Privacy Policy
Last updated October 13, 2026
This explains what Rubber Band (rubberband.app) collects, why, who else handles it, and what you can do about it. Rubber Band is run by Cousins Management Group, LLC.
The short version: we collect what we need to run the app for your band. We don’t sell your information, we don’t show ads, and we don’t use tracking or advertising cookies.
What we collect
Your account. Your name, email address, password (stored only in scrambled form — we can never see it), profile picture if you add one, and settings such as your theme and email preferences.
What you and your band put in. Songs, charts, lyrics and notes; setlists; gigs and rehearsals; availability and time off; venues and their contacts; bookings and the notes you keep on them; money records, such as pay, expenses and payouts; gear lists and stage plots; photos and files; chat messages, reactions and poll votes; practice history. Some of this is about other people — for example a venue manager’s phone number or a client’s email. Please only add details you have a good reason to keep.
Inquiries from your public band page. When someone fills in the booking form on a band’s public page, we collect what they type — name, email, phone, event date, type and location, and their message — and pass it to that band.
Technical details. When you sign in we record when, plus the type of device and browser, so we can keep accounts safe. We use your internet (IP) address briefly to stop people from guessing passwords or flooding forms. Our hosting provider keeps standard server logs for a short time.
Emails we send you. We keep a record of the emails Rubber Band sends (such as invites, reminders and password resets) and whether they were delivered.
Payments. If you buy a paid plan, our payment processor collects your card details. We only receive a reference to your payment, the plan, and things such as the last four digits and expiry date of your card.
How we use it
- To run Rubber Band: show your band its songs, setlists and gigs, sync stage mode, deliver messages.
- To send emails you need, such as invites, gig and rehearsal reminders, and password resets.
- To keep accounts secure and stop abuse.
- To answer you when you contact us.
- To fix problems and work out what to improve.
- To bill you for a paid plan, if you have one.
- To follow the law and respond to valid legal requests.
We don’t sell or rent your information, and we don’t use it for advertising.
Who can see what
- Your bandmates see what the band shares, according to their role. Owners and leaders decide who sees money details. Guests and subs only see what’s needed for the gigs they’re booked on.
- Members who leave a band (not guests or subs) can copy the band’s shared work — songs, charts, setlists, gig history, venues and stage plots — into a band of their own for 30 days. Your contact details, personal notes, chart versions and pay are never part of that copy.
- Anyone can see what a band puts on its public band page, and a stage plot the band chooses to share by link.
- Your private practice space (“My songs”) is only visible to you.
- The song catalog. If your band suggests a song for the shared catalog, the song’s title, artist and details may be shown to other bands once approved. Your band’s name isn’t shown with it.
Companies that help us run Rubber Band
We use a small number of service providers. They handle your information only to provide their service to us.
- Vercel — hosts the app and stores uploaded files.
- Supabase — hosts our database.
- Resend — sends our emails.
- Stripe, our payment processor — handles payments for paid plans.
- MusicBrainz, AcousticBrainz and GetSongBPM — when someone looks up a song, we send them the song title and artist to find its key, tempo and length. We don’t send them anything about you.
If you press play on a YouTube, Spotify or SoundCloud player inside Rubber Band, that service loads in your browser and its own privacy policy applies. YouTube videos load from YouTube’s privacy-enhanced domain.
We may also share information if the law requires it, to protect someone’s safety, or as part of a sale or reorganization of Rubber Band — in which case this policy would still cover your information.
Cookies and storage on your device
We use one cookie, to keep you signed in. It’s needed for the app to work, so there’s nothing to opt into.
Rubber Band also saves some things on your device: your stage mode settings (such as text size and scroll speed), and any shows you save for offline use. These stay on your device until you remove them or clear your browser’s data.
How long we keep it
We keep your account and your band’s content for as long as you use Rubber Band. Sign-in records and security data are kept only as long as needed to keep accounts safe. If you ask us to delete your account, we delete or anonymize your personal information within 30 days, except where we must keep something by law (for example, payment records). Copies in backups expire on their own schedule.
Content you added to a band belongs to the band’s shared records, so deleting your account doesn’t remove it from the band — for example, your past chat messages and the songs you added. We’ll remove your name from them where we can. If you want specific content removed, ask the band owner or contact us.
Your choices and rights
- You can see and change your name, email, picture and settings in your account.
- You can turn off band notice emails in the app. Some emails, such as password resets, always send.
- You can ask us for a copy of your information, to correct it, or to delete your account, by emailing support@rubberband.app. We’ll answer within 30 days.
Depending on where you live, you may have more rights under your state’s or country’s privacy law. We’ll honor those requests too, and we won’t treat you differently for making one.
Keeping it safe
Your data is sent over encrypted connections and stored with providers that encrypt it. Passwords are scrambled so they can’t be read. Each band’s information is walled off from every other band’s, and uploaded files are only shown to signed-in members of the band. No system is perfectly secure, so please use a strong password you don’t use anywhere else. If we learn of a breach that affects you, we’ll tell you.
Children
Rubber Band isn’t for children under 13, and we don’t knowingly collect information from them. If you think a child under 13 has made an account, email us and we’ll delete it.
Where your information is kept
Rubber Band is run from the United States, and your information is stored and processed there. If you use it from another country, your information will be transferred to the United States.
Changes to this policy
If we make a significant change, we’ll tell you by email or in the app before it takes effect. The date at the top shows when this policy last changed.
Contact us
Questions or requests: support@rubberband.app
Cousins Management Group, LLC
See also our Terms of Service and Copyright policy.