. Microphone, camera and moments
The app uses the camera and microphone only when you start WATCH mode. The rolling memory of about 15 seconds stays on your phone and is continuously overwritten: only the moments you trigger (or that AUTO triggers) are saved.
Crowd-reaction detection (AUTO) runs entirely on your phone. No sound is sent to our servers or to any third party for this detection.
Track identification. To find the titles of the tracks played during your moments, the app uses Apple's ShazamKit: it computes an audio signature on your phone and sends it to Apple to match it against the Shazam catalogue. This signature cannot be used to rebuild the recording, and neither the sound nor the video of your moments is sent. Apple processes this signature under its own privacy policy.
On the free plan, your moments only leave your phone if you export or share them yourself. With PERFORM, a copy is sent to our hosting provider for at most 60 days and then deleted.
Web alpha on b-set.app
The web alpha works without an account. The camera and microphone are used in your browser, and your videos are saved in your browser's storage, on your device: nothing is sent to our servers. You erase them by deleting your videos in the alpha or clearing the site's data in your browser. If a usage study is offered to you, it only starts with your consent (PostHog, EU), and you can decline without losing access.
5. People who are filmed
Moments may show other people (crowd, staff, artists). The DJ films on their own behalf and decides what to keep and post: they are responsible for respecting image rights (see our terms). B·SET only hosts the moments for them.
We don't look at moments, extract no data about the people in them and use no facial recognition.
If you appear in a moment and want it removed, please contact the DJ first; you can also write to us via the contact form (subject "Content report").
6. Recipients and processors
Your data is only accessible to the publisher and to the providers strictly needed, acting on our instructions (processors) or on their own behalf where stated:
| Provider | Role | Location |
|---|---|---|
| Supabase | Account database | EU (Ireland) |
| PostHog | Usage analytics | EU |
| Cloudflare | Website hosting, email routing, online storage of moments (PERFORM) | US company; global network |
| RevenueCat | Subscription status management | United States |
| Web3Forms | Delivery of contact form messages | Possibly outside the EU |
| Apple, Google | Sign-in, app distribution, subscription payments, track identification (ShazamKit, Apple) — controllers for their own services, under their own policies | Worldwide |
We may also disclose data to authorities where the law requires it.
7. Transfers outside the EU
Some providers (RevenueCat, Cloudflare, Web3Forms, Apple, Google) may process data outside the European Union, in particular in the United States. These transfers rely on an adequacy decision (EU–US Data Privacy Framework, for certified companies) or, otherwise, on the European Commission's standard contractual clauses, with supplementary measures where needed. You can ask us for more information on these safeguards.
8. Retention periods
| Data | Period |
|---|---|
| Account and event info | Until your account is deleted |
| Moments on your phone | As long as you keep them (you delete them yourself) |
| Online moments (PERFORM) | 60 days, then permanent deletion |
| Usage analytics | 12 months |
| Accounting records | 10 years (legal obligation) |
| Contact messages and notices | While handling your request, then up to 3 years so we can follow up or show how it was handled |
Technical backups are erased according to their rotation cycle, shortly after deletion.
9. Your rights
You have the following rights over your data:
- access: know what data we hold and get a copy;
- rectification of inaccurate data;
- erasure: directly from the app (see below) or on request;
- portability: receive your data in a common format;
- objection, in particular to usage analytics;
- restriction of processing in certain cases;
- withdrawal of consent at any time, where processing relies on it;
- setting instructions about your data after your death (French law).
To exercise them: the contact form (subject "Personal data") or , ideally from the email address linked to your account. We reply within one month (extendable by two months for complex requests, in which case we tell you).
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL, or the authority of your EU country.
10. Deleting your account and data
From the app: My account › Delete my account. This deletes your account and your data on our servers (account, sets, online moments, and analytics linked to your account), except data the law requires us to keep (accounting records).
Without the app: send us a request via the contact form (subject "Personal data") from the email address linked to your account. We handle it within one month.
Moments stored on your phone are not affected: delete them from the app or your gallery. Deleting your account does not cancel your PERFORM subscription: cancel it in your store settings.
11. Analytics and trackers
In the app: we use PostHog (EU hosting) to understand how B·SET is used and improve it. For this, the app generates a device identifier stored on your phone. No session recording, no automatic screen capture, no ad tracking, no sharing with ad networks.
You can opt out at any time with the "Help improve B·SET" switch in My account. Once turned off, the app stops sending analytics events.
On this website: no cookies, no audience measurement, no third-party fonts or scripts loaded when you browse. The contact form only sends your information to Web3Forms when you click "Send".
12. Minors
B·SET is for people aged 18 and over. We don't knowingly collect data about minors. If you think a minor has created an account, write to us and we will delete it.
13. Security
We protect your data with appropriate measures: sign-in through Apple or Google (no password stored with us), encrypted connections (HTTPS), strict database access rules, access limited to those who need it, and providers contractually bound on security. No system is flawless: in case of a data breach likely to put you at risk, we will tell you and notify the CNIL as the law requires.
14. Changes
We update this policy when the service or the law changes. The update date is shown at the top of the page; for significant changes, we notify you in the app or by email. This English version is a translation; the French version prevails in case of discrepancy.